minitest2.0 0.0.0

package/src/utils/auth-token.ts

@@ -0,0 +1,241 @@
+import { useUserStore } from '@/stores/user'
+
+export const REFRESH_TOKEN_URL = '/uaa/oauth/mobile/refresh_token'
+
+export type AuthPrincipal = {
+  branchId?: string
+  currentOrgId?: string
+  ip?: string
+  loginIp?: string
+  orgId?: string
+  orgIds?: string[]
+  reqIpAddr?: string
+  username?: string
+  userId?: string
+  userRealName?: string
+  organizationName?: string
+  orgName?: string
+  org_name?: string
+  currentOrgName?: string
+  current_org_name?: string
+  institutionName?: string
+  institution_name?: string
+  branchName?: string
+  branch_name?: string
+  deptName?: string
+  dept_name?: string
+  departmentName?: string
+  department_name?: string
+  unitName?: string
+  unit_name?: string
+  agencyName?: string
+  agency_name?: string
+  bankName?: string
+  bank_name?: string
+  organization?: unknown
+  org?: unknown
+  institution?: unknown
+  branch?: unknown
+  dept?: unknown
+  department?: unknown
+  unit?: unknown
+  agency?: unknown
+  bank?: unknown
+  [key: string]: unknown
+}
+
+export type AuthTokenPayload = {
+  token?: string
+  access_token?: string
+  refresh_token?: string
+  refreshToken?: string
+  token_type?: string
+  expires_in?: number
+  scope?: string
+  principal?: AuthPrincipal
+}
+
+export type AuthTokenResponse = AuthTokenPayload & {
+  data?: AuthTokenPayload
+}
+
+let refreshTokenPromise: Promise<string> | null = null
+
+export function getAccessTokenFromResponse(response: AuthTokenResponse) {
+  return (
+    response.data?.token || response.data?.access_token || response.token || response.access_token
+  )
+}
+
+export function getRefreshTokenFromResponse(response: AuthTokenResponse) {
+  return (
+    response.data?.refresh_token ||
+    response.data?.refreshToken ||
+    response.refresh_token ||
+    response.refreshToken
+  )
+}
+
+export function getStoredAccessToken() {
+  return useUserStore().token
+}
+
+export function getStoredRefreshToken() {
+  return useUserStore().refreshToken
+}
+
+export function getAuthHeaders(headers?: Record<string, string>, skipAuth = false) {
+  const token = getStoredAccessToken()
+
+  return {
+    'Content-Type': 'application/json',
+    Accept: 'application/json',
+    ...(!skipAuth && token ? { Authorization: `Bearer ${token}` } : {}),
+    ...headers,
+  }
+}
+
+export function saveAuthTokens(response: AuthTokenResponse) {
+  const payload = getAuthPayloadFromResponse(response)
+  const payloadForStorage = sanitizeAuthPayload(payload)
+  const token = getAccessTokenFromResponse(response)
+  const refreshToken = getRefreshTokenFromResponse(response)
+  const principal = payload.principal
+
+  if (!token) {
+    throw new Error('接口未返回业务 token')
+  }
+
+  const userStore = useUserStore()
+  userStore.setAuthTokens(token, refreshToken, payloadForStorage)
+  userStore.setUserInfo({
+    username: principal?.username,
+    realName: principal?.userRealName,
+    organizationName: getOrganizationNameFromPrincipal(principal),
+  })
+
+  return token
+}
+
