139 lines
4.4 KiB
Dart
139 lines
4.4 KiB
Dart
// 功能描述：装配工作人员端依赖，并统一管理登录、退出和失效会话。
|
||
// 版本：1.1.0
|
||
import 'package:flutter/foundation.dart';
|
||
import 'package:uuid/uuid.dart';
|
||
|
||
import '../data/offline/encrypted_draft_store.dart';
|
||
import '../data/repositories/service_repository.dart';
|
||
import '../data/services/api_client.dart';
|
||
import '../data/services/location_service.dart';
|
||
import '../data/services/secure_session_store.dart';
|
||
|
||
class AppDependencies {
|
||
AppDependencies({
|
||
required this.session,
|
||
required this.repository,
|
||
required this.drafts,
|
||
});
|
||
|
||
final StaffSession session;
|
||
final ServiceRepository repository;
|
||
final EncryptedDraftStore drafts;
|
||
|
||
static Future<AppDependencies> create() async {
|
||
final store = SecureSessionStore();
|
||
final session = StaffSession(store);
|
||
await session.restore();
|
||
final authenticatedApi = ApiClient(
|
||
() => session.token,
|
||
onUnauthorized: session.invalidate,
|
||
);
|
||
return AppDependencies(
|
||
session: session,
|
||
repository: ServiceRepository(authenticatedApi, GeolocatorLocationService()),
|
||
drafts: EncryptedDraftStore(),
|
||
);
|
||
}
|
||
}
|
||
|
||
/// 管理工作人员令牌、身份、角色、设备标识及会话失效通知。
|
||
class StaffSession extends ChangeNotifier {
|
||
StaffSession(this._store);
|
||
|
||
static const _root = '/heqi/client/v1/staff';
|
||
static const _tokenKey = 'service_app_access_token';
|
||
static const _identityKey = 'service_app_identity';
|
||
static const _roleKey = 'service_app_role';
|
||
static const _deviceKey = 'service_app_device';
|
||
final SessionStore _store;
|
||
|
||
String _token = '';
|
||
String _identity = '';
|
||
String _roleCode = '';
|
||
String _deviceIdentity = '';
|
||
bool _expired = false;
|
||
Future<void> _pendingClear = Future<void>.value();
|
||
|
||
String get token => _token;
|
||
String get identity => _identity;
|
||
String get roleCode => _roleCode;
|
||
String get deviceIdentity => _deviceIdentity;
|
||
bool get isAuthenticated => _token.isNotEmpty;
|
||
bool get hasExpired => _expired;
|
||
|
||
/// 从安全存储恢复会话上下文；是否有效由后续受保护接口响应确认。
|
||
Future<void> restore() async {
|
||
_token = await _store.read(_tokenKey) ?? '';
|
||
_identity = await _store.read(_identityKey) ?? '';
|
||
_roleCode = await _store.read(_roleKey) ?? '';
|
||
_deviceIdentity = await _store.read(_deviceKey) ?? '';
|
||
_expired = false;
|
||
if (_deviceIdentity.isEmpty) {
|
||
_deviceIdentity = const Uuid().v7();
|
||
await _store.write(_deviceKey, _deviceIdentity);
|
||
}
|
||
}
|
||
|
||
Future<void> login(String phone, String password) async {
|
||
final api = ApiClient(() => '');
|
||
final details = jsonMap(
|
||
await api.post(
|
||
'$_root/auth/login',
|
||
authenticated: false,
|
||
body: {'phone': phone, 'mode': 'password', 'password': password},
|
||
),
|
||
);
|
||
final token = details['access_token'] as String? ?? '';
|
||
final identity = details['identity'] as String? ?? '';
|
||
final roleCode = details['role_code'] as String? ?? '';
|
||
if (token.isEmpty || identity.isEmpty || roleCode.isEmpty) {
|
||
throw const ApiException(500, '工作人员登录上下文缺失');
|
||
}
|
||
|
||
// 等待旧会话清理结束，避免迟到的删除任务误删刚写入的新会话。
|
||
await _pendingClear;
|
||
await _store.write(_tokenKey, token);
|
||
await _store.write(_identityKey, identity);
|
||
await _store.write(_roleKey, roleCode);
|
||
_token = token;
|
||
_identity = identity;
|
||
_roleCode = roleCode;
|
||
_expired = false;
|
||
notifyListeners();
|
||
}
|
||
|
||
Future<void> logout() async {
|
||
_token = '';
|
||
_identity = '';
|
||
_roleCode = '';
|
||
_expired = false;
|
||
notifyListeners();
|
||
_pendingClear = _clearStoredSession();
|
||
await _pendingClear;
|
||
}
|
||
|
||
/// 仅当服务端拒绝的仍是当前令牌时，使会话失效并通知路由。
|
||
void invalidate(String rejectedToken) {
|
||
if (rejectedToken.isEmpty || rejectedToken != _token || _expired) return;
|
||
|
||
_token = '';
|
||
_identity = '';
|
||
_roleCode = '';
|
||
_expired = true;
|
||
notifyListeners();
|
||
_pendingClear = _clearStoredSession();
|
||
}
|
||
|
||
/// 尽力删除会话字段并保留设备标识；单项失败不得阻塞返回登录页。
|
||
Future<void> _clearStoredSession() async {
|
||
for (final key in const [_tokenKey, _identityKey, _roleKey]) {
|
||
try {
|
||
await _store.delete(key);
|
||
} catch (error, stackTrace) {
|
||
debugPrint('清理工作人员失效会话失败（$key）：$error');
|
||
debugPrintStack(stackTrace: stackTrace);
|
||
}
|
||
}
|
||
}
|
||
}
|