freefire
ff2ab286fb
新增： - 书库导入导出（library_import/library_export）及测试 - 图片变体生成（image_variants）与响应式图片（responsiveImage） - 书籍搜索（bookSearch）+ BookSearch/LibrarySearchGrid 组件 - 小组件运行时（widgetRuntime）与静态检查（widgetLint） - 上传缓存中间件（upload_cache）与字体 CSS 提取脚本 其它： - 后端 handlers/services 全量调整 - 前端页面、组件、库函数与配置更新
101 lines
3.9 KiB
TypeScript
101 lines
3.9 KiB
TypeScript
import type { Metadata } from "next";
|
||
import Link from "next/link";
|
||
import { cookies, headers } from "next/headers";
|
||
import { redirect } from "next/navigation";
|
||
import { ShieldAlert } from "lucide-react";
|
||
import { authCookieHeader, REFRESH_COOKIE, CSRF_COOKIE, TOKEN_COOKIE } from "@/lib/cookies";
|
||
import { getMeCached, getPublicSettingsCached } from "@/lib/serverData";
|
||
import { canAccessAdminMessages, hasAnyChannelPerm, isStaff } from "@/lib/roles";
|
||
import AdminShell from "@/components/admin/AdminShell";
|
||
import AdminSessionRecover from "./AdminSessionRecover";
|
||
|
||
// 整个 /admin 树不进入索引（子页面无需重复声明）
|
||
export const metadata: Metadata = {
|
||
robots: { index: false, follow: false },
|
||
};
|
||
|
||
// 权限以 Go 端为唯一判定；此处仅决定管理界面是否直出。
|
||
// 允许：管理角色 / 消息管理/群管权限 / 任一渠道权限（公告/单页/书库/广告）。
|
||
export default async function AdminLayout({ children }: { children: React.ReactNode }) {
|
||
const cookieStore = await cookies();
|
||
const cookie = authCookieHeader(cookieStore);
|
||
const me = await getMeCached(cookie || undefined);
|
||
const settings = await getPublicSettingsCached();
|
||
const theme = cookieStore.get("j13-theme")?.value === "dark" ? "dark" : "light";
|
||
|
||
const allowed =
|
||
!!me.user &&
|
||
(isStaff(me.user.role) || canAccessAdminMessages(me.user) || hasAnyChannelPerm(me.user));
|
||
|
||
if (!allowed || !me.user) {
|
||
// 已登录但无后台权限：保留提示卡片
|
||
if (me.user) {
|
||
return (
|
||
<div
|
||
data-admin-viewport
|
||
id="main"
|
||
tabIndex={-1}
|
||
className="min-h-screen flex items-center justify-center px-4 outline-none"
|
||
>
|
||
<div className="max-w-md w-full panel p-8 text-center">
|
||
<span
|
||
className="inline-flex w-14 h-14 rounded-full items-center justify-center mb-4"
|
||
style={{ background: "var(--gold-soft)", color: "var(--gold)" }}
|
||
>
|
||
<ShieldAlert size={26} />
|
||
</span>
|
||
<h1 className="text-lg font-extrabold" style={{ color: "var(--ink)" }}>
|
||
需要管理员权限
|
||
</h1>
|
||
<p className="meta mt-2 text-[13px]">此区域仅供站点管理员访问，如有疑问请联系站长。</p>
|
||
<Link href="/" className="btn btn-primary mt-6">
|
||
返回首页
|
||
</Link>
|
||
</div>
|
||
</div>
|
||
);
|
||
}
|
||
|
||
// SSR 侧未识别出用户（/api/me 瞬断、access 过期轮转竞态等）时，原实现直接
|
||
// 落到无壳的权限卡片——手机端表现为「首次进入后台整块导航 header 消失」，
|
||
// 无法切换管理板块，再进一次才恢复。这里按凭据状态分流入修复：
|
||
// ① 完全无凭据：直达登录页并回跳目标地址，不再给无导航的死胡同卡片；
|
||
// ② 仍带凭据：客户端经 fetchWithRefresh 自动续期后 router.refresh 自愈。
|
||
const hasAuthHint = !!(
|
||
cookieStore.get(TOKEN_COOKIE)?.value ||
|
||
cookieStore.get(REFRESH_COOKIE)?.value ||
|
||
cookieStore.get(CSRF_COOKIE)?.value
|
||
);
|
||
if (!hasAuthHint) {
|
||
const pathname = (await headers()).get("x-pathname") || "/admin";
|
||
redirect(`/login?redirect=${encodeURIComponent(pathname)}`);
|
||
}
|
||
return (
|
||
<div
|
||
data-admin-viewport
|
||
id="main"
|
||
tabIndex={-1}
|
||
className="min-h-screen flex items-center justify-center px-4 outline-none"
|
||
>
|
||
<AdminSessionRecover />
|
||
</div>
|
||
);
|
||
}
|
||
|
||
const user = me.user;
|
||
|
||
// 未读仅在有 access cookie 时才可信；壳层铃铛用 SSR 直出避免挂载后才出红点
|
||
const unread = cookieStore.get(TOKEN_COOKIE)?.value ? me.unread_count : 0;
|
||
|
||
return (
|
||
<AdminShell
|
||
user={user}
|
||
siteName={settings.site_name || "姜十三论坛"}
|
||
initialTheme={theme}
|
||
initialUnread={unread}
|
||
>
|
||
{children}
|
||
</AdminShell>
|
||
);
|
||
}
|