fix(frontend): keep browser API on same-origin rewrites in dev

Document that NEXT_PUBLIC_WAVELET_BACKEND_URL must stay unset for local next dev so axios hits /api/* and Next rewrites proxy to the backend.
2026-10-09 09:06:36 +08:00 · 2026-07-24 16:37:24 +08:00
parent a4588b05e0
commit 9f15f42b47
75 changed files with 5971 additions and 2450 deletions
@@ -44,43 +44,43 @@ import { AuthSourceModal } from '@/components/common/settings/auth-source-modal'
 import services from '@/lib/services';
 import type { AuthSource, SystemConfig } from '@/lib/services/admin';
 import { toast } from 'sonner';
+import { useTranslations } from 'next-intl';

 const SECURITY_KEYS = [
  {
    key: 'password_login_enabled',
-    title: '允许密码登录',
-    description: '关闭后仅保留第三方 OIDC 认证源进行系统登录。',
+    titleKey: 'passwordLoginEnabled',
+    descKey: 'passwordLoginEnabledDesc',
    icon: Lock,
  },
  {
    key: 'registration_enabled',
-    title: '允许注册',
-    description: '关闭后系统将禁止新用户进行自主账号注册。',
+    titleKey: 'registrationEnabled',
+    descKey: 'registrationEnabledDesc',
    icon: UserPlus,
  },
  {
    key: 'password_register_enabled',
-    title: '允许密码注册',
-    description: '关闭后只能通过管理员创建或第三方认证关联建号。',
+    titleKey: 'passwordRegisterEnabled',
+    descKey: 'passwordRegisterEnabledDesc',
    icon: Fingerprint,
  },
  {
    key: 'oidc_login_enabled',
-    title: '允许 OIDC 登录',
-    description: '关闭后所有的第三方 OIDC 认证登录入口都会被隐藏。',
+    titleKey: 'oidcLoginEnabled',
+    descKey: 'oidcLoginEnabledDesc',
    icon: Globe,
  },
  {
    key: 'email_login_verification_enabled',
-    title: '邮箱登录验证',
-    description:
-      '开启后，使用账号密码登录时需要通过邮箱接收并验证 6 位验证码。',
+    titleKey: 'emailLoginVerification',
+    descKey: 'emailLoginVerificationDesc',
    icon: Mail,
  },
  {
    key: 'email_register_verification_enabled',
-    title: '邮箱注册验证',
-    description: '开启后，用户注册账号时需要通过邮箱接收并验证 6 位验证码。',
+    titleKey: 'emailRegisterVerification',
+    descKey: 'emailRegisterVerificationDesc',
    icon: Mail,
  },
 ] as const;
@@ -92,6 +92,7 @@ interface SecurityTabProps {

 export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
  const queryClient = useQueryClient();
+  const t = useTranslations('settings.security');
  const [authSourceModalOpen, setAuthSourceModalOpen] = useState(false);
  const [selectedSource, setSelectedSource] = useState<AuthSource | null>(null);

@@ -155,14 +156,14 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
      await queryClient.invalidateQueries({
        queryKey: ['admin', 'system-configs'],
      });
-      toast.success('登录状态保持时间已更新');
+      toast.success(t('loginSessionTTLUpdated'));
    },
    onError: (error: Error) => {
-      toast.error(error.message || '更新配置失败');
+      toast.error(error.message || t('updateConfigFailed'));
    },
  });

-  const handleTTLChange = (val: string) => {
+  const handleSessionTTLChange = (val: string) => {
    setSessionTTL(val);
    if (val !== 'custom') {
      updateTTLMutation.mutate(val);
@@ -172,7 +173,7 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
  const handleCustomBlur = () => {
    const parsed = parseInt(customHours, 10);
    if (isNaN(parsed) || parsed <= 0) {
-      toast.error('请输入有效的过期小时数（正整数）');
+      toast.error(t('invalidHours'));
      // 重置为原本的值
      const originalVal = configs['login_session_ttl_hours']?.value || '0';
      setCustomHours(
@@ -202,10 +203,10 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
        queryKey: ['admin', 'system-configs'],
      });
      await queryClient.invalidateQueries({ queryKey: ['public-config'] });
-      toast.success('系统安全配置已更新');
+      toast.success(t('securityConfigUpdated'));
    },
    onError: (error: Error) => {
-      toast.error(error.message || '更新配置失败');
+      toast.error(error.message || t('updateConfigFailed'));
    },
  });

