后端接口接入后，此处将展示上传进度、整批校验结果、逐行错误和错误报告下载；任一行错误时后端必须保证 0 行写入。
+ + +page
' } + +function createMemoryStorage(): Storage { + const values = new Map{{ pageDescription }}
+{{ announcement }}
+平台维护完整主数据；企业客户端仅可只读选择已启用的发货单位和收货单位。
{{ selectedCounterparty.code }} · {{ selectedCounterparty.id }}
{{ selectedCounterparty.remark || '暂无内部备注。' }}
共 {{ filteredRows.length }} 家企业，客户资料与注册审核统一管理。
{{ currentCustomer.id }} · {{ currentCustomer.creditCode }}
{{ currentCustomer.remark || '暂无内部备注。' }}
{{ loadError.message }}
仅展示后端返回的待审核记录，提交审核时使用审核单 ID。
审核单 {{ selectedReview.id }} · 租户 {{ selectedReview.tenantId }}
{{ qualificationsError.message }}
信用代码：{{ displayText(qualification.certificateNo) }}
+审核意见：{{ qualification.reviewComment }}
+请核对企业名称、统一社会信用代码和营业执照内容。通过后企业获得下单资格；驳回时必须说明原因。
+编码和名称必须唯一；停用后不允许新增引用，历史订单快照不受影响。
{{ (row as ExpressCompany).code }}{{ selectedCompany.code }} · {{ selectedCompany.id }}
{{ selectedCompany.remark || '暂无内部备注。' }}
从审核、受理、订舱到运输完成，统一跟进订单状态与负责人。
{{ currentOrder.customerName }} · {{ currentOrder.referenceNo }}
{{ item.description }}
customers
' } }, + { path: '/403', component: ForbiddenView }, + ], + }) + await router.push({ path: '/403', query: { from } }) + await router.isReady() + + const wrapper = mount(ForbiddenView, { + global: { + plugins: [pinia, router], + stubs: { + 'el-button': { + template: '', + }, + }, + }, + }) + return { wrapper, router } +} + +describe('ForbiddenView', () => { + beforeEach(() => { + vi.stubGlobal('localStorage', createMemoryStorage()) + pinia = createPinia() + setActivePinia(pinia) + }) + + it('shows the preview role and replaces the route with the first accessible page', async () => { + const access = useAccessPreviewStore() + access.initializeAfterLogin() + const { wrapper, router } = await mountForbidden('/customers?status=pending') + + expect(wrapper.text()).toContain('权限预览：超级管理员') + expect(wrapper.text()).toContain('来源页面：/customers?status=pending') + await wrapper.get('button').trigger('click') + await flushPromises() + + expect(router.currentRoute.value.fullPath).toBe('/customers') + }) + + it('sanitizes an external-looking source and guides role switching when no role is available', async () => { + const data = useAdminDataStore() + data.roles.forEach((role) => { role.status = '停用' }) + const access = useAccessPreviewStore() + access.initializeAfterLogin() + const { wrapper } = await mountForbidden('//example.com') + + expect(wrapper.text()).toContain('来源页面：/') + expect(wrapper.text()).not.toContain('//example.com') + expect(wrapper.text()).toContain('当前无可用角色') + expect(wrapper.text()).toContain('请使用顶栏切换角色') + expect(wrapper.find('button').exists()).toBe(false) + }) +}) diff --git a/src/views/ForbiddenView.vue b/src/views/ForbiddenView.vue new file mode 100644 index 00000000..ea0858fc --- /dev/null +++ b/src/views/ForbiddenView.vue @@ -0,0 +1,37 @@ + + + +403 · 权限不足
+{{ previewRoleLabel }}
+来源页面：{{ sourcePath }}
+请使用顶栏切换角色，选择具有可访问菜单的角色。
+维护平台员工账号，并通过角色控制菜单和操作权限。
home
