+
+ );
+}
diff --git a/src/features/hall/hall-wallet-strip.tsx b/src/features/hall/hall-wallet-strip.tsx
index afcb358..1bd98e3 100644
--- a/src/features/hall/hall-wallet-strip.tsx
+++ b/src/features/hall/hall-wallet-strip.tsx
@@ -2,7 +2,7 @@
import { Wallet } from "lucide-react";
import Link from "next/link";
-import { useCallback, useEffect, useMemo, useState } from "react";
+import { useCallback, useEffect, useMemo, useRef, useState } from "react";
import { getWalletBalance } from "@/api/wallet";
import { buttonVariants } from "@/components/ui/button";
@@ -27,18 +27,10 @@ export function HallWalletStrip() {
const [balance, setBalance] = useState
+
+ {isCritical ? "登录即将失效" : "登录即将过期"}
+
+
+ {remainingSeconds !== null && (
+ <>
+ 剩余 {Math.floor(remainingSeconds / 60)}:
+ {String(remainingSeconds % 60).padStart(2, "0")} {" "}
+
+ )}
+ 正在自动续签...
+
+
+
+
+
-
- Lottery
-
-
-
+
+
+ ;
+ /** 当前 Token 剩余有效时间（毫秒），-1 表示未知 */
+ getTokenRemainingTime: () => number;
+ /** 是否即将过期 */
+ isTokenExpiringSoon: () => boolean;
+} {
+ const bearerToken = usePlayerSessionStore((state) => state.bearerToken);
+ const setBearerToken = usePlayerSessionStore((state) => state.setBearerToken);
+ const setServerError = useErrorStore((state) => state.setServerError);
+ const clearServerError = useErrorStore((state) => state.clearServerError);
+
+ const refreshTimerRef = useRef(null);
+ const retryCountRef = useRef(0);
+
+ /**
+ * 解析 JWT 的 exp 字段
+ * @returns exp 时间戳（秒），解析失败返回 null
+ */
+ const parseTokenExp = useCallback((token: string | null): number | null => {
+ if (!token) return null;
+
+ try {
+ // JWT 格式：header.payload.signature
+ const parts = token.split(".");
+ if (parts.length !== 3) return null;
+
+ // Base64 解码 payload
+ const payload = JSON.parse(atob(parts[1]));
+ return payload.exp ?? null;
+ } catch {
+ return null;
+ }
+ }, []);
+
+ /**
+ * 获取 Token 剩余有效时间
+ * @returns 剩余毫秒数，-1 表示未知
+ */
+ const getTokenRemainingTime = useCallback((): number => {
+ const exp = parseTokenExp(bearerToken);
+ if (!exp) return -1;
+
+ const now = Math.floor(Date.now() / 1000);
+ return Math.max(0, (exp - now) * 1000);
+ }, [bearerToken, parseTokenExp]);
+
+ /**
+ * 检查 Token 是否即将过期（1 分钟内）
+ */
+ const isTokenExpiringSoon = useCallback((): boolean => {
+ const remaining = getTokenRemainingTime();
+ return remaining > 0 && remaining < TOKEN_WARNING_THRESHOLD;
+ }, [getTokenRemainingTime]);
+
+ /**
+ * 请求主站刷新 Token
+ * 通过 postMessage 向父窗口（主站）发送刷新请求
+ */
+ const requestParentRefresh = useCallback((): void => {
+ if (typeof window === "undefined") return;
+
+ // 向主站请求新 Token
+ window.parent.postMessage(
+ {
+ type: "LOTTERY_TOKEN_REFRESH_REQUEST",
+ timestamp: Date.now(),
+ },
+ "*", // 或指定主站域名
+ );
+ }, []);
+
+ /**
+ * 手动触发 Token 刷新
+ */
+ const refreshToken = useCallback(async (): Promise => {
+ if (retryCountRef.current >= MAX_RETRY) {
+ setServerError(true, "Token 刷新失败，请返回主站重新进入");
+ return;
+ }
+
+ clearServerError();
+ retryCountRef.current++;