+function getAuthPayloadFromResponse(response: AuthTokenResponse) {
+  // 登录接口可能直接返回 token，也可能包一层 data；这里统一取真正的认证载荷。
+  if (isAuthPayload(response.data)) {
+    return response.data
+  }
+
+  return response
+}
+
+function isAuthPayload(payload?: AuthTokenPayload): payload is AuthTokenPayload {
+  return Boolean(
+    payload &&
+    (payload.token ||
+      payload.access_token ||
+      payload.refresh_token ||
+      payload.refreshToken ||
+      payload.principal),
+  )
+}
+
+function sanitizeAuthPayload(payload: AuthTokenPayload): AuthTokenPayload {
+  if (!payload.principal) return payload
+
+  // 后端 principal 里会带 password 哈希，本地只保存业务需要的用户信息。
+  const { password: _password, ...principal } = payload.principal
+  return {
+    ...payload,
+    principal,
+  }
+}
+
+function getOrganizationNameFromPrincipal(principal?: AuthPrincipal) {
+  if (!principal) return undefined
+
+  return firstText(
+    principal.organizationName,
+    principal.orgName,
+    principal.org_name,
+    principal.currentOrgName,
+    principal.current_org_name,
+    principal.institutionName,
+    principal.institution_name,
+    principal.branchName,
+    principal.branch_name,
+    principal.deptName,
+    principal.dept_name,
+    principal.departmentName,
+    principal.department_name,
+    principal.unitName,
+    principal.unit_name,
+    principal.agencyName,
+    principal.agency_name,
+    principal.bankName,
+    principal.bank_name,
+    principal.organization,
+    principal.org,
+    principal.institution,
+    principal.branch,
+    principal.dept,
+    principal.department,
+    principal.unit,
+    principal.agency,
+    principal.bank,
+    getNameFromRecord(principal.organization),
+    getNameFromRecord(principal.org),
+    getNameFromRecord(principal.institution),
+    getNameFromRecord(principal.branch),
+    getNameFromRecord(principal.dept),
+    getNameFromRecord(principal.department),
+    getNameFromRecord(principal.unit),
+    getNameFromRecord(principal.agency),
+    getNameFromRecord(principal.bank),
+  )
+}
+
+function getNameFromRecord(value: unknown) {
+  if (!isRecord(value)) return undefined
+
+  return firstText(
+    value.name,
+    value.organizationName,
+    value.orgName,
+    value.institutionName,
+    value.branchName,
+    value.deptName,
+    value.departmentName,
+    value.unitName,
+    value.agencyName,
+    value.bankName,
+  )
+}
+
+function firstText(...values: unknown[]) {
+  for (const value of values) {
+    if (typeof value !== 'string') continue
+
+    const text = value.trim()
+    if (text) return text
+  }
+
+  return undefined
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === 'object' && value !== null
+}
+
+export function clearAuthTokens() {
+  useUserStore().clearToken()
+}
+
+export function refreshAccessToken(requestRefreshToken: () => Promise<AuthTokenResponse>) {
+  if (!refreshTokenPromise) {
+    refreshTokenPromise = requestRefreshToken()
+      .then(saveAuthTokens)
+      .finally(() => {
+        refreshTokenPromise = null
+      })
+  }
+
+  return refreshTokenPromise
+}

