580 lines
16 KiB
Vue
580 lines
16 KiB
Vue
<template>
|
||
<login-layout v-if="!loading" v-loading="loading">
|
||
<LoginContainer :subTitle="newDefaultSlogan">
|
||
<h2 class="mb-24" v-if="!showQrCodeTab">{{ loginMode || $t('views.login.title') }}</h2>
|
||
<div v-if="!showQrCodeTab">
|
||
<el-form
|
||
class="login-form"
|
||
:rules="rules"
|
||
:model="loginForm"
|
||
ref="loginFormRef"
|
||
@keyup.enter="loginHandle"
|
||
>
|
||
<div class="mb-24">
|
||
<el-form-item prop="username">
|
||
<el-input
|
||
size="large"
|
||
class="input-item"
|
||
v-model="loginForm.username"
|
||
@blur="handleUsernameBlur(loginForm.username)"
|
||
:placeholder="$t('views.login.loginForm.username.placeholder')"
|
||
>
|
||
</el-input>
|
||
</el-form-item>
|
||
</div>
|
||
<div class="mb-24">
|
||
<el-form-item prop="password">
|
||
<el-input
|
||
type="password"
|
||
size="large"
|
||
class="input-item"
|
||
v-model="loginForm.password"
|
||
:placeholder="$t('views.login.loginForm.password.placeholder')"
|
||
show-password
|
||
>
|
||
</el-input>
|
||
</el-form-item>
|
||
</div>
|
||
<div class="mb-24" v-if="loginMode !== 'LDAP' && showCaptcha">
|
||
<el-form-item prop="captcha">
|
||
<div class="flex-between w-full">
|
||
<el-input
|
||
size="large"
|
||
class="input-item"
|
||
v-model="loginForm.captcha"
|
||
:placeholder="$t('views.login.loginForm.captcha.placeholder')"
|
||
>
|
||
</el-input>
|
||
|
||
<img
|
||
:src="identifyCode"
|
||
alt=""
|
||
height="38"
|
||
class="ml-8 cursor border border-r-6"
|
||
@click="makeCode(loginForm.username)"
|
||
/>
|
||
</div>
|
||
</el-form-item>
|
||
</div>
|
||
</el-form>
|
||
|
||
<el-button
|
||
size="large"
|
||
type="primary"
|
||
class="w-full"
|
||
@click="loginHandle"
|
||
:loading="loading"
|
||
>
|
||
{{ $t('views.login.buttons.login') }}
|
||
</el-button>
|
||
<div class="operate-container flex-between mt-12">
|
||
<el-button
|
||
:loading="loading"
|
||
class="forgot-password"
|
||
@click="router.push('/forgot_password')"
|
||
link
|
||
type="primary"
|
||
>
|
||
{{ $t('views.login.forgotPassword') }}?
|
||
</el-button>
|
||
</div>
|
||
</div>
|
||
<div v-if="showQrCodeTab">
|
||
<QrCodeTab :tabs="orgOptions" :default-tab="defaultQrTab"/>
|
||
</div>
|
||
<div class="login-gradient-divider lighter mt-24" v-if="modeList.length > 1">
|
||
<span>{{ $t('views.login.moreMethod') }}</span>
|
||
</div>
|
||
<div class="text-center mt-16">
|
||
<template v-for="item in modeList">
|
||
<el-button
|
||
v-if="item !== '' && loginMode !== item && item !== 'QR_CODE'"
|
||
circle
|
||
:key="item"
|
||
class="login-button-circle color-secondary"
|
||
@click="changeMode(item)"
|
||
>
|
||
<span
|
||
:style="{
|
||
'font-size': item === 'OAUTH2' ? '8px' : '10px',
|
||
color: theme.themeInfo?.theme,
|
||
}"
|
||
>{{ item }}</span
|
||
>
|
||
</el-button>
|
||
<el-button
|
||
v-if="item === 'QR_CODE' && loginMode !== item"
|
||
circle
|
||
:key="item"
|
||
class="login-button-circle color-secondary"
|
||
@click="changeMode('QR_CODE')"
|
||
>
|
||
<img src="@/assets/icon_qr_outlined.svg" width="25px"/>
|
||
</el-button>
|
||
<el-button
|
||
v-if="item === '' && loginMode !== ''"
|
||
circle
|
||
:key="item"
