rootandClaude Opus 5.5
0c0907ad4c
POST /auth/password and /auth/totp answer 401 for a wrong password/code; the global 401 handler treated that as an expired session and redirected to /login. Both mutations now pass noAuthRedirect so the form shows the field error. Co-Authored-By: Claude Opus 5.5 <[email protected]>
72 lines
2.2 KiB
TypeScript
72 lines
2.2 KiB
TypeScript
import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
|
|
import type {
|
|
AdminSetupRequest,
|
|
LoginRequest,
|
|
LoginResult,
|
|
PasswordChangeRequest,
|
|
PasswordChangeResult,
|
|
SessionInfo,
|
|
TotpAction,
|
|
TotpActionResult,
|
|
TotpStatus,
|
|
} from "@umt/contracts";
|
|
import { ApiRequestError, apiData, apiFetch } from "~/lib/api.ts";
|
|
import { qk } from "~/lib/query-keys.ts";
|
|
|
|
/** 登录态探测(免鉴权,不触发 401 跳转) */
|
|
export function useSession() {
|
|
return useQuery({
|
|
queryKey: qk.session,
|
|
queryFn: ({ signal }) => apiData<SessionInfo>("/auth/session", { signal, noAuthRedirect: true }),
|
|
staleTime: 60_000,
|
|
retry: 1,
|
|
});
|
|
}
|
|
|
|
/** 登录/初始化类请求:返回错误码(由调用方按码分流文案),不跳转 */
|
|
async function authPost<T>(path: string, body: unknown): Promise<T> {
|
|
const r = await apiFetch<T>(path, { method: "POST", body, noAuthRedirect: true });
|
|
if (!r.ok) throw new ApiRequestError(r.error.code, r.error.message);
|
|
return r.data;
|
|
}
|
|
|
|
export const login = (body: LoginRequest) => authPost<LoginResult>("/auth/login", body);
|
|
export const setupAdmin = (body: AdminSetupRequest) => authPost<SessionInfo>("/auth/setup", body);
|
|
|
|
export function useLogout() {
|
|
const qc = useQueryClient();
|
|
return useMutation({
|
|
mutationFn: () => authPost<unknown>("/auth/logout", {}),
|
|
onSettled: () => {
|
|
qc.clear();
|
|
},
|
|
});
|
|
}
|
|
|
|
export function useChangePassword() {
|
|
return useMutation({
|
|
mutationFn: (body: PasswordChangeRequest) =>
|
|
// 旧密码错误也是 401:留在页面显示字段错误,不当成会话失效跳登录
|
|
apiData<PasswordChangeResult>("/auth/password", { method: "POST", body, noAuthRedirect: true }),
|
|
});
|
|
}
|
|
|
|
export function useTotpStatus(enabled = true) {
|
|
return useQuery({
|
|
queryKey: qk.sub("auth", "totp"),
|
|
queryFn: ({ signal }) => apiData<TotpStatus>("/auth/totp", { signal }),
|
|
enabled,
|
|
});
|
|
}
|
|
|
|
export function useTotpAction() {
|
|
const qc = useQueryClient();
|
|
return useMutation({
|
|
mutationFn: (body: TotpAction) =>
|
|
apiData<TotpActionResult>("/auth/totp", { method: "POST", body, noAuthRedirect: true }),
|
|
onSuccess: () => {
|
|
qc.invalidateQueries({ queryKey: qk.all("auth") });
|
|
},
|
|
});
|
|
}
|