路由与权限

// router/index.ts
router.beforeEach(async (to: RouteLocationNormalized, from: RouteLocationNormalized) => {
    startNavigation()

    // 1. 检查是否需要登录
    if (to.meta.requiresAuth !== false) {
        const token = getToken()
        if (!token) {
            // 未登录 → OIDC 重定向或跳转登录页
            if (shouldUseFullPageAuthRedirect()) {
                window.location.href = buildOidcAuthorizeUrl(to.fullPath)
                return false
            }
            return appendTokenQuery({ path: '/login', query: { redirect: to.fullPath } })
        }
    }

    // 2. 检查管理后台权限
    if (to.path.startsWith('/admin')) {
        if (!hasAdminAccess()) {
            return { path: '/', query: { msg: 'no_permission' } }
        }
    }

    // 3. 检查页面级权限
    if (to.meta.permissions) {
        if (!hasAnyPermission(to.meta.permissions)) {
            return { path: '/admin/dashboard', query: { msg: 'no_permission' } }
        }
    }

    finishNavigation()
})

function resilientView(loader: () => Promise<any>) {
    return async () => {
        let lastError: unknown
        for (let attempt = 0; attempt <= ROUTE_LOAD_RETRIES; attempt++) {
            try {
                return await loader()
            } catch (error) {
                lastError = error
                if (!isRecoverableRouteLoadError(error) || attempt === ROUTE_LOAD_RETRIES) break
                await waitForOnline()
                await sleep(450 * 2 ** attempt)
            }
        }
        throw lastError
    }
}

// 使用示例
{ path: '/admin/users', component: resilientView(() => import('@/views/admin/Users.vue')) }