|
||
class="login-button-circle color-secondary"
|
||
style="font-size: 24px"
|
||
icon="UserFilled"
|
||
@click="changeMode('')"
|
||
/>
|
||
</template>
|
||
</div>
|
||
</LoginContainer>
|
||
</login-layout>
|
||
</template>
|
||
<script setup lang="ts">
|
||
import {computed, onBeforeMount, onMounted, ref} from 'vue'
|
||
import {useRoute, useRouter} from 'vue-router'
|
||
import type {FormInstance, FormRules} from 'element-plus'
|
||
import type {LoginRequest} from '@/api/type/login'
|
||
import LoginContainer from '@/layout/login-layout/LoginContainer.vue'
|
||
import LoginLayout from '@/layout/login-layout/LoginLayout.vue'
|
||
import loginApi from '@/api/user/login'
|
||
import authApi from '@/api/system-settings/auth-setting'
|
||
import {getBrowserLang, t} from '@/locales'
|
||
import useStore from '@/stores'
|
||
import {useI18n} from 'vue-i18n'
|
||
import QrCodeTab from '@/views/login/scanCompinents/QrCodeTab.vue'
|
||
import {MsgConfirm, MsgError} from '@/utils/message.ts'
|
||
import * as dd from 'dingtalk-jsapi'
|
||
import {loadScript} from '@/utils/common'
|
||
import forge from 'node-forge';
|
||
|
||
const router = useRouter()
|
||
const {login, user, theme} = useStore()
|
||
const {locale} = useI18n({useScope: 'global'})
|
||
const loading = ref<boolean>(false)
|
||
const route = useRoute()
|
||
const identifyCode = ref<string>('')
|
||
const loginFormRef = ref<FormInstance>()
|
||
const authSetting = ref<any>(null)
|
||
const defaultQrTab = ref<string>('')
|
||
const loginForm = ref<LoginRequest>({
|
||
username: '',
|
||
password: '',
|
||
captcha: '',
|
||
})
|
||
|
||
const rules = ref<FormRules<LoginRequest>>({
|
||
username: [
|
||
{
|
||
required: true,
|
||
message: t('views.login.loginForm.username.requiredMessage'),
|
||
trigger: 'blur',
|
||
},
|
||
],
|
||
password: [
|
||
{
|
||
required: true,
|
||
message: t('views.login.loginForm.password.requiredMessage'),
|
||
trigger: 'blur',
|
||
},
|
||
],
|
||
captcha: [
|
||
{
|
||
required: false,
|
||
message: t('views.login.loginForm.captcha.requiredMessage'),
|
||
trigger: 'blur',
|
||
},
|
||
],
|
||
})
|
||
|
||
const loginHandle = () => {
|
||
if (!loginFormRef.value) {
|
||
return
|
||
}
|
||
loginFormRef.value.validate((valid) => {
|
||
if (valid) {
|
||
loading.value = true
|
||
if (loginMode.value === 'LDAP') {
|
||
login
|
||
.asyncLdapLogin(loginForm.value)
|
||
.then(() => {
|
||
locale.value = localStorage.getItem('MaxKB-locale') || getBrowserLang() || 'en-US'
|
||
router.push({name: 'home'})
|
||
})
|
||
.catch(() => {
|
||
loading.value = false
|
||
})
|
||
} else {
|
||
const publicKey = forge.pki.publicKeyFromPem(user.rasKey);
|
||
const encrypted = publicKey.encrypt(JSON.stringify(loginForm.value), 'RSAES-PKCS1-V1_5');
|
||
const encryptedBase64 = forge.util.encode64(encrypted);
|
||
login
|
||
.asyncLogin({encryptedData: encryptedBase64, username: loginForm.value.username})
|
||
.then(() => {
|
||
locale.value = localStorage.getItem('MaxKB-locale') || getBrowserLang() || 'en-US'
|
||
localStorage.setItem('workspace_id', 'default')
|
||
localStorage.removeItem(loginForm.value.username)
|
||
router.push({name: 'home'})
|