package/src/utils/code-highlight.ts

@@ -0,0 +1,165 @@
+const KEYWORDS = new Set([
+  'abstract',
+  'async',
+  'await',
+  'boolean',
+  'break',
+  'case',
+  'catch',
+  'class',
+  'const',
+  'continue',
+  'default',
+  'delete',
+  'do',
+  'else',
+  'enum',
+  'export',
+  'extends',
+  'false',
+  'finally',
+  'for',
+  'from',
+  'function',
+  'if',
+  'import',
+  'in',
+  'interface',
+  'let',
+  'new',
+  'null',
+  'number',
+  'private',
+  'protected',
+  'public',
+  'return',
+  'static',
+  'string',
+  'super',
+  'switch',
+  'this',
+  'throw',
+  'true',
+  'try',
+  'type',
+  'typeof',
+  'undefined',
+  'var',
+  'void',
+  'while',
+])
+
+const TOKEN_PATTERN =
+  /(\/\*[\s\S]*?\*\/|\/\/[^\n]*|#[^\n]*|<!--[\s\S]*?-->|(["'`])(?:\\[\s\S]|(?!\2)[^\\])*\2|<\/?[A-Za-z][^>\n]*?>|\b\d+(?:\.\d+)?\b|\b[A-Za-z_$][\w$]*\b)/g
+
+export function highlightArticleHtml(html: string) {
+  if (!html.trim()) {
+    return ''
+  }
+
+  const doc = new DOMParser().parseFromString(`<article>${html}</article>`, 'text/html')
+  const root = doc.body.firstElementChild
+
+  if (!root) {
+    return html
+  }
+
+  root.querySelectorAll('pre code').forEach((code) => {
+    const rawCode = code.textContent || ''
+    const language = getLanguage(code)
+
+    code.innerHTML = highlightCode(rawCode)
+    code.classList.add('code-highlighted')
+
+    if (language) {
+      code.setAttribute('data-language', language)
+    }
+  })
+
+  return root.innerHTML
+}
+
+function highlightCode(code: string) {
+  let html = ''
+  let lastIndex = 0
+
+  code.replace(TOKEN_PATTERN, (...args) => {
+    const token = args[0]
+    const offset = args[args.length - 2] as number
+
+    html += escapeHtml(code.slice(lastIndex, offset))
+    html += renderToken(token)
+    lastIndex = offset + token.length
+
+    return token
+  })
+
+  html += escapeHtml(code.slice(lastIndex))
+
+  return html
+}
+
+function renderToken(token: string) {
+  if (isComment(token)) {
+    return wrapToken(token, 'hl-comment')
+  }
+
+  if (isString(token)) {
+    return wrapToken(token, 'hl-string')
+  }
+
+  if (isTag(token)) {
+    return wrapToken(token, 'hl-tag')
+  }
+
+  if (isNumber(token)) {
+    return wrapToken(token, 'hl-number')
+  }
+
+  if (KEYWORDS.has(token)) {
+    return wrapToken(token, 'hl-keyword')
+  }
+
+  return escapeHtml(token)
+}
+
+function wrapToken(token: string, className: string) {
+  return `<span class="${className}">${escapeHtml(token)}</span>`
+}
+
+function getLanguage(code: Element) {
+  const languageAttr = code.getAttribute('data-language')
+  const languageClass = Array.from(code.classList).find((className) =>
+    className.startsWith('language-'),
+  )
+
+  return languageAttr || languageClass?.replace(/^language-/, '') || ''
+}
+
+function isComment(token: string) {
+  return (
+    token.startsWith('//') ||
+    token.startsWith('/*') ||
+    token.startsWith('#') ||
+    token.startsWith('<!--')
+  )
+}
+
+function isString(token: string) {
+  return /^["'`]/.test(token)
+}
+
+function isTag(token: string) {
+  return /^<\/?[A-Za-z]/.test(token)
+}
+
+function isNumber(token: string) {
+  return /^\d/.test(token)
+}
+
+function escapeHtml(value: string) {
+  const div = document.createElement('div')
+  div.textContent = value
+
+  return div.innerHTML
+}

package/src/utils/copy.ts

@@ -0,0 +1,36 @@
+export async function copyText(text: string) {
+  if (window.isSecureContext && navigator.clipboard?.writeText) {
+    try {
+      await navigator.clipboard.writeText(text)
+      return
+    } catch {
+      // HTTP 部署或宿主 WebView 里经常不可用，继续走兼容方案。
+    }
+  }
+
+  fallbackCopyText(text)
+}
+
+function fallbackCopyText(text: string) {
+  const textarea = document.createElement('textarea')
+  const previousFocus = document.activeElement instanceof HTMLElement ? document.activeElement : null
+
+  textarea.value = text
+  textarea.setAttribute('readonly', 'true')
+  textarea.style.position = 'fixed'
+  textarea.style.left = '-9999px'
+  textarea.style.top = '0'
+  textarea.style.opacity = '0'
+  document.body.appendChild(textarea)
+  textarea.select()
+  textarea.setSelectionRange(0, textarea.value.length)
+
+  const copied = document.execCommand('copy')
+
+  document.body.removeChild(textarea)
+  previousFocus?.focus()
+
+  if (!copied) {
+    throw new Error('复制失败')
+  }
+}

package/src/utils/query.ts

@@ -0,0 +1,27 @@
+/**
+ * 将 query 对象拼接到 URL 上
+ *
+ * 自动过滤 undefined/null 值，支持数组参数。
+ */
+export function appendQuery(url: string, query?: Record<string, unknown>): string {
+  if (!query) return url
+
+  const searchParams = new URLSearchParams()
+  Object.entries(query).forEach(([key, value]) => {
+    if (value === undefined || value === null) return
+    if (Array.isArray(value)) {
+      value.forEach((item) => {
+        if (item !== undefined && item !== null) {
+          searchParams.append(key, String(item))
+        }
+      })
+      return
+    }
+    searchParams.append(key, String(value))
+  })
+
+  const queryString = searchParams.toString()
+  if (!queryString) return url
+
+  return `${url}${url.includes('?') ? '&' : '?'}${queryString}`
+}

