jvs-ppt-ui 0.0.17 → 0.0.19

package/src/components/material/useDamAuth.ts

@@ -0,0 +1,445 @@
+import { ref, computed, onMounted, onUnmounted } from 'vue'
+import { useSlides } from '../../composables/useSlides'
+
+/**
+ * 读取指定名称的 Cookie
+ */
+export function getCookieValue(cname: string): string {
+  if (typeof document === 'undefined' || !document.cookie) return ''
+  const name = cname + '='
+  const parts = document.cookie.split(';')
+  for (let i = 0; i < parts.length; i++) {
+    const item = parts[i]?.trim()
+    if (item && item.indexOf(name) === 0) {
+      try {
+        return decodeURIComponent(item.substring(name.length))
+      } catch {
+        return item.substring(name.length)
+      }
+    }
+  }
+  return ''
+}
+
+/**
+ * 从 Storage 中读取指定 key（兼容 jvs- 前缀包装格式与原始字符串格式）
+ */
+function readStorageKey(storage: Storage | undefined, key: string): string {
+  if (!storage) return ''
+  try {
+    const raw = storage.getItem(key)
+    if (!raw) return ''
+    try {
+      const parsed = JSON.parse(raw)
+      if (parsed && typeof parsed === 'object' && 'content' in parsed) {
+        return typeof parsed.content === 'string' ? parsed.content.trim() : ''
+      }
+      if (typeof parsed === 'string') return parsed.trim()
+    } catch {
+      return raw.trim()
+    }
+  } catch {
+    return ''
+  }
+  return ''
+}
+
+/**
+ * 向 Storage 写入 jvs- 标准包装格式数据（对齐 jvs-material-ui / jvs-narrivo-ai-ui 的 setStore 规范）
+ */
+function writeJvsStore(name: string, content: string): void {
+  if (typeof window === 'undefined' || !window.localStorage || !name) return
+  try {
+    const payload = JSON.stringify({
+      dataType: typeof content,
+      content,
+      datetime: Date.now()
+    })
+    window.localStorage.setItem(`jvs-${name}`, payload)
+    if (window.sessionStorage) {
+      window.sessionStorage.setItem(`jvs-${name}`, payload)
+    }
+  } catch {
+    // 忽略隐私模式或配额异常
+  }
+}
+
+function removeJvsStore(name: string): void {
+  if (typeof window === 'undefined') return
+  try {
+    window.localStorage?.removeItem(`jvs-${name}`)
+    window.localStorage?.removeItem(name)
+    window.sessionStorage?.removeItem(`jvs-${name}`)
+    window.sessionStorage?.removeItem(name)
+  } catch {
+    // ignore
+  }
+}
+
+/**
+ * 提取 jvs_session_v3 登录凭证
+ * 判定顺序：
+ * 1. document.cookie 中的 jvs_session_v3 或 Set-Cookie（非 HttpOnly 场景）
+ * 2. localStorage / sessionStorage 中的 jvs_session_v3、jvs-jvs_session_v3、jvs-sessionV3、sessionV3、jvs-access_token
+ * 3. materialHeaders 中显式传入的 jvs_session_v3 或 Authorization
+ */
+export function resolveJvsSessionV3(extraHeaders?: Record<string, string>): string {
+  if (typeof window === 'undefined') return ''
+
+  // 1. Cookie: jvs_session_v3（若未开启 HttpOnly 可直接读取）
+  const fromCookie = getCookieValue('jvs_session_v3') || getCookieValue('Set-Cookie')
+  if (fromCookie && fromCookie.trim()) {
+    return fromCookie.trim()
+  }
+
+  // 2. LocalStorage / SessionStorage
+  const candidateKeys = [
+    'jvs_session_v3',
+    'jvs-jvs_session_v3',
+    'jvs-sessionV3',
+    'sessionV3',
+    'jvs-access_token',
+    'access_token'
+  ]
+  for (const key of candidateKeys) {
+    const localVal = readStorageKey(window.localStorage, key)
+    if (localVal) return localVal
+    const sessionVal = readStorageKey(window.sessionStorage, key)
+    if (sessionVal) return sessionVal
+  }
+
+  // 3. 外部注入的 Headers
+  if (extraHeaders) {
+    const headerVal =
+      extraHeaders['jvs_session_v3'] ||
+      extraHeaders['JVS_SESSION_V3'] ||
