根因:access_token每2小时过期,前端收到401直接清token跳登录,没有用refresh_token续期 后端修复: - adminauth模块新增 POST /admin/auth/refresh 接口 - Service 注入 JWTManager,支持 admin refresh token 换新 token pair - Refresh 方法验证 subjectType=admin + tokenType=refresh 前端修复: - 401 拦截器核心改造:收到401先调 refresh 接口续期 - 加 isRefreshing 锁 + pendingRequests 队列防止并发刷新 - refresh 用原生 axios.post 避免拦截器递归 - 成功则更新 localStorage + 重试原请求,失败才清 token 跳登录 - 排除 /auth/refresh 自身避免死循环 - 支持 /admin/ 请求独立 token 管理 - auth.ts/adminAuth.ts 新增手动 refreshUserToken/refreshAdminSession - 路由守卫给所有需登录路由添加 meta.requiresAuth - 守卫同时支持 PC 端 /login 和移动端 /m/login
60 lines
1.4 KiB
TypeScript
60 lines
1.4 KiB
TypeScript
import { apiClient } from './client'
|
|
|
|
export interface AuthUser {
|
|
id: number
|
|
phone: string
|
|
nickname: string
|
|
avatar_url: string
|
|
realname_status: string
|
|
risk_status: string
|
|
credit_score: number
|
|
status: string
|
|
}
|
|
|
|
export interface TokenPair {
|
|
access_token: string
|
|
refresh_token: string
|
|
token_type: string
|
|
expires_in: number
|
|
}
|
|
|
|
export interface LoginData {
|
|
user: AuthUser
|
|
tokens: TokenPair
|
|
}
|
|
|
|
interface ApiResponse<T> {
|
|
code: string
|
|
message: string
|
|
data: T
|
|
}
|
|
|
|
export async function sendSmsCode(phone: string) {
|
|
const { data } = await apiClient.post<ApiResponse<{ phone: string; expires_in: number }>>('/auth/sms/send', {
|
|
phone,
|
|
})
|
|
return data.data
|
|
}
|
|
|
|
export async function loginWithSms(phone: string, code: string) {
|
|
const { data } = await apiClient.post<ApiResponse<LoginData>>('/auth/sms/login', { phone, code })
|
|
return data.data
|
|
}
|
|
|
|
export async function fetchMe() {
|
|
const { data } = await apiClient.get<ApiResponse<AuthUser>>('/me')
|
|
return data.data
|
|
}
|
|
|
|
export async function updateMe(payload: Pick<AuthUser, 'nickname' | 'avatar_url'>) {
|
|
const { data } = await apiClient.put<ApiResponse<AuthUser>>('/me', payload)
|
|
return data.data
|
|
}
|
|
|
|
/** Manually refresh user token (for store to call on app init) */
|
|
export async function refreshUserToken(refreshToken: string) {
|
|
const { data } = await apiClient.post<ApiResponse<TokenPair>>('/auth/refresh', {
|
|
refresh_token: refreshToken,
|
|
})
|
|
return data.data
|
|
} |