package/src/utils/request.ts

@@ -0,0 +1,238 @@
+import axios from 'axios'
+import type {
+  AxiosError,
+  AxiosInstance,
+  AxiosRequestConfig,
+  AxiosResponse,
+  InternalAxiosRequestConfig,
+} from 'axios'
+import NProgress from 'nprogress'
+import 'nprogress/nprogress.css'
+import '@/styles/nprogress.css'
+import { apiConfig } from '@/config/env'
+import type { ApiResponse } from '@/types/api'
+import router from '@/router'
+import {
+  clearAuthTokens,
+  getStoredAccessToken,
+  getStoredRefreshToken,
+  REFRESH_TOKEN_URL,
+  refreshAccessToken,
+  type AuthTokenResponse,
+} from '@/utils/auth-token'
+import { showAppToast } from '@/utils/toast'
+
+// 关闭 NProgress 右侧旋转小圆圈，保持进度条简洁
+NProgress.configure({ showSpinner: false })
+
+interface AuthRequestConfig extends InternalAxiosRequestConfig {
+  skipAuth?: boolean
+  _retry?: boolean
+}
+
+interface AuthAxiosRequestConfig<T = unknown> extends AxiosRequestConfig<T> {
+  skipAuth?: boolean
+  _retry?: boolean
+}
+
+// 创建 axios 实例，baseURL 和 timeout 从环境变量配置中读取
+const service: AxiosInstance = axios.create({
+  baseURL: apiConfig.baseURL, // 接口基础地址，由 .env 文件中的 VITE_API_BASE_URL 决定
+  timeout: apiConfig.timeout, // 请求超时时间（毫秒），默认 10000
+})
+
+/**
+ * 请求拦截器
+ * 在每个请求发出前执行：
+ * 1. 启动顶部进度条
+ * 2. 自动携带 JWT token 到请求头
+ */
+service.interceptors.request.use(
+  (config: AuthRequestConfig) => {
+    // 开始加载进度条
+    NProgress.start()
+
+    // 从 Pinia 读取 token，存在则添加到请求头
+    const token = getStoredAccessToken()
+    if (!config.skipAuth && token) {
+      config.headers.Authorization = `Bearer ${token}`
+    }
+
+    return config
+  },
+  // 请求配置出错时（如网络断开），结束进度条并抛出错误
+  (error) => {
+    NProgress.done()
+    return Promise.reject(error)
+  },
+)
+
+/**
+ * 响应拦截器
+ * 在收到响应后执行：
+ * 1. 结束进度条
+ * 2. 判断后端业务 code，非 0 视为业务失败
+ * 3. HTTP 状态码异常时给出中文提示
+ * 4. 401 统一清除 token 并跳转登录页
+ */
+service.interceptors.response.use(
+  // ——— 成功响应（HTTP 2xx）———
+  (response: AxiosResponse<ApiResponse>) => {
+    NProgress.done()
+
+    // 普通业务接口返回 { code, message, data }；OAuth 登录接口直接返回 token 结构。
+    const res = response.data
+
+    // 只有响应体明确包含 code 字段时，才按统一业务格式判断，兼容 0 和 "0000" 两种成功码。
+    if (typeof res.code !== 'undefined' && !isSuccessCode(res.code)) {
+      showAppToast(res.message || '请求失败')
+
+      // 将业务错误抛出，调用方可通过 catch 捕获
+      return Promise.reject(new Error(res.message || '请求失败'))
+    }
+
+    // 业务成功，直接返回 data 字段，调用方无需再解包 response.data.data
+    return res as unknown as AxiosResponse
+  },
+
+  // ——— 失败响应（HTTP 非 2xx 或网络错误）———
+  async (error: AxiosError) => {
+    NProgress.done()
+
+    const originalConfig = error.config as AuthAxiosRequestConfig | undefined
+
+    if (error.response?.status === 401 && originalConfig && shouldRefreshToken(originalConfig)) {
+      try {
+        const token = await refreshAccessToken(requestRefreshTokenByAxios)
+
+        originalConfig._retry = true
+        originalConfig.headers = {
+          ...originalConfig.headers,
+          Authorization: `Bearer ${token}`,
+        }
+
+        return service.request(originalConfig)
+      } catch (refreshError) {
+        clearAuthTokens()
+        router.push('/login')
