Victor_Jay
39d13993ba
- P0 DIP+ISP: 全链路注入接口，消除零接口紧耦合 - P0 URL: auth 301→302，修复登出后浏览器缓存陷阱 - P1 DRY: JWT 认证逻辑收敛至 TokenService+中间件 - P2 DRY: 前后端角色/状态映射统一为 model 常量 - P2 LoD: 新增 SettingsController，router 不再跨层调 repo - P2 URL: settings ?tab= → /settings/:tab 伪静态 - P3 OCP: 角色权限 map 化，告别硬编码 switch
192 lines
7.6 KiB
JavaScript
192 lines
7.6 KiB
JavaScript
/* ============================================================
|
||
MetaLab Common JS — 全站共享脚本
|
||
============================================================ */
|
||
(function () {
|
||
'use strict';
|
||
|
||
// ---- Shared utils (exposed to other scripts via window.MetaLab) ----
|
||
window.MetaLab = window.MetaLab || {};
|
||
var toastTimer = null;
|
||
window.MetaLab.toast = function (el, msg, isError) {
|
||
if (!el) return;
|
||
clearTimeout(toastTimer);
|
||
el.textContent = msg;
|
||
el.className = 'toast' + (isError ? ' error' : '');
|
||
void el.offsetWidth;
|
||
el.classList.add('show');
|
||
toastTimer = setTimeout(function () {
|
||
el.classList.remove('show');
|
||
}, 3000);
|
||
};
|
||
|
||
// ---- CSRF token helper (从共享 utils.js 提供的 getCSRFToken 别名) ----
|
||
window.MetaLab.csrfToken = getCSRFToken;
|
||
|
||
// ---- Auto-attach X-CSRF-Token to all state-changing requests ----
|
||
// Monkey-patch XMLHttpRequest and fetch to inject CSRF header
|
||
(function () {
|
||
var token = window.MetaLab.csrfToken();
|
||
if (!token) return;
|
||
|
||
// Patch XMLHttpRequest (used by register.js / login.js / common.js)
|
||
var origXHROpen = XMLHttpRequest.prototype.open;
|
||
var origXHRSend = XMLHttpRequest.prototype.send;
|
||
XMLHttpRequest.prototype.open = function (method, url) {
|
||
this._method = method;
|
||
this._url = url;
|
||
return origXHROpen.apply(this, arguments);
|
||
};
|
||
var SAME_ORIGIN = /^\/(?!\/)/;
|
||
XMLHttpRequest.prototype.send = function () {
|
||
if (SAME_ORIGIN.test(this._url) &&
|
||
this._method && !/^(GET|HEAD|OPTIONS)$/i.test(this._method)) {
|
||
this.setRequestHeader('X-CSRF-Token', token);
|
||
}
|
||
return origXHRSend.apply(this, arguments);
|
||
};
|
||
|
||
// Patch fetch (used by auto-refresh)
|
||
var origFetch = window.fetch;
|
||
window.fetch = function (url, options) {
|
||
options = options || {};
|
||
var headers = options.headers || {};
|
||
var method = (options.method || 'GET').toUpperCase();
|
||
var urlStr = (typeof url === 'string') ? url : '';
|
||
if (SAME_ORIGIN.test(urlStr) && !/^(GET|HEAD|OPTIONS)$/i.test(method)) {
|
||
if (headers instanceof Headers) {
|
||
headers.set('X-CSRF-Token', token);
|
||
} else {
|
||
headers['X-CSRF-Token'] = token;
|
||
}
|
||
options.headers = headers;
|
||
}
|
||
return origFetch(url, options);
|
||
};
|
||
})();
|
||
|
||
var menuBtn = document.getElementById('mobileMenuBtn');
|
||
var navLinks = document.getElementById('navLinks');
|
||
var scrollBtn = document.getElementById('scrollTopBtn');
|
||
|
||
var menuIcon = '<svg class="icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round"><line x1="3" y1="6" x2="21" y2="6"/><line x1="3" y1="12" x2="21" y2="12"/><line x1="3" y1="18" x2="21" y2="18"/></svg>';
|
||
var closeIcon = '<svg class="icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round"><line x1="18" y1="6" x2="6" y2="18"/><line x1="6" y1="6" x2="18" y2="18"/></svg>';
|
||
|
||
// ---- Mobile menu toggle ----
|
||
if (menuBtn && navLinks) {
|
||
menuBtn.addEventListener('click', function () {
|
||
navLinks.classList.toggle('active');
|
||
