初始化项目：基础设施 + 用户认证 + 后台管理系统 + AGPL 3.0 许可
This commit is contained in:
194
templates/MetaLab-2026/static/js/common.js
Normal file
194
templates/MetaLab-2026/static/js/common.js
Normal file
@ -0,0 +1,194 @@
|
||||
/* ============================================================
|
||||
MetaLab Common JS — 全站共享脚本
|
||||
============================================================ */
|
||||
(function () {
|
||||
'use strict';
|
||||
|
||||
// ---- Shared utils (exposed to other scripts via window.MetaLab) ----
|
||||
window.MetaLab = window.MetaLab || {};
|
||||
var toastTimer = null;
|
||||
window.MetaLab.toast = function (el, msg, isError) {
|
||||
if (!el) return;
|
||||
clearTimeout(toastTimer);
|
||||
el.textContent = msg;
|
||||
el.className = 'toast' + (isError ? ' error' : '');
|
||||
void el.offsetWidth;
|
||||
el.classList.add('show');
|
||||
toastTimer = setTimeout(function () {
|
||||
el.classList.remove('show');
|
||||
}, 3000);
|
||||
};
|
||||
|
||||
// ---- CSRF token helper (reads from <meta> tag rendered by server) ----
|
||||
window.MetaLab.csrfToken = function () {
|
||||
var meta = document.querySelector('meta[name="csrf-token"]');
|
||||
return meta ? meta.getAttribute('content') : '';
|
||||
};
|
||||
|
||||
// ---- Auto-attach X-CSRF-Token to all state-changing requests ----
|
||||
// Monkey-patch XMLHttpRequest and fetch to inject CSRF header
|
||||
(function () {
|
||||
var token = window.MetaLab.csrfToken();
|
||||
if (!token) return;
|
||||
|
||||
// Patch XMLHttpRequest (used by register.js / login.js / common.js)
|
||||
var origXHROpen = XMLHttpRequest.prototype.open;
|
||||
var origXHRSend = XMLHttpRequest.prototype.send;
|
||||
XMLHttpRequest.prototype.open = function (method, url) {
|
||||
this._method = method;
|
||||
this._url = url;
|
||||
return origXHROpen.apply(this, arguments);
|
||||
};
|
||||
var SAME_ORIGIN = /^\/(?!\/)/;
|
||||
XMLHttpRequest.prototype.send = function () {
|
||||
if (SAME_ORIGIN.test(this._url) &&
|
||||
this._method && !/^(GET|HEAD|OPTIONS)$/i.test(this._method)) {
|
||||
this.setRequestHeader('X-CSRF-Token', token);
|
||||
}
|
||||
return origXHRSend.apply(this, arguments);
|
||||
};
|
||||
|
||||
// Patch fetch (used by auto-refresh)
|
||||
var origFetch = window.fetch;
|
||||
window.fetch = function (url, options) {
|
||||
options = options || {};
|
||||
var headers = options.headers || {};
|
||||
var method = (options.method || 'GET').toUpperCase();
|
||||
var urlStr = (typeof url === 'string') ? url : '';
|
||||
if (SAME_ORIGIN.test(urlStr) && !/^(GET|HEAD|OPTIONS)$/i.test(method)) {
|
||||
if (headers instanceof Headers) {
|
||||
headers.set('X-CSRF-Token', token);
|
||||
} else {
|
||||
headers['X-CSRF-Token'] = token;
|
||||
}
|
||||
options.headers = headers;
|
||||
}
|
||||
return origFetch(url, options);
|
||||
};
|
||||
})();
|
||||
|
||||
var menuBtn = document.getElementById('mobileMenuBtn');
|
||||
var navLinks = document.getElementById('navLinks');
|
||||
var scrollBtn = document.getElementById('scrollTopBtn');
|
||||
|
||||
var menuIcon = '<svg class="icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round"><line x1="3" y1="6" x2="21" y2="6"/><line x1="3" y1="12" x2="21" y2="12"/><line x1="3" y1="18" x2="21" y2="18"/></svg>';
|
||||
var closeIcon = '<svg class="icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round"><line x1="18" y1="6" x2="6" y2="18"/><line x1="6" y1="6" x2="18" y2="18"/></svg>';
|
||||
|
||||
// ---- Mobile menu toggle ----
|
||||
if (menuBtn && navLinks) {
|
||||
menuBtn.addEventListener('click', function () {
|
||||
navLinks.classList.toggle('active');
|
||||
menuBtn.innerHTML = navLinks.classList.contains('active') ? closeIcon : menuIcon;
|
||||
});
