danyang-match/admin-web/src/stores/auth.ts

import { defineStore } from 'pinia'
import { ref, computed } from 'vue'
import { post } from '@/api/client'

interface OperatorInfo {
  operatorId: string
  name: string
  username: string
  permissions: string[]
  organizationId: string | null
}

const previewRolePermissions: Record<string, string[]> = {
  reviewer: ['review.view', 'user.view'],
  counselor: ['counseling.service.view', 'referral.manage'],
  station: ['service_location.view', 'service_appointment.view'],
  operator: ['review.view', 'user.view', 'organization.manage', 'permission.manage', 'activity.review_registration', 'risk.report.view', 'risk.report.process', 'analytics.view', 'banner.view', 'content.view', 'service_location.view', 'service_appointment.view', 'service_program.manage', 'counseling.service.view', 'referral.manage'],
}

export const useAuthStore = defineStore('auth', () => {
  const previewParams = import.meta.env.DEV ? new URLSearchParams(window.location.search) : null
  const previewRole = previewParams?.get('preview') || ''
  const previewOperator: OperatorInfo | null = previewRolePermissions[previewRole]
    ? { operatorId: 'ui-preview', name: '界面验收员', username: 'preview', permissions: previewRolePermissions[previewRole], organizationId: null }
    : null
  const token = ref<string>(previewOperator ? 'ui-preview-only' : (localStorage.getItem('accessToken') || ''))
  const operator = ref<OperatorInfo | null>(
    previewOperator || JSON.parse(localStorage.getItem('operator') || 'null')
  )

  const isLoggedIn = computed(() => !!token.value)
  const permissions = computed(() => operator.value?.permissions || [])

  async function login(username: string, password: string) {
    const res: any = await post('/auth/operator/login', { username, password })
    if (res.success) {
      token.value = res.data.accessToken
      operator.value = {
        operatorId: res.data.operatorId,
        name: res.data.name,
        username: res.data.username,
        permissions: res.data.permissions || [],
        organizationId: res.data.organizationId ?? null,
      }
      localStorage.setItem('accessToken', res.data.accessToken)
      localStorage.setItem('operator', JSON.stringify(operator.value))
      return res.data
    }
    throw new Error(res.message || '登录失败')
  }

  function logout() {
    token.value = ''
    operator.value = null
    localStorage.removeItem('accessToken')
    localStorage.removeItem('operator')
  }

  return { token, operator, isLoggedIn, permissions, login, logout }
})