menuBtn.innerHTML = navLinks.classList.contains('active') ? closeIcon : menuIcon;
|
||
});
|
||
}
|
||
|
||
// ---- Close mobile menu on nav click ----
|
||
var links = document.querySelectorAll('.nav-links a');
|
||
for (var i = 0; i < links.length; i++) {
|
||
links[i].addEventListener('click', function () {
|
||
if (navLinks) {
|
||
navLinks.classList.remove('active');
|
||
}
|
||
if (menuBtn) {
|
||
menuBtn.innerHTML = menuIcon;
|
||
}
|
||
});
|
||
}
|
||
|
||
// ---- Smooth scroll for anchor links ----
|
||
var anchors = document.querySelectorAll('a[href^="#"]');
|
||
for (var j = 0; j < anchors.length; j++) {
|
||
anchors[j].addEventListener('click', function (e) {
|
||
var href = this.getAttribute('href');
|
||
if (href === '#') return;
|
||
var target = document.querySelector(href);
|
||
if (target) {
|
||
e.preventDefault();
|
||
window.scrollTo({ top: target.offsetTop - 55, behavior: 'smooth' });
|
||
}
|
||
});
|
||
}
|
||
|
||
// ---- Scroll-to-top button ----
|
||
if (scrollBtn) {
|
||
window.addEventListener('scroll', function () {
|
||
scrollBtn.classList.toggle('visible', window.scrollY > window.innerHeight * 0.5);
|
||
});
|
||
scrollBtn.addEventListener('click', function () {
|
||
window.scrollTo({ top: 0, behavior: 'smooth' });
|
||
});
|
||
}
|
||
|
||
// ---- Dev greeting ----
|
||
console.log('%c🔨 嘿，开发者朋友！', 'color:#2ecc71;font-size:18px;font-weight:bold');
|
||
console.log('%c欢迎来到 MetaLab 的蓝图页。', 'color:#34495e');
|
||
console.log('%c我们正在搭建一个纯净、友好的下一代开发者社区。', 'color:#34495e');
|
||
console.log('%c有任何想法或愿意参与早期测试？欢迎联系我们：metazone@foxmail.com', 'color:#e74c3c;font-style:italic');
|
||
|
||
// ---- Logout ----
|
||
var logoutBtn = document.getElementById('logoutBtn');
|
||
if (logoutBtn) {
|
||
logoutBtn.addEventListener('click', function () {
|
||
var xhr = new XMLHttpRequest();
|
||
xhr.open('POST', '/api/auth/logout', true);
|
||
xhr.onreadystatechange = function () {
|
||
if (xhr.readyState === 4) {
|
||
window.location.href = '/';
|
||
}
|
||
};
|
||
xhr.send();
|
||
});
|
||
}
|
||
|
||
// ---- Auto-refresh token (silent) ----
|
||
// 场景 A：页面开着时，每 10 分钟静默续期（保持 access token 不过期）
|
||
// 场景 B：关浏览器 15+ min 后回来，access token 过期但 refresh 仍有效
|
||
// → 页面先渲染为未登录 → 刷新成功后 reload 一次获得登录态
|
||
// 不在认证页面执行刷新（登录/注册页无需续期）
|
||
var onAuthPage = /^\/auth\//.test(window.location.pathname);
|
||
if (!onAuthPage) {
|
||
|
||
var REFRESH_INTERVAL = 10 * 60 * 1000; // 10 minutes
|
||
var refreshTimer = null;
|
||
|
||
function tryRefresh(callback) {
|
||
fetch('/api/auth/refresh', { method: 'POST' })
|
||
.then(function (res) {
|
||
if (res.ok) {
|
||
if (callback) callback();
|
||
} else {
|
||
if (refreshTimer) {
|
||
clearInterval(refreshTimer);
|
||
refreshTimer = null;
|
||
}
|
||
}
|
||
})
|
||
.catch(function () {
|
||
if (refreshTimer) {
|
||
clearInterval(refreshTimer);
|
||
refreshTimer = null;
|
||
}
|
||
});
|
||
}
|
||
|
||
// 仅当存在"记住我"标记 Cookie 时才尝试刷新（避免无需刷新时产生 401 控制台报错）
|
||
function hasCookie(name) {
|
||
return document.cookie.split(';').some(function (c) {
|
||
return c.trim().startsWith(name + '=');
|
||
});
|
||
}
|
||
|
||
if (hasCookie('mlb_rm')) {
|
||
tryRefresh(function () {
|
||
refreshTimer = setInterval(function () { tryRefresh(null); }, REFRESH_INTERVAL);
|
||
|
||
if (!document.getElementById('logoutBtn') && !sessionStorage.getItem('mlb_refreshed')) {
|
||
sessionStorage.setItem('mlb_refreshed', '1');
|
||
window.location.reload();
|
||
}
|
||
});
|
||
sessionStorage.removeItem('mlb_refreshed');
|
||
}
|
||
|
||
} // end if (!onAuthPage)
|
||
})();
|