+      (extraHeaders['Authorization'] ? extraHeaders['Authorization'].replace(/^Bearer\s+/i, '') : '') ||
+      (extraHeaders['authorization'] ? extraHeaders['authorization'].replace(/^Bearer\s+/i, '') : '')
+    if (typeof headerVal === 'string' && headerVal.trim()) {
+      return headerVal.trim()
+    }
+  }
+
+  return ''
+}
+
+/**
+ * 提取服务网关 Origin 前缀（如配置了完整域名则复用该域名，否则使用当前站点相对路径 ''）
+ */
+export function resolveGatewayOrigin(configuredUrl?: string): string {
+  if (configuredUrl && /^https?:\/\//i.test(configuredUrl.trim())) {
+    try {
+      const u = new URL(configuredUrl.trim())
+      return u.origin
+    } catch {
+      return ''
+    }
+  }
+  return ''
+}
+
+/**
+ * 提取 DAM 服务基础路径（默认 /jvs-dam）
+ */
+export function resolveDamBaseUrl(configuredUrl?: string): string {
+  if (configuredUrl && configuredUrl.trim()) {
+    const clean = configuredUrl.trim()
+    const damIdx = clean.indexOf('/jvs-dam')
+    if (damIdx >= 0) {
+      return clean.slice(0, damIdx + '/jvs-dam'.length)
+    }
+  }
+  return '/jvs-dam'
+}
+
+export type DamMainTab = 'search' | 'mine' | 'create'
+
+/**
+ * 跨组件共享的素材库顶层 Tab 状态（支持画布占位符「AI生成」直接跳转至「创建素材」）
+ */
+const sharedMaterialMainTab = ref<DamMainTab>('search')
+
+/**
+ * 针对主域 .bctools.cn 下 HttpOnly Cookie (jvs_session_v3) 的服务端换取/探测状态
+ * 说明：当 jvs_session_v3 设置了 HttpOnly=true 时，前端 document.cookie 无法直接读取，
+ * 需通过同域/跨子域携带 Cookie 请求 /jvs-system/login/token（对齐 jvs-material-ui / jvs-narrivo-ai-ui）换取 sessionV3。
+ */
+const remoteSessionToken = ref<string>('')
+const remoteCookieSessionVerified = ref<boolean>(false)
+let inFlightSessionProbe: Promise<boolean> | null = null
+let hasInitialProbed = false
+
+export function setSharedMaterialMainTab(tab: DamMainTab) {
+  sharedMaterialMainTab.value = tab
+}
+
+/**
+ * DAM 登录态与通用请求工具 Composable
+ */
+export function useDamAuth() {
+  const { materialApiUrl, materialHeaders } = useSlides()
+  const sessionTick = ref(0)
+  let pollTimer: ReturnType<typeof setInterval> | null = null
+
+  const damBaseUrl = computed(() => resolveDamBaseUrl(materialApiUrl.value))
+  const gatewayOrigin = computed(() => resolveGatewayOrigin(materialApiUrl.value))
+
+  /**
+   * 通过服务端接口换取/校验主域 (.bctools.cn) 下的 HttpOnly jvs_session_v3 Cookie
+   */
+  async function probeRemoteSessionV3(force = false): Promise<boolean> {
+    if (typeof window === 'undefined') return false
+
+    const localToken = resolveJvsSessionV3(materialHeaders.value) || remoteSessionToken.value
+    if (localToken && !force && hasInitialProbed) {
+      return true
+    }
+
+    if (inFlightSessionProbe) {
+      return inFlightSessionProbe
+    }
+
+    inFlightSessionProbe = (async () => {
+      hasInitialProbed = true
+      const origin = gatewayOrigin.value
+
+      // 1. 标准 JVS 换取方式：请求 /jvs-system/login/token（浏览器自动携带 .bctools.cn 下的 HttpOnly jvs_session_v3）
+      try {
+        const tokenResp = await fetch(`${origin}/jvs-system/login/token`, {
+          method: 'GET',
+          credentials: 'include',
+          headers: {
+            'jvs-rule-ua': encodeURI('2.4'),
+            ...(materialHeaders.value || {})
+          }
+        })
+
+        if (tokenResp.ok) {
+          const text = (await tokenResp.text()).trim()
+          if (text && !text.startsWith('<')) {
+            const parsed = JSON.parse(text)
+            const code = parsed?.code ?? parsed?.data?.code
+            const tokenData = parsed?.data?.data !== undefined ? parsed.data.data : parsed?.data
+
+            if (code === 0) {
+              const tokenStr =
+                typeof tokenData === 'string'