+        showAppToast('登录已过期，请重新登录')
+        return Promise.reject(refreshError)
+      }
+    }
+
+    // HTTP 状态码 → 中文提示映射表
+    const statusCodeMap: Record<number, string> = {
+      400: '请求参数错误',
+      401: '未授权，请重新登录',
+      403: '拒绝访问',
+      404: '请求资源不存在',
+      500: '服务器内部错误',
+    }
+
+    // 优先取映射表中的提示，没有则显示状态码；无 response 说明是网络异常
+    const status = error.response?.status as number
+    const message = error.response ? statusCodeMap[status] || `连接错误 ${status}` : '网络连接异常'
+
+    showAppToast(message)
+
+    // 401 未授权：清除 token 并跳转登录页
+    if (error.response?.status === 401) {
+      clearAuthTokens()
+      router.push('/login')
+    }
+
+    return Promise.reject(error)
+  },
+)
+
+function shouldRefreshToken(config: AuthAxiosRequestConfig) {
+  return !config.skipAuth && !config._retry && Boolean(getStoredRefreshToken())
+}
+
+function isSuccessCode(code: ApiResponse['code']) {
+  return code === 0 || code === '0' || code === '0000'
+}
+
+async function requestRefreshTokenByAxios() {
+  const refreshToken = getStoredRefreshToken()
+
+  if (!refreshToken) {
+    throw new Error('本地不存在 refresh token')
+  }
+
+  const response = await axios.request<ApiResponse<AuthTokenResponse> & AuthTokenResponse>({
+    baseURL: apiConfig.baseURL,
+    timeout: apiConfig.timeout,
+    url: REFRESH_TOKEN_URL,
+    method: 'POST',
+    data: {
+      refresh_token:refreshToken,
+    },
+    headers: {
+      'Content-Type': 'application/json',
+      Accept: 'application/json',
+    },
+  })
+
+  const result = response.data
+
+  if (typeof result.code === 'number' && result.code !== 0) {
+    throw new Error(result.message || '刷新 token 失败')
+  }
+
+  return result.data || result
+}
+
+/**
+ * 请求配置接口
+ * @property url      - 请求地址（必填）
+ * @property method   - 请求方法，默认 GET
+ * @property data     - 请求体（POST/PUT/PATCH 时使用）
+ * @property params   - URL 查询参数（拼接到 ?key=value）
+ */
+export interface RequestConfig<T = unknown> {
+  url: string
+  method?: 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH'
+  data?: T
+  params?: Record<string, unknown>
+  headers?: Record<string, string>
+  auth?: { username: string; password: string } // HTTP Basic Auth
+  skipAuth?: boolean
+}
+
+/**
+ * 通用请求函数
+ * @typeParam R - 响应 data 的类型（后端返回的 data 字段类型）
+ * @typeParam T - 请求参数的类型（data 的类型）
+ * @param config - 请求配置对象
+ * @returns Promise，resolve 后直接拿到 ApiResponse<R>
+ *
+ * @example
+ * // GET 请求
+ * request<UserInfo>({ url: '/user/1' })
+ *
+ * // POST 请求
+ * request<{ token: string }, LoginParams>({
+ *   url: '/login',
+ *   method: 'POST',
+ *   data: { username: 'admin', password: '123' }
+ * })
+ */
+export function request<R = unknown, T = unknown>(
+  config: RequestConfig<T>,
+): Promise<ApiResponse<R>> {
+  const axiosConfig: AuthAxiosRequestConfig<T> = {
+    url: config.url,
+    method: config.method || 'GET',
+    data: config.data,
+    params: config.params,
+    headers: config.headers,
+    auth: config.auth,
+    skipAuth: config.skipAuth,
+  }
+
+  return service.request<ApiResponse<R>>(axiosConfig) as unknown as Promise<ApiResponse<R>>
+}
+
+// 同时导出 axios 实例，供需要直接使用 axios 原生方法的场景（如文件上传）
+export default service