' } }, + ], + }) + await router.push('/login') + await router.isReady() + + const calls: string[] = [] + vi.spyOn(auth, 'login').mockImplementation(async () => { calls.push('login') }) + vi.spyOn(access, 'initializeAfterLogin').mockImplementation(() => { calls.push('access') }) + vi.spyOn(router, 'replace').mockImplementation(async () => { calls.push('replace') }) + const wrapper = mount(LoginView, { + global: { + plugins: [pinia, router], + stubs: { + 'el-form': { template: '' }, + 'el-form-item': { template: '' }, + 'el-input': { template: '' }, + 'el-button': { emits: ['click'], template: '' }, + }, + }, + }) + + await wrapper.get('.login-submit').trigger('click') + await flushPromises() + + expect(calls).toEqual(['login', 'access', 'replace']) + }) + + it.each([ + ['/customers?page=2', '/customers?page=2'], + ['/customers/reviews', '/customers/reviews'], + ['//example.com', '/customers'], + ['https://example.com', '/customers'], + [['/customers', '/orders/first-leg'], '/customers'], + [null, '/customers'], + ])('sanitizes the post-login redirect %j to %s', async (redirect, expected) => { + const pinia = createPinia() + setActivePinia(pinia) + const auth = useAuthStore() + const router = createRouter({ + history: createMemoryHistory(), + routes: [ + { path: '/login', component: LoginView }, + { path: '/', component: { template: 'home
' } }, + ], + }) + await router.push({ path: '/login', query: { redirect } }) + await router.isReady() + vi.spyOn(auth, 'login').mockResolvedValue() + const replace = vi.spyOn(router, 'replace').mockResolvedValue() + const wrapper = mount(LoginView, { + global: { + plugins: [pinia, router], + stubs: { + 'el-form': { template: '' }, + 'el-form-item': { template: '' }, + 'el-input': { template: '' }, + 'el-button': { emits: ['click'], template: '' }, + }, + }, + }) + + await wrapper.get('.login-submit').trigger('click') + await flushPromises() + + expect(replace).toHaveBeenCalledWith(expected) + }) + + it('preserves the form and reports a recoverable error when login fails', async () => { + const pinia = createPinia() + setActivePinia(pinia) + const auth = useAuthStore() + const access = useAccessPreviewStore() + const router = createRouter({ + history: createMemoryHistory(), + routes: [ + { path: '/login', component: LoginView }, + { path: '/customers', component: { template: 'customers
' } }, + ], + }) + await router.push('/login') + await router.isReady() + vi.spyOn(auth, 'login').mockRejectedValue(new Error('network unavailable')) + const initialize = vi.spyOn(access, 'initializeAfterLogin') + const replace = vi.spyOn(router, 'replace') + const wrapper = mount(LoginView, { + global: { + plugins: [pinia, router], + stubs: { + 'el-form': { template: '' }, + 'el-form-item': { template: '' }, + 'el-input': { template: '' }, + 'el-button': { emits: ['click'], template: '' }, + }, + }, + }) + + await wrapper.get('.login-submit').trigger('click') + await flushPromises() + + expect(wrapper.get('[role="alert"]').text()).toBe('network unavailable') + expect(initialize).not.toHaveBeenCalled() + expect(replace).not.toHaveBeenCalled() + }) +}) diff --git a/src/views/LoginView.vue b/src/views/LoginView.vue new file mode 100644 index 00000000..4508862d --- /dev/null +++ b/src/views/LoginView.vue @@ -0,0 +1,87 @@ + + + +CHONGCHONG GLOBAL
+统一管理企业入驻、内部权限和头程订单，让每一次操作都有边界、有记录。
+使用平台内部员工账号登录
+{{ loginError.message }}
{{ description }}
+目录组织菜单，按钮控制页面操作；接口权限将在服务端契约确定后补充。
{{ row.code }}{{ row.path || '-' }}使用稳定的“业务域:资源:动作”编码；一期真实资源只创建菜单和按钮，接口鉴权由服务端实现。
角色负责聚合菜单、操作和数据范围，内部用户可分配多个角色。
仅启用仓库会进入客户头程下单选项