v 1.0.7.2 添加修改文章发布内容

Author: yyyCode

frontend/src/api/admin.js

@@ -47,6 +47,14 @@ export function publishArticle(id) {
   return request(`/api/v1/articles/${id}/publish`, { method: 'POST', withAuth: true })
 }
 
+export function publishArticleWithTime(id, payload) {
+  return request(`/api/v1/articles/${id}/publish`, {
+    method: 'POST',
+    withAuth: true,
+    body: JSON.stringify(payload || {})
+  })
+}
+
 export function deleteMyArticle(id) {
   return request(`/api/v1/articles/${id}`, { method: 'DELETE', withAuth: true })
 }

frontend/src/api/http.js

@@ -4,6 +4,8 @@
  * - 未设置：开发环境默认连仓库里的远程后端；生产环境默认同域（与上面空字符串一致）。
  * 注意：不要用 `||`，否则空字符串会被当成假值而误用默认 IP。
  */
+import { clearAuth, getStoredAccessToken } from '../auth/session'
+
 function resolveApiBase() {
   const v = import.meta.env.VITE_API_BASE
   if (v === '') return ''
@@ -28,7 +30,7 @@ export async function request(path, options = {}) {
   }
 
   if (options.withAuth) {
-    const token = localStorage.getItem('accessToken')
+    const token = getStoredAccessToken()
     if (!token) {
       const err = new Error('未登录')
       err.httpStatus = 401
@@ -50,6 +52,17 @@ export async function request(path, options = {}) {
     // ignore
   }
 
+  if (res.status === 401 && options.withAuth) {
+    clearAuth()
+    if (typeof window !== 'undefined' && window.location.pathname.startsWith('/console')) {
+      const redirect = window.location.pathname + window.location.search
+      window.location.assign('/console/login?redirect=' + encodeURIComponent(redirect))
+    }
+    const err = new Error('登录已失效')
+    err.httpStatus = 401
+    throw err
+  }
+
   // API 统一返回 ApiResponse，HTTP 层可能仍为 200
   if (json && typeof json.code === 'number' && json.code !== 0) {
     const msg = json.message || '请求失败'

frontend/src/api/media.js

@@ -1,7 +1,8 @@
+import { getStoredAccessToken } from '../auth/session'
 import { API_BASE } from './http'
 
 function getAuthHeader() {
-  const token = localStorage.getItem('accessToken')
+  const token = getStoredAccessToken()
   if (!token) return {}
   return { Authorization: `Bearer ${token}` }
 }

frontend/src/api/profile.js

@@ -1,8 +1,9 @@
+import { getStoredAccessToken } from '../auth/session'
 import { request } from './http'
 
 export function fetchPublicProfile() {
   // 已登录时也希望前台右侧头像/昵称/签名随当前用户更新
-  const token = localStorage.getItem('accessToken')
+  const token = getStoredAccessToken()
   if (token) {
     return request(`/api/v1/profile`, { withAuth: true })
   }

frontend/src/assets/blog.css

@@ -922,8 +922,45 @@ body {
   width: 100%;
   display: flex;
   align-items: center;
-  justify-content: flex-end;
+  justify-content: space-between;
   min-height: 40px;
+  gap: 10px;
+}
+
+.site-top-actions {
+  display: inline-flex;
+  align-items: center;
+  gap: 10px;
+}
+
+.top-action-btn {
+  display: inline-flex;
+  align-items: center;
+  gap: 8px;
+  border-radius: 999px;
+  padding: 8px 14px;
+  cursor: pointer;
+  font-weight: 700;
+  font-size: 13px;
+  border: 1px solid var(--border);
+  background: var(--card);
+  color: var(--text);
+  box-shadow: 0 2px 12px rgba(0, 0, 0, 0.08);
+}
+
+.top-action-ico {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  opacity: 0.9;
+}
+
+.top-action-btn:hover {
+  border-color: rgba(170, 59, 255, 0.45);
+}
+
+[data-theme='dark'] .top-action-btn {
+  box-shadow: 0 2px 12px rgba(0, 0, 0, 0.35);
 }
 
