优化了一些问题

tests/widget-system/auth-source-contract.test.cjs

@@ -173,6 +173,12 @@ test('shared renderer contracts every configured authentication state', () => {
   assert.match(client, /aksrtAuthAutoUntil/);
   assert.match(client, /data-password-show/);
   assert.match(client, /pollQr/);
+  assert.match(client, /AbortController/);
+  assert.match(client, /refreshInFlight|inFlight/);
+  assert.match(client, /visibilitychange/);
+  assert.match(client, /Math\.pow\(2/);
+  assert.match(client, /QR_TIMEOUT/);
+  assert.match(client, /stopQr\(root\)/);
   assert.match(client, /window\.notyf\(escapeHtml\(text\), type \|\| 'info'\)/);
   assert.match(client, /notify\('请先完成人机验证', 'warning'\)/);
   assert.match(client, /form\.noValidate = true/);
@@ -182,3 +188,47 @@ test('shared renderer contracts every configured authentication state', () => {
   assert.match(settings, /invitation_mode/);
   assert.match(settings, /\['close', 'open', 'must'\]/);
 });
+
+test('OAuth frontend is accessible, redirect-aware, and removes retired providers', () => {
+  const shared = read('templates/parts/auth-content.php');
+  const modal = read('templates/parts/modal-auth.php');
+  const client = read('assets/js/auth.js');
+  const userCenter = read('assets/js/routes/user-center.js');
+  const bindings = read('inc/helpers/user-center-renderers/settings-bindings.php');
+  const signCss = read('assets/css/routes/sign.css');
+  const mainCss = read('assets/css/main.css');
+
+  assert.match(modal, /role="dialog"[^>]*aria-modal="true"[^>]*aria-labelledby="aksrt-auth-modal-title"/);
+  assert.match(modal, /id="aksrt-auth-modal-title"/);
+  assert.match(client, /focusableModalItems/);
+  assert.match(client, /lastModalTrigger/);
+  assert.match(client, /restore\.focus\(\)/);
+  assert.match(shared, /role="tabpanel"[^>]*data-auth-panel="signin"/);
+  assert.match(shared, /role="tabpanel"[^>]*data-auth-panel="oauth"/);
+  assert.match(client, /setAttribute\('role', 'tab'\)/);
+  assert.match(client, /aria-controls/);
+  assert.match(client, /aria-selected/);
+  assert.match(shared, /data-password-show[^>]*aria-label=/);
+  assert.match(shared, /aria-pressed="false"/);
+  assert.match(client, /setAttribute\('aria-label', visible \? '隐藏密码' : '显示密码'\)/);
+  assert.match(client, /setAttribute\('aria-pressed', visible \? 'true' : 'false'\)/);
+  assert.match(shared, /data-auth-qr-status[^>]*role="status"[^>]*aria-live="polite"/);
+  assert.match(shared, /data-provider=/);
+  assert.match(shared, /aria-label="<\?php echo esc_attr\(sprintf/);
+  assert.match(client, /searchParams\.set\('redirect_to', redirect\)/);
+
+  assert.match(client, /oauth_action/);
+  assert.match(client, /oauth_provider/);
+  assert.match(client, /oauth_error/);
+  assert.match(client, /oauthErrorMessages/);
+  assert.doesNotMatch(client, /notify\([^\n;]*searchParams\.get\('oauth_error'/);
+  assert.match(userCenter, /errorMessages\[currentUrl\.searchParams\.get\('oauth_error'\)/);
+  assert.match(userCenter, /result\.status === 409/);
+  assert.match(userCenter, /d\.message \|\| \(d\.data && d\.data\.message\)/);
+  assert.match(bindings, /\$binding\['provider'\] \?\? \$binding\['key'\]/);
+  assert.match(bindings, /\$binding\['start_url'\] \?\? \$binding\['url'\]/);
+  assert.match(bindings, /data-provider=/);
+
+  assert.doesNotMatch(signCss + mainCss, /social-login-item[^\n{]*(?:baidu|alipay)|social-login-item\.(?:baidu|alipay)/i);
+  assert.match(mainCss, /\.pay-box \.but\.baidu/);
+});