||
})
|
||
.catch(() => {
|
||
const username = loginForm.value.username
|
||
localStorage.setItem(username, String(Number(localStorage.getItem(username) || '0') + 1))
|
||
loading.value = false
|
||
loginForm.value.username = ''
|
||
loginForm.value.password = ''
|
||
loginForm.value.captcha = ''
|
||
const timestampKey = `${username}_first_fail_timestamp`
|
||
if (!localStorage.getItem(timestampKey)) {
|
||
localStorage.setItem(timestampKey, Date.now().toString())
|
||
}
|
||
})
|
||
}
|
||
}
|
||
})
|
||
}
|
||
|
||
const showCaptcha = computed<boolean>(() => {
|
||
if (!authSetting.value) return true
|
||
|
||
const maxAttempts = authSetting.value.max_attempts
|
||
|
||
// -1 表示一直不显示
|
||
if (maxAttempts === -1) {
|
||
return false
|
||
}
|
||
|
||
// 0 表示一直显示
|
||
if (maxAttempts === 0) {
|
||
return true
|
||
}
|
||
|
||
// 大于 0，根据登录失败次数决定
|
||
const username = loginForm.value.username?.trim()
|
||
if (!username) {
|
||
return false // 没有输入用户名时不显示
|
||
}
|
||
|
||
const timestampKey = `${username}_first_fail_timestamp`
|
||
const firstFailTimestamp = localStorage.getItem(timestampKey)
|
||
|
||
if (firstFailTimestamp) {
|
||
const expirationTime = 10 * 60 * 1000 // 10分钟毫秒数
|
||
if (Date.now() - parseInt(firstFailTimestamp) > expirationTime) {
|
||
// 过期则清除记录
|
||
localStorage.removeItem(username)
|
||
localStorage.removeItem(timestampKey)
|
||
return false
|
||
}
|
||
} else {
|
||
// 如果没有时间戳但有失败次数，可能是旧数据，清除失败次数
|
||
const failCount = Number(localStorage.getItem(username) || '0')
|
||
if (failCount > 0) {
|
||
localStorage.removeItem(username)
|
||
return false
|
||
}
|
||
}
|
||
|
||
const failCount = Number(localStorage.getItem(username) || '0')
|
||
console.log('failCount', failCount)
|
||
|
||
return failCount >= maxAttempts
|
||
})
|
||
|
||
function makeCode(username?: string) {
|
||
loginApi.getCaptcha(username).then((res: any) => {
|
||
if (res && res.data && res.data.captcha) {
|
||
identifyCode.value = res.data.captcha
|
||
}
|
||
}).catch((error) => {
|
||
console.error('Failed to get captcha:', error)
|
||
})
|
||
}
|
||
|
||
function handleUsernameBlur(username: string) {
|
||
if (showCaptcha.value) {
|
||
makeCode(username)
|
||
}
|
||
}
|
||
|
||
onBeforeMount(() => {
|
||
user.asyncGetProfile().then((res) => {
|
||
// 企业版和专业版：第三方登录
|
||
if (user.isPE() || user.isEE()) {
|
||
authApi.getLoginAuthSetting().then((res) => {
|
||
if (Object.keys(res.data).length > 0) {
|
||
authSetting.value = res.data;
|
||
} else {
|
||
authSetting.value = {
|
||
max_attempts: 1,
|
||
default_value: 'LOCAL',
|
||
}
|
||
}
|
||
const params = route.query
|
||
if (params.login_mode !== 'manual') {
|
||
const defaultMode = authSetting.value.default_value
|
||
if (['lark', 'wecom', 'dingtalk'].includes(defaultMode)) {
|
||
changeMode('QR_CODE', false)
|
||
defaultQrTab.value = defaultMode
|
||
} else {
|
||
changeMode(defaultMode, false)
|
||
}
|
||
}
|
||
})
|
||
} else {
|
||
authSetting.value = {
|
||
max_attempts: 1,
|
||
default_value: 'LOCAL',
|
||
}
|
||
}
|
||
})
|
||
})
|
||
|
||
const modeList = ref<string[]>([''])
|
||
const QrList = ref<any[]>([''])
|
||
const loginMode = ref('')
|
||
const showQrCodeTab = ref(false)