 .theme-toggle {

frontend/src/auth/session.js

@@ -0,0 +1,49 @@
+/**
+ * 控制台访问：仅依赖登录态（JWT），不依赖「是否先访问过前台」等弱门槛。
+ */
+
+function b64UrlDecode(segment) {
+  let b64 = segment.replace(/-/g, '+').replace(/_/g, '/')
+  while (b64.length % 4) b64 += '='
+  return atob(b64)
+}
+
+export function getStoredAccessToken() {
+  const t = localStorage.getItem('accessToken')
+  if (typeof t !== 'string') return null
+  const s = t.trim()
+  return s.length > 0 ? s : null
+}
+
+/** 是否为标准 JWT 外形（header.payload.sig） */
+export function isLikelyJwt(token) {
+  return typeof token === 'string' && token.split('.').length === 3
+}
+
+export function parseJwtPayload(token) {
+  if (!isLikelyJwt(token)) return null
+  try {
+    const json = b64UrlDecode(token.split('.')[1])
+    return JSON.parse(json)
+  } catch {
+    return null
+  }
+}
+
+export function isJwtExpired(token) {
+  const payload = parseJwtPayload(token)
+  if (!payload) return true
+  if (typeof payload.exp !== 'number') return false
+  return Date.now() >= payload.exp * 1000
+}
+
+export function clearAuth() {
+  localStorage.removeItem('accessToken')
+  localStorage.removeItem('refreshToken')
+}
+
+export function isConsoleSessionValid() {
+  const token = getStoredAccessToken()
+  if (!token || !isLikelyJwt(token) || isJwtExpired(token)) return false
+  return true
+}

frontend/src/components/BlogHeader.vue

@@ -1,6 +1,18 @@
 <template>
   <header class="site-top-bar" role="banner">
     <div class="site-top-bar-inner">
+      <div class="site-top-actions">
+        <button type="button" class="top-action-btn" aria-label="面试内容" @click="onInterviewClick">
+          <span class="top-action-ico" aria-hidden="true">
+            <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+              <path d="M9 2h6v3H9z" />
+              <path d="M7 5h10a2 2 0 0 1 2 2v12a3 3 0 0 1-3 3H8a3 3 0 0 1-3-3V7a2 2 0 0 1 2-2z" />
+              <path d="M9 11h6M9 15h6" />
+            </svg>
+          </span>
+          面试内容
+        </button>
+      </div>
       <button
         type="button"
         class="theme-toggle"
@@ -17,6 +29,7 @@
 <script setup>
 import { onMounted, ref } from 'vue'
 import { toggleTheme as applyToggle } from '../theme'
+import { showMessage } from '../utils/message'
 
 const isDark = ref(false)
 
@@ -32,4 +45,8 @@ function onToggle() {
   applyToggle()
   sync()
 }
+
+function onInterviewClick() {
+  showMessage('功能暂未开放')
+}
 </script>

frontend/src/layouts/ConsoleLayout.vue

@@ -137,6 +137,7 @@
 import { computed, onMounted, ref } from 'vue'
 import { useRoute, useRouter } from 'vue-router'
 import { fetchMe } from '../api/admin'
+import { clearAuth } from '../auth/session'
 
 const router = useRouter()
 const route = useRoute()
@@ -171,8 +172,7 @@ async function loadMe() {
 }
 
 function logout() {
-  localStorage.removeItem('accessToken')
-  localStorage.removeItem('refreshToken')
+  clearAuth()
   router.push('/console/login')
 }
 

frontend/src/router/index.js

@@ -1,5 +1,7 @@
 import { createRouter, createWebHistory } from 'vue-router'
 
+import { clearAuth, isConsoleSessionValid } from '../auth/session'
+
 import HomeView from '../views/HomeView.vue'
 import ArticleDetailView from '../views/ArticleDetailView.vue'
 import AllArticlesView from '../views/AllArticlesView.vue'
@@ -76,26 +78,31 @@ const router = createRouter({
   routes
 })
 
