d0c2dd17cb
- 新增 captcha / sms / logout 三个 Nuxt server 代理 - 修复代理把 ApiResult 拍扁成 data 的问题(my-orders、enterprise、order、pay、 mark-paid):登录态失败被前端当成「没有订单 / 未提交资质」,无法区分 - 新增 handleAuthCode 统一处理:401 → 清凭据并跳 /login?redirect=…; 403 → 只提示「没有访问权限」,不清 token、不跳登录页 - 登录页与注册页分别接入图形验证码与短信验证码(含 60s 倒计时) - 修复回跳开放重定向:redirect 参数安全解码且只接受站内路径 (拒绝 //evil.com、https://… 及反斜杠变体 /\evil.com) - 下单成功但发起支付失败时停在支付步,避免用户重提交产生重复订单
77 lines
2.9 KiB
Vue
77 lines
2.9 KiB
Vue
<template>
|
||
<div class="container mx-auto px-4 py-10">
|
||
<div class="mb-6 flex items-center justify-between">
|
||
<h1 class="text-2xl font-bold text-gray-900">我的订单</h1>
|
||
<HjcUserBar />
|
||
</div>
|
||
|
||
<div v-if="!loggedIn" class="py-20 text-center">
|
||
<p class="text-gray-500">请先登录后查看订单</p>
|
||
<NuxtLink to="/login?redirect=/tender/orders" class="mt-4 inline-block rounded-md bg-blue-600 px-6 py-2 text-white hover:bg-blue-700">去登录</NuxtLink>
|
||
</div>
|
||
|
||
<div v-else-if="error" class="py-20 text-center text-red-500">{{ error }}</div>
|
||
|
||
<div v-else-if="orders.length" class="space-y-4">
|
||
<div v-for="o in orders" :key="o.id" class="rounded-lg border border-gray-200 p-5">
|
||
<div class="flex items-start justify-between">
|
||
<div>
|
||
<p class="font-semibold text-gray-900">{{ o.projectName }}</p>
|
||
<p class="mt-1 text-sm text-gray-500">订单号:{{ o.orderNo }} · 项目编号:{{ o.projectNo }}</p>
|
||
</div>
|
||
<span class="rounded px-2 py-0.5 text-xs" :class="payStatusClass(o.payStatus)">{{ payStatusText(o.payStatus) }}</span>
|
||
</div>
|
||
<div class="mt-4 flex items-center justify-between text-sm">
|
||
<span class="text-gray-500">{{ fmtTime(o.createTime) }}</span>
|
||
<span class="text-blue-600 font-bold">¥{{ formatMoney(o.totalAmount) }}</span>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
<div v-else-if="loaded" class="py-20 text-center text-gray-500">暂无订单</div>
|
||
<SiteLoading v-else />
|
||
</div>
|
||
</template>
|
||
|
||
<script setup lang="ts">
|
||
const { isLoggedIn, handleAuthCode } = useHjcAuth()
|
||
const loggedIn = ref(false)
|
||
const orders = shallowRef<any[]>([])
|
||
const loaded = ref(false)
|
||
const error = ref('')
|
||
|
||
function formatMoney(n?: number | string) {
|
||
return Number(n ?? 0).toFixed(2)
|
||
}
|
||
function fmtTime(s?: string) {
|
||
return s ? s.slice(0, 19).replace('T', ' ') : '-'
|
||
}
|
||
function payStatusText(s?: number) {
|
||
return ({ 0: '待支付', 1: '支付成功', 2: '支付失败', 3: '已退款' } as any)[s ?? 0] ?? '-'
|
||
}
|
||
function payStatusClass(s?: number) {
|
||
if (s === 1) return 'bg-green-100 text-green-700'
|
||
if (s === 3) return 'bg-gray-100 text-gray-500'
|
||
return 'bg-amber-100 text-amber-700'
|
||
}
|
||
|
||
loggedIn.value = isLoggedIn()
|
||
if (loggedIn.value) {
|
||
// 代理原样透传 ApiResult:按 body.code 判定(HTTP 状态码恒为 200,不可用于判定)
|
||
const res: any = await $fetch('/api/tender/my-orders')
|
||
const auth = await handleAuthCode(res, '/tender/orders')
|
||
if (auth.handled) {
|
||
// 401 已清凭据并跳登录页;403 只提示「没有访问权限」,不清 token
|
||
error.value = auth.message || ''
|
||
loggedIn.value = isLoggedIn()
|
||
} else if (res?.code === 0) {
|
||
orders.value = Array.isArray(res.data) ? res.data : []
|
||
} else {
|
||
error.value = res?.message || '订单加载失败'
|
||
}
|
||
loaded.value = true
|
||
} else {
|
||
loaded.value = true
|
||
}
|
||
</script>
|