CI / backend (push) Canceled after 0s
用户要求:内测的固定验证码 123456 等于"知道手机号就能进任何账号",先关掉; 登录改用账号密码,并多一种"邮箱当账号名"的方式;发信邮箱要能在后台改。 短信那条路(默认关): - `SMS_LOGIN_ENABLED=false`,`/auth/sms/send` 与 `/auth/login` 统一回 2017,不是静默失败; - 生产校验改成"开着短信登录就必须配真通道",不开时 provider 是 dev 也不拦; - 新增 `GET /auth/methods`,登录页据此渲染,关着的路不出现(少一次"点进去才发现不能用")。 邮箱登录: - `app_user.email` + `uq_app_user_email`(`lower(email)` 部分索引),登录与绑定都归一成小写; - `POST /auth/login/password` 收 `phone` 或 `email`(二选一),失败统一 2013、连错 10 次锁 15 分钟; - 绑定在 `PATCH /auth/me`:格式错 2018、被占用 2019、留空串表示解绑。 系统设置(跨租户,只有平台管理员能改): - 新表 `system_setting`(不挂租户、无 RLS,写权限由 `deps.platform_admin` 把关); - `GET/PUT /settings/smtp`、`POST /settings/smtp/test`,授权码只写不读,留空表示沿用旧值; - `services/mail.py` 只用标准库 smtplib:465 走 SSL、587 走 STARTTLS,认证/拒收/网络失败都归 2020 但消息不同; - Web 新增「系统设置」页(状态卡 + 测试发信),侧栏只对平台管理员显示入口;账号页补「邮箱」。 验证:pytest 130 passed、ruff check/format 全绿、tsc 通过、vite build 通过; `web/e2e/login-email-smtp.mjs` 15 项全绿(含用 126 授权码真发一封测试邮件)。 顺带记下的两个坑:`platform_admin_phones` 是 list,pydantic-settings 会按 JSON 解析, 要用 `NoDecode` 交给 before-validator 拆逗号;迁移号写成 0009 会撞既有的 0009,一并改成 0010。
109 lines
3.6 KiB
TypeScript
109 lines
3.6 KiB
TypeScript
import { createContext, useCallback, useContext, useEffect, useMemo, useState } from "react";
|
|
import { Navigate, Route, Routes, useNavigate } from "react-router-dom";
|
|
import { ToastProvider } from "./components/ui";
|
|
import { UpdatePrompt } from "./components/UpdatePrompt";
|
|
import { api, authExpired, session } from "./lib/client";
|
|
import type { User, Workspace } from "./lib/types";
|
|
import { LoginPage } from "./pages/Login";
|
|
import { HomePage } from "./pages/Home";
|
|
import { WorkspacePage } from "./pages/Workspace";
|
|
import { TasksPage } from "./pages/Tasks";
|
|
import { BoardPage } from "./pages/Board";
|
|
import { TicketsPage } from "./pages/Tickets";
|
|
import { KnowledgePage } from "./pages/Knowledge";
|
|
import { NotificationsPage } from "./pages/Notifications";
|
|
import { JoinPage } from "./pages/Join";
|
|
import { AccountPage } from "./pages/Account";
|
|
import { SettingsPage } from "./pages/Settings";
|
|
|
|
interface AuthState {
|
|
user: User | null;
|
|
workspaces: Workspace[];
|
|
loading: boolean;
|
|
reload: () => Promise<void>;
|
|
signOut: () => void;
|
|
}
|
|
|
|
const AuthContext = createContext<AuthState | null>(null);
|
|
|
|
export function useAuth(): AuthState {
|
|
const ctx = useContext(AuthContext);
|
|
if (!ctx) throw new Error("useAuth 必须在 AuthProvider 内使用");
|
|
return ctx;
|
|
}
|
|
|
|
export function AuthProvider({ children }: { children: React.ReactNode }) {
|
|
const [user, setUser] = useState<User | null>(null);
|
|
const [workspaces, setWorkspaces] = useState<Workspace[]>([]);
|
|
const [loading, setLoading] = useState(true);
|
|
const navigate = useNavigate();
|
|
|
|
const reload = useCallback(async () => {
|
|
if (!session.access) {
|
|
setUser(null);
|
|
setWorkspaces([]);
|
|
setLoading(false);
|
|
return;
|
|
}
|
|
try {
|
|
const me = await api.get<{ user: User; workspaces: Workspace[] }>("/auth/me");
|
|
setUser(me.user);
|
|
setWorkspaces(me.workspaces);
|
|
} catch {
|
|
setUser(null);
|
|
setWorkspaces([]);
|
|
} finally {
|
|
setLoading(false);
|
|
}
|
|
}, []);
|
|
|
|
useEffect(() => {
|
|
void reload();
|
|
const onExpired = () => {
|
|
setUser(null);
|
|
setWorkspaces([]);
|
|
navigate("/login", { replace: true });
|
|
};
|
|
authExpired.addEventListener("expired", onExpired);
|
|
return () => authExpired.removeEventListener("expired", onExpired);
|
|
}, [reload, navigate]);
|
|
|
|
const signOut = useCallback(() => {
|
|
session.clear();
|
|
setUser(null);
|
|
setWorkspaces([]);
|
|
navigate("/login", { replace: true });
|
|
}, [navigate]);
|
|
|
|
const value = useMemo<AuthState>(
|
|
() => ({ user, workspaces, loading, reload, signOut }),
|
|
[user, workspaces, loading, reload, signOut],
|
|
);
|
|
|
|
return <AuthContext.Provider value={value}>{children}</AuthContext.Provider>;
|
|
}
|
|
|
|
export function App() {
|
|
return (
|
|
<ToastProvider>
|
|
<AuthProvider>
|
|
<Routes>
|
|
<Route path="/login" element={<LoginPage />} />
|
|
<Route path="/" element={<HomePage />} />
|
|
<Route path="/account" element={<AccountPage />} />
|
|
<Route path="/settings" element={<SettingsPage />} />
|
|
<Route path="/w/:wsId" element={<TasksPage />} />
|
|
<Route path="/w/:wsId/board" element={<BoardPage />} />
|
|
<Route path="/w/:wsId/tickets" element={<TicketsPage />} />
|
|
<Route path="/w/:wsId/knowledge" element={<KnowledgePage />} />
|
|
<Route path="/w/:wsId/notifications" element={<NotificationsPage />} />
|
|
<Route path="/w/:wsId/members" element={<WorkspacePage />} />
|
|
<Route path="/join/:wsId/:code" element={<JoinPage />} />
|
|
<Route path="*" element={<Navigate to="/" replace />} />
|
|
</Routes>
|
|
<UpdatePrompt />
|
|
</AuthProvider>
|
|
</ToastProvider>
|
|
);
|
|
}
|