@@ -220,10 +221,10 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
      await queryClient.invalidateQueries({
        queryKey: ['auth', 'public-sources'],
      });
-      toast.success('认证源状态已更新');
+      toast.success(t('authSourceStatusUpdated'));
    },
    onError: (error: Error) => {
-      toast.error(error.message || '切换状态失败');
+      toast.error(error.message || t('toggleStatusFailed'));
    },
  });

@@ -236,10 +237,10 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
      await queryClient.invalidateQueries({
        queryKey: ['auth', 'public-sources'],
      });
-      toast.success('认证源已删除');
+      toast.success(t('authSourceDeleted'));
    },
    onError: (error: Error) => {
-      toast.error(error.message || '删除认证源失败');
+      toast.error(error.message || t('deleteAuthSourceFailed'));
    },
  });

@@ -270,14 +271,14 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
      await queryClient.invalidateQueries({
        queryKey: ['admin', 'system-configs'],
      });
-      toast.success('人机验证配置已成功保存');
+      toast.success(t('captchaConfigSaved'));
    },
    onError: (error: Error) => {
-      toast.error(error.message || '保存配置失败');
+      toast.error(error.message || t('saveConfigFailed'));
    },
  });

-  const handleCapSave = (e: React.FormEvent) => {
+  const handleCapSubmit = (e: React.FormEvent) => {
    e.preventDefault();
    saveCapMutation.mutate();
  };
@@ -293,10 +294,10 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
            </div>
            <div>
              <CardTitle className='text-base font-semibold'>
-                系统登录/注册设置
+                {t('loginRegistrationSettings')}
              </CardTitle>
              <CardDescription className='text-xs'>
-                配置系统的登录限制与用户自主注册权限
+                {t('loginRegistrationSettingsDesc')}
              </CardDescription>
            </div>
          </div>
@@ -316,11 +317,11 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
                    <div className='flex items-center gap-2'>
                      {Icon && <Icon className='size-4 text-primary' />}
                      <span className='font-medium text-sm text-foreground'>
-                        {item.title}
+                        {t(item.titleKey)}
                      </span>
                    </div>
                    <p className='text-xs text-muted-foreground leading-relaxed pr-2'>
-                      {item.description}
+                      {t(item.descKey)}
                    </p>
                  </div>
                  <Switch
@@ -338,11 +339,11 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
                <div className='flex items-center gap-2'>
                  <Clock className='size-4 text-primary' />
                  <span className='font-medium text-sm text-foreground'>
-                    登录状态保持时间
+                    {t('loginSessionTTL')}
                  </span>
                </div>
                <p className='text-xs text-muted-foreground leading-relaxed pr-2'>
-                  配置用户登录会话在浏览器中的保持期限。设置为“关闭”则在浏览器关闭后自动退登。
+                  {t('loginSessionTTLDesc')}
                </p>
              </div>

@@ -350,17 +351,19 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
                <Select
                  value={sessionTTL}
                  disabled={updateTTLMutation.isPending}
-                  onValueChange={handleTTLChange}
+                  onValueChange={handleSessionTTLChange}
                >
                  <SelectTrigger className='w-[180px] bg-card border-dashed text-xs h-8'>
-                    <SelectValue placeholder='选择保留时间' />
+                    <SelectValue placeholder={t('selectRetentionTime')} />
                  </SelectTrigger>
                  <SelectContent>
-                    <SelectItem value='0'>关闭 (浏览器关闭自动退登)</SelectItem>
-                    <SelectItem value='168'>7 天</SelectItem>
-                    <SelectItem value='720'>30 天</SelectItem>
-                    <SelectItem value='-1'>永不过期</SelectItem>
-                    <SelectItem value='custom'>自定义时长</SelectItem>
+                    <SelectItem value='0'>{t('sessionOff')}</SelectItem>
+                    <SelectItem value='168'>{t('session7Days')}</SelectItem>
+                    <SelectItem value='720'>{t('session30Days')}</SelectItem>
+                    <SelectItem value='-1'>
+                      {t('sessionNeverExpire')}
+                    </SelectItem>
+                    <SelectItem value='custom'>{t('sessionCustom')}</SelectItem>
                  </SelectContent>
                </Select>