+                  ? tokenData.trim()
+                  : typeof tokenData?.access_token === 'string'
+                    ? tokenData.access_token.trim()
+                    : ''
+
+              if (tokenStr) {
+                remoteSessionToken.value = tokenStr
+                remoteCookieSessionVerified.value = true
+                writeJvsStore('sessionV3', tokenStr)
+                writeJvsStore('access_token', tokenStr)
+                sessionTick.value++
+
+                // 若本地尚无 tenantId，顺带拉取当前租户 ID
+                if (!readStorageKey(window.localStorage, 'jvs-tenantId')) {
+                  fetch(`${origin}/jvs-system/index/this/tenant`, {
+                    method: 'GET',
+                    credentials: 'include',
+                    headers: {
+                      'jvs-rule-ua': encodeURI('2.4'),
+                      Authorization: `Bearer ${tokenStr}`
+                    }
+                  })
+                    .then(r => r.json())
+                    .then(tRes => {
+                      const tData = tRes?.data?.data || tRes?.data
+                      if (tData?.id) {
+                        writeJvsStore('tenantId', String(tData.id))
+                      }
+                    })
+                    .catch(() => {})
+                }
+
+                return true
+              } else {
+                // /jvs-system/login/token 明确返回 code=0 但无 token，说明主域未登录或已退出
+                remoteSessionToken.value = ''
+                remoteCookieSessionVerified.value = false
+                removeJvsStore('sessionV3')
+                removeJvsStore('access_token')
+                sessionTick.value++
+                return false
+              }
+            }
+          }
+        }
+      } catch {
+        // 忽略 /jvs-system/login/token 网络或未代理异常，继续尝试步骤 2
+      }
+
+      // 2. 兜底探测：若当前站点未代理 /jvs-system，但代理了 /jvs-dam 且网关直接透传 .bctools.cn 的 HttpOnly Cookie
+      try {
+        const probeResp = await fetch(`${damBaseUrl.value}/project/my`, {
+          method: 'GET',
+          credentials: 'include',
+          headers: buildDamHeaders(false)
+        })
+        if (probeResp.ok) {
+          const text = (await probeResp.text()).trim()
+          if (text && !text.startsWith('<')) {
+            const parsed = JSON.parse(text)
+            const code = parsed?.code ?? parsed?.data?.code
+            if (code === 0 || code === 200) {
+              remoteCookieSessionVerified.value = true
+              sessionTick.value++
+              return true
+            }
+          }
+        }
+      } catch {
+        // ignore
+      }
+
+      return Boolean(resolveJvsSessionV3(materialHeaders.value))
+    })()
+
+    try {
+      return await inFlightSessionProbe
+    } finally {
+      inFlightSessionProbe = null
+    }
+  }
+
+  const refreshSessionState = () => {
+    sessionTick.value++
+    if (!resolveJvsSessionV3(materialHeaders.value) && !remoteSessionToken.value && !remoteCookieSessionVerified.value) {
+      void probeRemoteSessionV3(false)
+    }
+  }
+
+  const handleWindowFocus = () => {
+    sessionTick.value++
+    if (!resolveJvsSessionV3(materialHeaders.value) && !remoteSessionToken.value && !remoteCookieSessionVerified.value) {
+      void probeRemoteSessionV3(false)
+    }
+  }
+
+  onMounted(() => {
+    window.addEventListener('storage', refreshSessionState)
+    window.addEventListener('focus', handleWindowFocus)
+    // 立即探测一次主域 (.bctools.cn) HttpOnly jvs_session_v3 登录态
+    void probeRemoteSessionV3(false)