-/**
- * 本标签页内是否已访问过「前台」任意页面（非 /console*）。
- * 用于避免地址栏直接敲 /console、/console/login：须先访问本站前台一次。
- */
-const SITE_ENTRY_KEY = 'openblog_site_entry_ok'
-
-router.afterEach((to) => {
-  if (!to.path.startsWith('/console')) {
-    sessionStorage.setItem(SITE_ENTRY_KEY, '1')
-  }
-})
+/** 仅允许站内相对路径，防止 open redirect */
+function safeConsoleRedirect(raw) {
+  if (typeof raw !== 'string') return '/console'
+  const t = raw.trim()
+  if (!t.startsWith('/') || t.startsWith('//')) return '/console'
+  if (t.startsWith('/console/login')) return '/console'
+  return t
+}
 
 router.beforeEach((to) => {
-  if (to.path.startsWith('/console')) {
-    if (!sessionStorage.getItem(SITE_ENTRY_KEY)) {
-      return { path: '/' }
-    }
-    if (to.path !== '/console/login' && !localStorage.getItem('accessToken')) {
-      return { path: '/console/login', query: { redirect: to.fullPath } }
+  if (!to.path.startsWith('/console')) return true
+
+  const isLoginPage = to.path === '/console/login'
+
+  if (isLoginPage) {
+    if (isConsoleSessionValid()) {
+      const r = to.query.redirect
+      return { path: safeConsoleRedirect(typeof r === 'string' ? r : '') }
     }
+    return true
+  }
+
+  if (!isConsoleSessionValid()) {
+    clearAuth()
+    return { path: '/console/login', query: { redirect: to.fullPath } }
   }
   return true
 })

frontend/src/views/ConsoleArticlesView.vue

@@ -77,6 +77,11 @@
                 <textarea v-model="form.contentMarkdown" class="textarea" rows="10"></textarea>
               </div>
 
+              <div class="field" style="margin-top: 12px; max-width: 420px">
+                <div class="label">发布时间（可选，留空为当前时间；允许早于当前时间）</div>
+                <input v-model="publishAtInput" class="input" type="datetime-local" />
+              </div>
+
               <div style="display: flex; gap: 12px; flex-wrap: wrap; margin-top: 14px">
                 <button class="btn primary" @click="saveDraft">保存草稿/更新</button>
                 <button class="btn" :disabled="!selectedId" @click="publish" :style="{ opacity: selectedId ? 1 : 0.6 }">
@@ -106,6 +111,7 @@ import {
   createDraft,
   updateArticle,
   publishArticle,
+  publishArticleWithTime,
   deleteMyArticle
 } from '../api/admin'
 import { uploadMedia } from '../api/media'
@@ -123,6 +129,8 @@ const form = ref({
   coverMediaKey: null
 })
 
+const publishAtInput = ref('')
+
 const loadingArticles = ref(false)
 const loadingDetail = ref(false)
 const myArticles = ref([])
@@ -153,6 +161,26 @@ function resetEditor() {
   form.value.summary = ''
   form.value.contentMarkdown = ''
   form.value.coverMediaKey = null
+  publishAtInput.value = ''
+}
+
+function toLocalDatetimeInput(iso) {
+  if (!iso) return ''
+  try {
+    const d = new Date(iso)
+    if (Number.isNaN(d.getTime())) return ''
+    const pad = (n) => String(n).padStart(2, '0')
+    return `${d.getFullYear()}-${pad(d.getMonth() + 1)}-${pad(d.getDate())}T${pad(d.getHours())}:${pad(d.getMinutes())}`
+  } catch {
+    return ''
+  }
+}
+
+function toIsoOrEmpty(v) {
+  if (!v || !String(v).trim()) return undefined
+  const d = new Date(v)
+  if (Number.isNaN(d.getTime())) return undefined
+  return d.toISOString()
 }
 
 async function newDraft() {
@@ -170,6 +198,7 @@ async function loadEditor(id) {
     form.value.summary = detail.summary || ''
     form.value.contentMarkdown = detail.contentMarkdown || ''
     form.value.coverMediaKey = detail.coverMediaKey || null
+    publishAtInput.value = toLocalDatetimeInput(detail.publishedAt)
   } finally {
     loadingDetail.value = false
   }
@@ -216,7 +245,12 @@ async function publish() {
   articleError.value = ''
   articleSuccess.value = ''
   try {
-    await publishArticle(selectedId.value)
+    const publishedAt = toIsoOrEmpty(publishAtInput.value)
+    if (publishedAt) {
+      await publishArticleWithTime(selectedId.value, { publishedAt })
+    } else {
+      await publishArticle(selectedId.value)
+    }
     await loadArticles()
     articleSuccess.value = '发布成功'
   } catch (e) {