@@ -376,7 +379,7 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
                        handleCustomBlur();
                      }
                    }}
-                    placeholder='小时'
+                    placeholder={t('hoursPlaceholder')}
                    disabled={updateTTLMutation.isPending}
                    className='w-20 bg-card border-dashed text-xs h-8 px-2'
                  />
@@ -396,10 +399,10 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
            </div>
            <div>
              <CardTitle className='text-base font-semibold'>
-                认证源管理
+                {t('authSourceManagement')}
              </CardTitle>
              <CardDescription className='text-xs'>
-                添加、修改并启用系统自定义的 OIDC 认证源
+                {t('authSourceManagementDesc')}
              </CardDescription>
            </div>
          </div>
@@ -413,7 +416,7 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
            variant='secondary'
          >
            <Plus className='mr-1.5 size-3.5' />
-            新增认证源
+            {t('addAuthSource')}
          </Button>
        </CardHeader>
        <CardContent className='pt-6 space-y-3'>
@@ -439,11 +442,12 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
                          : 'bg-amber-500/10 text-amber-500 border-amber-500/20'
                      }`}
                    >
-                      {source.is_active ? '已启用' : '已禁用'}
+                      {source.is_active ? t('enabled') : t('disabled')}
                    </span>
                  </div>
                  <div className='text-xs text-muted-foreground font-mono'>
-                    标识符: {source.name} · 类型: {source.type.toUpperCase()}
+                    {t('identifier')}: {source.name} · {t('type')}:{' '}
+                    {source.type.toUpperCase()}
                  </div>
                </div>
                <div className='flex items-center gap-4'>
@@ -455,8 +459,8 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
                    }`}
                  >
                    {source.client_secret_configured
-                      ? 'Secret 已配置'
-                      : 'Secret 未配置'}
+                      ? t('secretConfigured')
+                      : t('secretNotConfigured')}
                  </span>

                  <div className='flex items-center gap-2'>
@@ -489,7 +493,9 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
                      onClick={() => {
                        if (
                          window.confirm(
-                            `确定删除认证源「${source.display_name || source.name}」吗？`,
+                            t('deleteAuthSourceConfirm', {
+                              name: source.display_name || source.name,
+                            }),
                          )
                        ) {
                          deleteSourceMutation.mutate(source.id);
@@ -504,7 +510,7 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
            ))
          ) : (
            <div className='rounded-xl border border-dashed border-border/50 px-4 py-8 text-center text-xs text-muted-foreground bg-muted/5 flex flex-col items-center justify-center gap-3'>
-              <span>暂无配置的认证源，点击上方按钮新增</span>
+              <span>{t('noAuthSources')}</span>
              <Button
                type='button'
                size='sm'
@@ -516,7 +522,7 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
                className='border-dashed'
              >
                <Plus className='mr-1.5 size-3.5' />
-                新增认证源
+                {t('addAuthSource')}
              </Button>
            </div>
          )}
@@ -532,11 +538,10 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
            </div>
            <div>
              <CardTitle className='text-base font-semibold'>
-                人机验证配置 (Cap CAPTCHA)
+                {t('captchaConfig')}
              </CardTitle>
              <CardDescription className='text-xs'>
-                配置基于 Proof-of-Work (PoW)
-                的无感人机验证，保护系统登录免受暴力破解和撞库攻击
+                {t('captchaConfigDesc')}
              </CardDescription>
            </div>
          </div>
@@ -552,18 +557,18 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
          {/* 自动开始计算 Switch */}
          <div className='flex items-center justify-between rounded-xl border border-dashed p-4 bg-card mb-4'>
            <div className='space-y-0.5'>
-              <p className='text-sm font-semibold'>打开页面后自动开始计算</p>
+              <p className='text-sm font-semibold'>{t('autoStartSolving')}</p>
            </div>
            <Switch checked={capAutoSolve} onCheckedChange={setCapAutoSolve} />
          </div>
-          <form onSubmit={handleCapSave} className='space-y-6'>
+          <form onSubmit={handleCapSubmit} className='space-y-6'>
            <div className='grid grid-cols-1 sm:grid-cols-2 gap-4'>
              <div className='space-y-1.5'>
                <Label
                  htmlFor='cap_challenge_count'
                  className='text-xs font-semibold'
                >
-                  难题数量 (Count)
+                  {t('challengeCount')}
                </Label>
                <Input
                  id='cap_challenge_count'
@@ -576,7 +581,7 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
                  className='bg-card border-dashed text-xs'
                />
                <p className='text-[10px] text-muted-foreground leading-normal'>
-                  客户端需求解的难题总数。默认 1，推荐 1 至 5
+                  {t('challengeCountDesc')}
                </p>
              </div>