|
||
|
||
interface qrOption {
|
||
key: string
|
||
value: string
|
||
}
|
||
|
||
const orgOptions = ref<qrOption[]>([])
|
||
|
||
function uuidv4() {
|
||
return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, function (c) {
|
||
const r = (Math.random() * 16) | 0
|
||
const v = c === 'x' ? r : (r & 0x3) | 0x8
|
||
return v.toString(16)
|
||
})
|
||
}
|
||
|
||
const newDefaultSlogan = computed(() => {
|
||
const default_login = '强大易用的企业级智能体平台'
|
||
if (!theme.themeInfo?.slogan || default_login == theme.themeInfo?.slogan) {
|
||
return t('theme.defaultSlogan')
|
||
} else {
|
||
return theme.themeInfo?.slogan
|
||
}
|
||
})
|
||
|
||
function redirectAuth(authType: string, needMessage: boolean = true) {
|
||
if (authType === 'LDAP' || authType === '' || authType === 'LOCAL') {
|
||
return
|
||
}
|
||
authApi.getLoginViewAuthSetting(authType, loading).then((res: any) => {
|
||
if (!res.data || !res.data.config) {
|
||
return
|
||
}
|
||
|
||
const config = res.data.config
|
||
// 构造带查询参数的redirectUrl
|
||
const redirectUrl = `${config.redirectUrl}`
|
||
let url
|
||
if (authType === 'CAS') {
|
||
url = config.ldpUri
|
||
url +=
|
||
url.indexOf('?') !== -1
|
||
? `&service=${encodeURIComponent(redirectUrl)}`
|
||
: `?service=${encodeURIComponent(redirectUrl)}`
|
||
} else if (authType === 'OIDC') {
|
||
const scope = config.scope || 'openid+profile+email'
|
||
url = `${config.authEndpoint}?client_id=${config.clientId}&redirect_uri=${redirectUrl}&response_type=code&scope=${scope}`
|
||
if (config.state) {
|
||
url += `&state=${config.state}`
|
||
}
|
||
} else if (authType === 'OAuth2') {
|
||
url = `${config.authEndpoint}?client_id=${config.clientId}&response_type=code&redirect_uri=${redirectUrl}&state=${uuidv4()}`
|
||
if (config.scope) {
|
||
url += `&scope=${config.scope}`
|
||
}
|
||
}
|
||
if (!url) {
|
||
return
|
||
}
|
||
if (needMessage) {
|
||
MsgConfirm(t('views.login.jump_tip'), '', {
|
||
confirmButtonText: t('views.login.jump'),
|
||
cancelButtonText: t('common.cancel'),
|
||
confirmButtonClass: '',
|
||
})
|
||
.then(() => {
|
||
window.location.href = url
|
||
})
|
||
.catch(() => {
|
||
})
|
||
} else {
|
||
console.log('url', url)
|
||
window.location.href = url
|
||
}
|
||
})
|
||
}
|
||
|
||
function changeMode(val: string, needMessage: boolean = true) {
|
||
loginMode.value = val === 'LDAP' ? val : ''
|
||
if (val === 'QR_CODE') {
|
||
loginMode.value = val
|
||
showQrCodeTab.value = true
|
||
return
|
||
}
|
||
showQrCodeTab.value = false
|
||
loginForm.value = {
|
||
username: '',
|
||
password: '',
|
||
captcha: '',
|
||
}
|
||
redirectAuth(val, needMessage)
|
||
loginFormRef.value?.clearValidate()
|
||
}
|
||
|
||
onBeforeMount(() => {
|
||
loading.value = true
|
||
user.asyncGetProfile().then((res) => {
|
||
// 企业版和专业版：第三方登录
|
||
if (user.isPE() || user.isEE()) {
|
||
login
|
||
.getAuthType()
|
||
.then((res) => {
|
||
//如果结果包含LDAP，把LDAP放在第一个
|
||
const ldapIndex = res.indexOf('LDAP')
|
||
if (ldapIndex !== -1) {
|
||
const [ldap] = res.splice(ldapIndex, 1)
|
||
res.unshift(ldap)
|
||
}
|
||
modeList.value = [...modeList.value, ...res]
|
||
})
|
||
.finally(() => (loading.value = false))
