From 8b9ff56360ab2937eb0cc5f5b3a1afbb59cfd6a6 Mon Sep 17 00:00:00 2001
From: Hermes Agent <hermes@aicrm.local>
Date: Tue, 22 Sep 2026 21:44:52 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20=E7=AE=A1=E7=90=86=E5=90=8E=E5=8F=B0?=
 =?UTF-8?q?=E7=99=BB=E5=BD=95=E6=80=81=E8=BF=87=E6=9C=9F=E4=B8=8D=E5=86=8D?=
 =?UTF-8?q?=E5=81=9C=E7=95=99=E7=A9=BA=E6=95=B0=E6=8D=AE=E9=A1=B5=E2=80=94?=
 =?UTF-8?q?=E2=80=94=E4=BB=BB=E4=BD=95=E6=8E=A5=E5=8F=A3401=E8=87=AA?=
 =?UTF-8?q?=E5=8A=A8=E6=B8=85token=E5=BC=B9=E7=99=BB=E5=BD=95=E6=A1=86?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 admin/src/App.vue |  6 +++++-
 admin/src/api.js  | 14 +++++++++++++-
 2 files changed, 18 insertions(+), 2 deletions(-)

diff --git a/admin/src/App.vue b/admin/src/App.vue
index 9dcbf1d..1822bd1 100644
--- a/admin/src/App.vue
+++ b/admin/src/App.vue
@@ -27,7 +27,7 @@
 </template>
 
 <script setup>
-import { onMounted, ref, provide } from 'vue'
+import { onMounted, ref, provide, onBeforeUnmount } from 'vue'
 import { getToken, setToken, clearToken, apiPost } from './api'
 import Dashboard from './views/Dashboard.vue'
 import Users from './views/Users.vue'
@@ -43,6 +43,10 @@ const token = ref(getToken())
 const view = ref('dashboard')
 // 子页面跳转菜单（如看板→访问日志）
 const goto = (key) => { view.value = key }
+// 登录态过期：任何接口401 → 回登录框
+const onAuthExpired = () => { token.value = '' }
+onMounted(() => window.addEventListener('admin-auth-expired', onAuthExpired))
+onBeforeUnmount(() => window.removeEventListener('admin-auth-expired', onAuthExpired))
 provide('goto', goto)
 const username = ref(''), password = ref(''), busy = ref(false), error = ref('')
 
diff --git a/admin/src/api.js b/admin/src/api.js
index 6897e65..d0ef470 100644
--- a/admin/src/api.js
+++ b/admin/src/api.js
@@ -5,7 +5,14 @@ export function clearToken() { localStorage.removeItem(TOKEN_KEY) }
 
 export function apiGet(path) {
   return fetch(path, { headers: { Authorization: `Bearer ${getToken()}` } })
-    .then(r => r.json())
+    .then(r => {
+      if (r.status === 401) {
+        clearToken()
+        window.dispatchEvent(new CustomEvent('admin-auth-expired'))
+        throw new Error('登录已过期')
+      }
+      return r.json()
+    })
     .then(j => j.data !== undefined ? j.data : j)
     .catch(e => { throw new Error(e.message) })
 }
@@ -14,6 +21,11 @@ export function apiGet(path) {
 function handleResponse(r) {
   return r.json().then(j => {
     if (!r.ok) {
+      // 401=登录态过期：清token并通知全局弹登录框（否则面板停留空数据）
+      if (r.status === 401) {
+        clearToken()
+        window.dispatchEvent(new CustomEvent('admin-auth-expired'))
+      }
       throw new Error(j.error || j.message || `请求失败(${r.status})`)
     }
     return j