@@ -585,7 +590,7 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
                  htmlFor='cap_challenge_difficulty'
                  className='text-xs font-semibold'
                >
-                  验证难度 (Difficulty)
+                  {t('challengeDifficulty')}
                </Label>
                <Input
                  id='cap_challenge_difficulty'
@@ -598,7 +603,7 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
                  className='bg-card border-dashed text-xs'
                />
                <p className='text-[10px] text-muted-foreground leading-normal'>
-                  PoW 前缀哈希位数，每加 1 计算时间翻倍。默认 4，推荐 4
+                  {t('challengeDifficultyDesc')}
                </p>
              </div>

@@ -607,7 +612,7 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
                  htmlFor='cap_challenge_size'
                  className='text-xs font-semibold'
                >
-                  盐值长度 (Size)
+                  {t('challengeSize')}
                </Label>
                <Input
                  id='cap_challenge_size'
@@ -620,7 +625,7 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
                  className='bg-card border-dashed text-xs'
                />
                <p className='text-[10px] text-muted-foreground leading-normal'>
-                  难题盐值混淆字符长度。默认 32
+                  {t('challengeSizeDesc')}
                </p>
              </div>

@@ -629,7 +634,7 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
                  htmlFor='cap_challenge_ttl'
                  className='text-xs font-semibold'
                >
-                  难题超时时长 (秒)
+                  {t('challengeTTL')}
                </Label>
                <Input
                  id='cap_challenge_ttl'
@@ -641,7 +646,7 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
                  className='bg-card border-dashed text-xs'
                />
                <p className='text-[10px] text-muted-foreground leading-normal'>
-                  难题有效期限。默认 600 秒 (10 分钟)
+                  {t('challengeTTLDesc')}
                </p>
              </div>

@@ -650,7 +655,7 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
                  htmlFor='cap_token_ttl'
                  className='text-xs font-semibold'
                >
-                  验证凭证有效时长 (秒)
+                  {t('tokenTTL')}
                </Label>
                <Input
                  id='cap_token_ttl'
@@ -662,8 +667,7 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
                  className='bg-card border-dashed text-xs'
                />
                <p className='text-[10px] text-muted-foreground leading-normal'>
-                  PoW 计算求解通过后，签发的登录凭证有效时长。默认 1200 秒 (20
-                  分钟)
+                  {t('tokenTTLDesc')}
                </p>
              </div>
            </div>
@@ -677,10 +681,10 @@ export function SecurityTab({ configs, systemConfigsQuery }: SecurityTabProps) {
                {saveCapMutation.isPending ? (
                  <>
                    <Loader2 className='mr-1.5 size-3.5 animate-spin' />
-                    保存中...
+                    {t('saving')}
                  </>
                ) : (
-                  '保存配置'
+                  t('saveConfig')
                )}
              </Button>
            </div>