|
||
login
|
||
.getQrType()
|
||
.then((res) => {
|
||
if (res.length > 0) {
|
||
modeList.value = ['QR_CODE', ...modeList.value]
|
||
QrList.value = res
|
||
QrList.value.forEach((item) => {
|
||
orgOptions.value.push({
|
||
key: item,
|
||
value:
|
||
item === 'wecom'
|
||
? t('views.system.authentication.scanTheQRCode.wecom')
|
||
: item === 'dingtalk'
|
||
? t('views.system.authentication.scanTheQRCode.dingtalk')
|
||
: t('views.system.authentication.scanTheQRCode.lark'),
|
||
})
|
||
})
|
||
}
|
||
})
|
||
.finally(() => (loading.value = false))
|
||
} else {
|
||
loading.value = false
|
||
}
|
||
})
|
||
})
|
||
declare const window: any
|
||
|
||
onMounted(() => {
|
||
const route = useRoute()
|
||
const currentUrl = ref(route.fullPath)
|
||
const params = new URLSearchParams(currentUrl.value.split('?')[1])
|
||
const client = params.get('client')
|
||
|
||
const handleDingTalk = () => {
|
||
const code = params.get('corpId')
|
||
if (code) {
|
||
dd.runtime.permission.requestAuthCode({corpId: code}).then((res) => {
|
||
console.log('DingTalk client request success:', res)
|
||
login.dingOauth2Callback(res.code).then(() => {
|
||
router.push({name: 'home'})
|
||
})
|
||
})
|
||
}
|
||
}
|
||
|
||
const handleLark = () => {
|
||
const appId = params.get('appId')
|
||
const callRequestAuthCode = () => {
|
||
window.tt?.requestAuthCode({
|
||
appId: appId,
|
||
success: (res: any) => {
|
||
login.larkCallback(res.code).then(() => {
|
||
router.push({name: 'home'})
|
||
})
|
||
},
|
||
fail: (error: any) => {
|
||
MsgError(error)
|
||
},
|
||
})
|
||
}
|
||
|
||
loadScript('https://lf-scm-cn.feishucdn.com/lark/op/h5-js-sdk-1.5.35.js', {
|
||
jsId: 'lark-sdk',
|
||
forceReload: true,
|
||
})
|
||
.then(() => {
|
||
if (window.tt) {
|
||
window.tt.requestAccess({
|
||
appID: appId,
|
||
scopeList: [],
|
||
success: (res: any) => {
|
||
login.larkCallback(res.code).then(() => {
|
||
router.push({name: 'home'})
|
||
})
|
||
},
|
||
fail: (error: any) => {
|
||
const {errno} = error
|
||
if (errno === 103) {
|
||
callRequestAuthCode()
|
||
}
|
||
},
|
||
})
|
||
} else {
|
||
callRequestAuthCode()
|
||
}
|
||
})
|
||
.catch((error) => {
|
||
console.error('SDK 加载失败:', error)
|
||
})
|
||
}
|
||
|
||
switch (client) {
|
||
case 'dingtalk':
|
||
handleDingTalk()
|
||
break
|
||
case 'lark':
|
||
handleLark()
|
||
break
|
||
default:
|
||
break
|
||
}
|
||
})
|
||
</script>
|
||
<style lang="scss" scoped>
|
||
.login-gradient-divider {
|
||
position: relative;
|
||
text-align: center;
|
||
color: var(--el-color-info);
|
||
|
||
::before {
|
||
content: '';
|
||
width: 25%;
|
||
height: 1px;
|
||
background: linear-gradient(90deg, rgba(222, 224, 227, 0) 0%, #dee0e3 100%);
|
||
position: absolute;
|
||
left: 16px;
|
||
top: 50%;
|
||
}
|
||
|
||
::after {
|
||
content: '';
|
||
width: 25%;
|
||
height: 1px;
|
||
background: linear-gradient(90deg, #dee0e3 0%, rgba(222, 224, 227, 0) 100%);
|
||
position: absolute;
|
||
right: 16px;
|
||
top: 50%;
|
||
}
|
||
}
|
||
|
||
.login-button-circle {
|
||
padding: 20px !important;
|
||
margin: 0 4px;
|
||
width: 32px;
|
||
height: 32px;
|
||
text-align: center;
|
||
}
|
||
</style>
|