|
|
/**
|
|
|
* 宿主（如 CC）嵌入 /embed-demo 时的 SSO 查询参数解析。
|
|
|
* 例：/embed-demo?login_type=api_key&api_key=chj_xxx
|
|
|
* /embed-demo?type=api_key&key=chj_xxx
|
|
|
* /embed-demo?login_type=password&customer_id=CUST_001&password=***
|
|
|
*/
|
|
|
|
|
|
export type EmbedSsoLoginType = "password" | "api_key";
|
|
|
|
|
|
export type EmbedSsoParams =
|
|
|
| { mode: "api_key"; apiKey: string }
|
|
|
| { mode: "password"; customerId: string; password: string }
|
|
|
| { mode: "none" };
|
|
|
|
|
|
const SENSITIVE_QUERY_KEYS = [
|
|
|
"login_type",
|
|
|
"type",
|
|
|
"lt",
|
|
|
"api_key",
|
|
|
"key",
|
|
|
"token",
|
|
|
"password",
|
|
|
"pwd",
|
|
|
"customer_id",
|
|
|
"customerId",
|
|
|
] as const;
|
|
|
|
|
|
function firstParam(
|
|
|
params: URLSearchParams,
|
|
|
keys: readonly string[],
|
|
|
): string {
|
|
|
for (const k of keys) {
|
|
|
const v = params.get(k)?.trim();
|
|
|
if (v) return v;
|
|
|
}
|
|
|
return "";
|
|
|
}
|
|
|
|
|
|
function resolveLoginType(params: URLSearchParams): EmbedSsoLoginType | null {
|
|
|
const raw = firstParam(params, ["login_type", "type", "lt"]).toLowerCase();
|
|
|
if (!raw) {
|
|
|
// 有 key 无 type 时默认按 API Key
|
|
|
if (firstParam(params, ["api_key", "key", "token"])) return "api_key";
|
|
|
if (
|
|
|
firstParam(params, ["customer_id", "customerId"]) &&
|
|
|
firstParam(params, ["password", "pwd"])
|
|
|
) {
|
|
|
return "password";
|
|
|
}
|
|
|
return null;
|
|
|
}
|
|
|
if (raw === "api_key" || raw === "apikey" || raw === "key") return "api_key";
|
|
|
if (raw === "password" || raw === "pwd" || raw === "account") return "password";
|
|
|
return null;
|
|
|
}
|
|
|
|
|
|
/** 从 URLSearchParams 解析宿主直传凭证 */
|
|
|
export function parseEmbedSsoParams(params: URLSearchParams): EmbedSsoParams {
|
|
|
const loginType = resolveLoginType(params);
|
|
|
if (loginType === "api_key") {
|
|
|
const apiKey = firstParam(params, ["api_key", "key", "token"]);
|
|
|
if (!apiKey) return { mode: "none" };
|
|
|
return { mode: "api_key", apiKey };
|
|
|
}
|
|
|
if (loginType === "password") {
|
|
|
const customerId = firstParam(params, ["customer_id", "customerId"]);
|
|
|
const password = firstParam(params, ["password", "pwd"]);
|
|
|
if (!customerId || !password) return { mode: "none" };
|
|
|
return { mode: "password", customerId, password };
|
|
|
}
|
|
|
return { mode: "none" };
|
|
|
}
|
|
|
|
|
|
/** 登录成功后从地址栏去掉敏感参数，避免 Key 留在历史记录 */
|
|
|
export function stripEmbedSsoQueryFromUrl(): void {
|
|
|
if (typeof window === "undefined") return;
|
|
|
const url = new URL(window.location.href);
|
|
|
let changed = false;
|
|
|
for (const key of SENSITIVE_QUERY_KEYS) {
|
|
|
if (url.searchParams.has(key)) {
|
|
|
url.searchParams.delete(key);
|
|
|
changed = true;
|
|
|
}
|
|
|
}
|
|
|
if (!changed) return;
|
|
|
const next = `${url.pathname}${url.search}${url.hash}`;
|
|
|
window.history.replaceState(window.history.state, "", next);
|
|
|
}
|
|
|
|
|
|
/** 是否宿主嵌入精简壳（隐藏退出等） */
|
|
|
export function isEmbedHostedShell(params: URLSearchParams): boolean {
|
|
|
const flag = firstParam(params, ["embed", "hosted", "from_cc", "from_host"]);
|
|
|
if (flag === "1" || flag === "true" || flag === "yes") return true;
|
|
|
// 带 SSO 凭证进入亦视为宿主托管
|
|
|
return parseEmbedSsoParams(params).mode !== "none";
|
|
|
}
|