|
||||
}
|
||||
|
||||
// ---- Close mobile menu on nav click ----
|
||||
var links = document.querySelectorAll('.nav-links a');
|
||||
for (var i = 0; i < links.length; i++) {
|
||||
links[i].addEventListener('click', function () {
|
||||
if (navLinks) {
|
||||
navLinks.classList.remove('active');
|
||||
}
|
||||
if (menuBtn) {
|
||||
menuBtn.innerHTML = menuIcon;
|
||||
}
|
||||
});
|
||||
}
|
||||
|
||||
// ---- Smooth scroll for anchor links ----
|
||||
var anchors = document.querySelectorAll('a[href^="#"]');
|
||||
for (var j = 0; j < anchors.length; j++) {
|
||||
anchors[j].addEventListener('click', function (e) {
|
||||
var href = this.getAttribute('href');
|
||||
if (href === '#') return;
|
||||
var target = document.querySelector(href);
|
||||
if (target) {
|
||||
e.preventDefault();
|
||||
window.scrollTo({ top: target.offsetTop - 55, behavior: 'smooth' });
|
||||
}
|
||||
});
|
||||
}
|
||||
|
||||
// ---- Scroll-to-top button ----
|
||||
if (scrollBtn) {
|
||||
window.addEventListener('scroll', function () {
|
||||
scrollBtn.classList.toggle('visible', window.scrollY > window.innerHeight * 0.5);
|
||||
});
|
||||
scrollBtn.addEventListener('click', function () {
|
||||
window.scrollTo({ top: 0, behavior: 'smooth' });
|
||||
});
|
||||
}
|
||||
|
||||
// ---- Dev greeting ----
|
||||
console.log('%c🔨 嘿，开发者朋友！', 'color:#2ecc71;font-size:18px;font-weight:bold');
|
||||
console.log('%c欢迎来到 MetaLab 的蓝图页。', 'color:#34495e');
|
||||
console.log('%c我们正在搭建一个纯净、友好的下一代开发者社区。', 'color:#34495e');
|
||||
console.log('%c有任何想法或愿意参与早期测试？欢迎联系我们：metazone@foxmail.com', 'color:#e74c3c;font-style:italic');
|
||||
|
||||
// ---- Logout ----
|
||||
var logoutBtn = document.getElementById('logoutBtn');
|
||||
if (logoutBtn) {
|
||||
logoutBtn.addEventListener('click', function () {
|
||||
var xhr = new XMLHttpRequest();
|
||||
xhr.open('POST', '/api/auth/logout', true);
|
||||
xhr.onreadystatechange = function () {
|
||||
if (xhr.readyState === 4) {
|
||||
window.location.href = '/';
|
||||
}
|
||||
};
|
||||
xhr.send();
|
||||
});
|
||||
}
|
||||
|
||||
// ---- Auto-refresh token (silent) ----
|
||||
// 场景 A：页面开着时，每 10 分钟静默续期（保持 access token 不过期）
|
||||
// 场景 B：关浏览器 15+ min 后回来，access token 过期但 refresh 仍有效
|
||||
// → 页面先渲染为未登录 → 刷新成功后 reload 一次获得登录态
|
||||
// 不在认证页面执行刷新（登录/注册页无需续期）
|
||||
var onAuthPage = /^\/auth\//.test(window.location.pathname);
|
||||
if (!onAuthPage) {
|
||||
|
||||
var REFRESH_INTERVAL = 10 * 60 * 1000; // 10 minutes
|
||||
var refreshTimer = null;
|
||||
|
||||
function tryRefresh(callback) {
|
||||
fetch('/api/auth/refresh', { method: 'POST' })
|
||||
.then(function (res) {
|
||||
if (res.ok) {
|
||||
if (callback) callback();
|
||||
} else {
|
||||
if (refreshTimer) {
|
||||
clearInterval(refreshTimer);
|
||||
refreshTimer = null;
|
||||
}
|
||||
}
|
||||
})
|
||||
.catch(function () {
|
||||
if (refreshTimer) {
|
||||
clearInterval(refreshTimer);
|
||||
refreshTimer = null;
|
||||
}
|
||||
});
|
||||
}
|
||||
|
||||
// 仅当存在"记住我"标记 Cookie 时才尝试刷新（避免无需刷新时产生 401 控制台报错）
|
||||
function hasCookie(name) {
|
||||
return document.cookie.split(';').some(function (c) {
|
||||
return c.trim().startsWith(name + '=');
|
||||
});
|
||||
}
|
||||
|
||||
if (hasCookie('mlb_rm')) {
|
||||
tryRefresh(function () {
|
||||
refreshTimer = setInterval(function () { tryRefresh(null); }, REFRESH_INTERVAL);
|
||||
|
||||
if (!document.getElementById('logoutBtn') && !sessionStorage.getItem('mlb_refreshed')) {
|
||||
sessionStorage.setItem('mlb_refreshed', '1');
|
||||
window.location.reload();
|
||||
}
|
||||
});
|
||||
sessionStorage.removeItem('mlb_refreshed');
|
||||
}
|
||||
|
||||
} // end if (!onAuthPage)
|
||||
})();
|
||||
Reference in New Issue
Block a user