+    // 定期轻量同步状态变化
+    pollTimer = setInterval(refreshSessionState, 3000)
+  })
+
+  onUnmounted(() => {
+    window.removeEventListener('storage', refreshSessionState)
+    window.removeEventListener('focus', handleWindowFocus)
+    if (pollTimer) {
+      clearInterval(pollTimer)
+      pollTimer = null
+    }
+  })
+
+  const sessionV3 = computed(() => {
+    void sessionTick.value
+    return remoteSessionToken.value || resolveJvsSessionV3(materialHeaders.value)
+  })
+
+  /** 是否已登录（jvs_session_v3 存在有效内容，或通过主域 HttpOnly Cookie 换取/验证通过） */
+  const isDamLoggedIn = computed(() => {
+    void sessionTick.value
+    return Boolean(sessionV3.value || remoteCookieSessionVerified.value)
+  })
+
+  /**
+   * 构造携带鉴权信息的 Headers
+   */
+  function buildDamHeaders(isJson = true): Record<string, string> {
+    const headers: Record<string, string> = {
+      'jvs-rule-ua': encodeURI('2.4'),
+      ...(materialHeaders.value || {})
+    }
+    if (isJson) {
+      headers['Content-Type'] = 'application/json;charset=utf-8'
+    }
+    const token = sessionV3.value || readStorageKey(window?.localStorage, 'jvs-access_token')
+    if (token && !headers['Authorization'] && !headers['authorization']) {
+      headers['Authorization'] = `Bearer ${token}`
+    }
+    const tenantId = readStorageKey(window?.localStorage, 'jvs-tenantId')
+    if (tenantId && !headers['tenant-id']) {
+      headers['tenant-id'] = tenantId
+    }
+    return headers
+  }
+
+  /**
+   * 统一安全的 JSON 请求封装
+   */
+  async function damFetchJson<T = any>(
+    pathOrUrl: string,
+    options: RequestInit & { params?: Record<string, any> } = {}
+  ): Promise<T> {
+    const base = damBaseUrl.value
+    let fullUrl = pathOrUrl.startsWith('http') || pathOrUrl.startsWith('/jvs-')
+      ? pathOrUrl
+      : `${base}${pathOrUrl.startsWith('/') ? '' : '/'}${pathOrUrl}`
+
+    if (options.params) {
+      const searchParams = new URLSearchParams()
+      Object.entries(options.params).forEach(([k, v]) => {
+        if (v !== undefined && v !== null && v !== '') {
+          if (Array.isArray(v)) {
+            if (v.length > 0) searchParams.append(k, v.join(','))
+          } else {
+            searchParams.append(k, String(v))
+          }
+        }
+      })
+      const qs = searchParams.toString()
+      if (qs) {
+        fullUrl += (fullUrl.includes('?') ? '&' : '?') + qs
+      }
+    }
+
+    const isFormData = typeof FormData !== 'undefined' && options.body instanceof FormData
+    const mergedHeaders = {
+      ...buildDamHeaders(!isFormData),
+      ...((options.headers as Record<string, string>) || {})
+    }
+    if (isFormData) {
+      delete mergedHeaders['Content-Type']
+      delete mergedHeaders['content-type']
+    }
+
+    const response = await fetch(fullUrl, {
+      ...options,
+      credentials: 'include',
+      headers: mergedHeaders
+    })
+
+    const rawText = await response.text()
+    if (!response.ok) {
+      throw new Error(`请求异常 (${response.status})`)
+    }
+    const trimmed = rawText.trim()
+    if (trimmed.startsWith('<') || trimmed.toLowerCase().startsWith('<!doctype')) {
+      throw new Error('接口返回了非 JSON 格式响应')
+    }
+    try {
+      return JSON.parse(rawText) as T
+    } catch (err: any) {
+      throw new Error(`数据解析失败: ${err.message}`)
+    }
+  }
+
+  return {
+    sessionV3,
+    isDamLoggedIn,
+    damBaseUrl,
+    sharedMaterialMainTab,
+    setSharedMaterialMainTab,
+    refreshSessionState,
+    probeRemoteSessionV3,
+    buildDamHeaders,
+    damFetchJson
+  }
+}