Files
wordpress-theme-aksrt/assets/js/signin.js
T
kate522 ff4ec1eb43 feat(captcha): 打通人机验证 11 个场景的前后端完整链路
- 统一验证入口 aksrt_require_captcha(),返回 true|WP_Error,启用场景配置缺失时 fail-closed 拒绝
- 前端公共 API 重构为 window.AKSRTCaptcha(verify/collect/reset/run),单飞锁防并发重复验证,一次性 proof 绑定浏览器 cookie+场景+服务商+主机名
- challenge/exchange REST 端点:challenge 原子占用防票据放大厂商调用,增加频率限制
- 新增 OAuth bind pass:服务端签发 5 分钟一次性令牌,绑定用户+服务商+浏览器,微信扫码延迟消费
- 覆盖场景:评论、登录、注册、绑定第三方、绑定手机、找回密码、修改密码、更改邮箱、资料下载、签到、前台投稿
- 移除 Service 层重复验证与 _auth_code_verified/_defer_login 等客户端可伪造标志,删除下载共享 pass 死代码
- 修复腾讯 TC3 签名 scope、Cloudflare action/cdata/hostname 严格校验、阿里云验签错误码映射
- 后台 Schema 保存对 secret 字段做掩码/保留合并;导入导出过滤 aksrt_captcha_config
- 重建 public bundle 与 admin SPA;新增 captcha 运行时/安全/业务契约测试与 harness
2026-09-02 13:03:24 +08:00

162 lines
5.1 KiB
JavaScript

/**
* AKSRT global sign-in controller.
*
* All sign-in buttons share one REST request, captcha and toast flow.
*/
(function () {
'use strict';
if (!window.aksrtData || !window.AksrtRequest) {
return;
}
var signinBusy = false;
function api(path, options) {
return window.AksrtRequest.request(path, options || {}).then(function (response) {
return {
ok: response.ok,
status: response.status,
json: response.json || {}
};
}).catch(function (error) {
var response = error && error.response ? error.response : {};
return {
ok: false,
status: error && error.status ? error.status : (response.status || 0),
json: error && error.json ? error.json : (response.json || { message: error && error.message })
};
});
}
function initSignin() {
var buttons = Array.prototype.slice.call(document.querySelectorAll('[data-signin-btn]'));
var freshButtons = buttons.filter(function (button) {
return button.dataset.aksrtSigninInitialized !== '1';
});
if (!freshButtons.length) return;
freshButtons.forEach(function (button) {
button.dataset.aksrtSigninInitialized = '1';
});
function statuses() {
return document.querySelectorAll('[data-signin-status]');
}
function currentButtons() {
return document.querySelectorAll('[data-signin-btn]');
}
function setStatus(text) {
statuses().forEach(function (status) {
status.textContent = text;
});
}
function setStatusHtml(html) {
statuses().forEach(function (status) {
status.innerHTML = html;
});
}
function setButtonState(state) {
currentButtons().forEach(function (button) {
var label = button.querySelector('[data-signin-label]');
var text = state === 'done'
? button.getAttribute('data-signin-done-label') || '已签到'
: (state === 'busy' ? '…' : button.getAttribute('data-signin-idle-label') || '签到');
if (label) label.textContent = text;
button.disabled = state !== 'idle';
button.classList.toggle('is-done', state === 'done');
});
}
function refresh() {
api('/signin/today').then(function (result) {
if (!result.ok) {
var message = (result.json && result.json.message) || '签到状态加载失败 (HTTP ' + result.status + ')';
setStatus(message);
notyf(message, 'danger');
return;
}
var data = result.json;
if (!data.enabled) {
setStatus('签到功能未启用');
setButtonState('done');
return;
}
if (data.signed) {
setStatusHtml('已签到 <strong>' + data.streak + '</strong> 天 +' + data.reward_today);
setButtonState('done');
return;
}
setStatusHtml('连续 <strong>' + data.streak + '</strong> 天,+' + data.reward_if_signin);
setButtonState('idle');
});
}
function captchaMount() {
return document.querySelector('[data-signin-captcha]');
}
function doSignin(captchaPayload) {
notyf('正在签到…', 'load', '', 'aksrt-balance-signin-toast');
api('/signin', {
method: 'POST',
body: JSON.stringify({ captcha: captchaPayload || {} })
}).then(function (result) {
signinBusy = false;
if (!result.ok) {
notyf((result.json && result.json.message) || '签到失败', 'danger', 5, 'aksrt-balance-signin-toast');
setButtonState('idle');
return;
}
notyf(result.json.message || '签到成功', 'success', 5, 'aksrt-balance-signin-toast');
document.querySelectorAll('[data-credits-value]').forEach(function (element) {
element.textContent = Number(result.json.balance || 0).toLocaleString();
});
setButtonState('done');
refresh();
}).finally(function () {
if (window.AKSRTCaptcha) window.AKSRTCaptcha.reset('signin', captchaMount());
});
}
freshButtons.forEach(function (button) {
button.addEventListener('click', function (event) {
event.preventDefault();
if (signinBusy || button.disabled) return;
signinBusy = true;
setButtonState('busy');
var captcha = window.AKSRTCaptcha;
var mount = captchaMount();
(captcha ? captcha.run('signin', mount) : Promise.resolve({})).then(function (payload) {
if (payload === null) throw new Error('已取消验证');
doSignin(payload);
}).catch(function (error) {
signinBusy = false;
if (captcha) captcha.reset('signin', mount);
notyf((error && error.message) || '人机验证加载中,请稍候再试', 'danger');
setButtonState('idle');
});
});
});
refresh();
}
if (document.readyState === 'loading') {
document.addEventListener('DOMContentLoaded', initSignin);
} else {
initSignin();
}
if (window.AksrtFrontend && typeof window.AksrtFrontend.register === 'function') {
window.AksrtFrontend.register('signin', initSignin);
}
})();