feat: 落地登录纵切——网络层、认证会话与登录/注册/Splash 三页（ADR-003/ADR-004）

- 新增 lib/core/network/：ApiClient（dio 封装，错误信封→类型化异常，base URL 经 --dart-define=PATBOND_API_BASE_URL 注入）、AuthInterceptor（Bearer + 设备标识）、TokenRefresher（单飞刷新，401/40101 重放一次，仅 40102/再 401 清会话） - 新增 lib/features/auth/：SessionManager（token 只进 flutter_secure_storage）、AuthRepository（login/register/refresh/logout/me，注册带 Idempotency-Key）、Splash（500ms 最短停留/5s 超时/错误态重试+改用账号登录）、登录页与注册页（照 12 号组装稿，错误三层映射，预留区不渲染） - App 根组件改为认证状态机驱动（Splash↔登录↔主壳 300ms fade）；个人中心退出登录接入真实 logout - 顺带修复：FIX-1 促销卡渐变改 [primaryStrong, primary]、FIX-2 补 helperStyle: muted、README dart format 命令补 --output=none - 新增依赖：dio ^5.11.1、flutter_secure_storage ^11.0.0、uuid ^4.6.0 - 门禁：dart format（0 changed）/ flutter analyze（No issues）/ flutter test（30 passed，其中新增 23：TokenRefresher 5 + AuthRepository 10 + 登录页 4 + 注册页 4） Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-09-04 11:52:51 +08:00
parent ee77361b92
commit 8d890c0424
30 changed files with 2306 additions and 9 deletions
@@ -0,0 +1,111 @@
+import 'package:dio/dio.dart';
+import 'package:flutter_test/flutter_test.dart';
+import 'package:patbond_flutter/core/network/api_exception.dart';
+import 'package:patbond_flutter/core/network/token_refresher.dart';
+import 'package:patbond_flutter/features/auth/session_manager.dart';
+
+import '../../helpers/auth_test_helpers.dart';
+
+void main() {
+  late SessionManager session;
+  late Dio dio;
+  late FakeHttpAdapter adapter;
+  late TokenRefresher refresher;
+
+  Future<void> setUpWith(
+    Future<ResponseBody> Function(RequestOptions) handler, {
+    bool seedTokens = true,
+  }) async {
+    session = SessionManager(store: InMemoryTokenStore());
+    if (seedTokens) {
+      await session.updateTokens(
+        sampleTokens(access: 'old-access', refresh: 'old-refresh'),
+      );
+    }
+    dio = Dio(BaseOptions(validateStatus: (_) => true));
+    adapter = FakeHttpAdapter(handler);
+    dio.httpClientAdapter = adapter;
+    refresher = TokenRefresher(dio: dio, session: session);
+  }
+
+  test('并发触发只发出一次刷新请求（单飞），并轮换 token', () async {
+    await setUpWith((options) async {
+      await Future<void>.delayed(const Duration(milliseconds: 20));
+      return jsonResponse(
+        200,
+        okEnvelope(tokenDataJson(access: 'new-access', refresh: 'new-refresh')),
+      );
+    });
+
+    await Future.wait([refresher.refresh(), refresher.refresh()]);
+
+    expect(adapter.requests, hasLength(1));
+    expect(adapter.requests.single.path, '/api/v1/auth/refresh');
+    expect(adapter.requests.single.data, {'refreshToken': 'old-refresh'});
+    expect(session.accessToken, 'new-access');
+    expect(session.refreshToken, 'new-refresh');
+  });
+
+  test('40102 清除会话并抛 SessionExpiredException', () async {
+    await setUpWith(
+      (options) async =>
+          jsonResponse(401, errorEnvelope(40102, 'refresh token 已失效')),
+    );
+
+    await expectLater(
+      refresher.refresh(),
+      throwsA(isA<SessionExpiredException>()),
+    );
+    expect(session.accessToken, isNull);
+    expect(session.refreshToken, isNull);
+    expect(session.status, AuthStatus.unauthenticated);
+  });
+
+  test('网络失败不清除本地 token，抛 ApiNetworkException', () async {
+    await setUpWith((options) async {
+      throw DioException(
+        requestOptions: options,
+        type: DioExceptionType.connectionTimeout,
+      );
+    });
+
+    await expectLater(refresher.refresh(), throwsA(isA<ApiNetworkException>()));
+    expect(session.refreshToken, 'old-refresh');
+    expect(session.accessToken, 'old-access');
+  });
+
+  test('上一次刷新结束后单飞复位，可再次刷新', () async {
+    var calls = 0;
+    await setUpWith((options) async {
+      calls += 1;
+      if (calls == 1) {
+        throw DioException(
+          requestOptions: options,
+          type: DioExceptionType.connectionError,
+        );
+      }
+      return jsonResponse(
+        200,
+        okEnvelope(tokenDataJson(access: 'a2', refresh: 'r2')),
+      );
+    });
+
+    await expectLater(refresher.refresh(), throwsA(isA<ApiNetworkException>()));
+    await refresher.refresh();
+    expect(calls, 2);
+    expect(session.refreshToken, 'r2');
+  });
+
+  test('本地无 refresh token 时直接判会话失效', () async {
+    await setUpWith(
+      (options) async => jsonResponse(200, okEnvelope(tokenDataJson())),
+      seedTokens: false,
+    );
+
+    await expectLater(
+      refresher.refresh(),
+      throwsA(isA<SessionExpiredException>()),
+    );
+    expect(adapter.requests, isEmpty);
+  });
+}