加固后台管理安全

frontend/src/features/admin/views/AdminLoginView.vue

@@ -3,19 +3,20 @@ import { readError } from '@/shared/utils/error'
 import { ElMessage } from 'element-plus'
 import { Lock, User } from '@element-plus/icons-vue'
 import { onMounted, reactive, ref } from 'vue'
-import { useRouter } from 'vue-router'
+import { useRoute, useRouter } from 'vue-router'
 
 import { fetchAdminCaptcha, type AdminCaptcha } from '@/features/admin'
 import { useAdminSessionStore } from '@/stores/adminSession'
 
 const router = useRouter()
+const route = useRoute()
 const adminSession = useAdminSessionStore()
 const loading = ref(false)
 const captchaLoading = ref(false)
 const captcha = ref<AdminCaptcha | null>(null)
 const form = reactive({
-  username: 'admin',
-  password: 'admin123456',
+  username: '',
+  password: '',
   captchaCode: '',
 })
 
@@ -43,7 +44,8 @@ async function handleLogin() {
       form.captchaCode
     )
     ElMessage.success('后台登录成功')
-    await router.push('/admin/dashboard')
+    const redirect = typeof route.query.redirect === 'string' ? route.query.redirect : ''
+    await router.push(redirect.startsWith('/admin') ? redirect : '/admin/dashboard')
   } catch (error) {
     ElMessage.error(readError(error, '后台登录失败'))
     await loadCaptcha()