+
+ // 向主站请求新 Token
+ requestParentRefresh();
+
+ // 等待主站响应（通过 postMessage）
+ // 实际逻辑在下面的 useEffect 中处理
+ }, [clearServerError, requestParentRefresh, setServerError]);
+
+ /**
+ * 监听主站 postMessage 发送的新 Token
+ */
+ useEffect(() => {
+ if (typeof window === "undefined") return;
+
+ const handleMessage = (event: MessageEvent): void => {
+ // 安全检查：验证来源
+ const allowedOrigins = [
+ process.env.NEXT_PUBLIC_MAIN_SITE_URL,
+ // 开发环境允许本地
+ "http://localhost:3000",
+ "http://127.0.0.1:3000",
+ ].filter(Boolean);
+
+ if (
+ allowedOrigins.length > 0 &&
+ !allowedOrigins.includes(event.origin)
+ ) {
+ console.warn("[TokenRefresh] Ignored message from unknown origin:", event.origin);
+ return;
+ }
+
+ const { data } = event;
+ if (!data || typeof data !== "object") return;
+
+ // 处理主站发送的新 Token
+ if (data.type === "LOTTERY_TOKEN_REFRESH_RESPONSE" && data.token) {
+ console.log("[TokenRefresh] Received new token from parent");
+ setBearerToken(data.token);
+ retryCountRef.current = 0; // 重置重试计数
+ }
+
+ // 处理主站通知 Token 即将过期
+ if (data.type === "LOTTERY_TOKEN_EXPIRING_WARNING") {
+ console.log("[TokenRefresh] Token expiring warning from parent");
+ // 可以在这里显示提示或自动刷新
+ }
+ };
+
+ window.addEventListener("message", handleMessage);
+ return () => window.removeEventListener("message", handleMessage);
+ }, [setBearerToken]);
+
+ /**
+ * 自动刷新逻辑
+ */
+ useEffect(() => {
+ if (!bearerToken) {
+ if (refreshTimerRef.current) {
+ clearTimeout(refreshTimerRef.current);
+ refreshTimerRef.current = null;
+ }
+ return;
+ }
+
+ const exp = parseTokenExp(bearerToken);
+ if (!exp) return;
+
+ const now = Date.now();
+ const expMs = exp * 1000;
+ const remaining = expMs - now;
+
+ // 如果已经过期，立即请求刷新
+ if (remaining <= 0) {
+ console.warn("[TokenRefresh] Token already expired, requesting refresh");
+ requestParentRefresh();
+ return;
+ }
+
+ // 在过期前 30 秒刷新
+ const refreshDelay = Math.max(0, remaining - TOKEN_WARNING_THRESHOLD);
+
+ console.log(
+ `[TokenRefresh] Token expires in ${Math.floor(remaining / 1000)}s, ` +
+ `will refresh in ${Math.floor(refreshDelay / 1000)}s`,
+ );
+
+ refreshTimerRef.current = setTimeout(() => {
+ console.log("[TokenRefresh] Auto-refreshing token");
+ requestParentRefresh();
+ }, refreshDelay);
+
+ return () => {
+ if (refreshTimerRef.current) {
+ clearTimeout(refreshTimerRef.current);
+ }
+ };
+ }, [bearerToken, parseTokenExp, requestParentRefresh]);
+
+ return {
+ refreshToken,
+ getTokenRemainingTime,
+ isTokenExpiringSoon,
+ };
+}
diff --git a/src/hooks/use-websocket-manager.ts b/src/hooks/use-websocket-manager.ts
index 6be99ec..35631a4 100644
--- a/src/hooks/use-websocket-manager.ts
+++ b/src/hooks/use-websocket-manager.ts
@@ -4,7 +4,7 @@ import { useCallback, useEffect, useRef } from "react";
import { getDrawCurrent } from "@/api/draw";
import { getWalletBalance } from "@/api/wallet";
-import { getLotteryEcho, disconnectLotteryEcho } from "@/lib/lottery-echo";
+import { getLotteryEcho } from "@/lib/lottery-echo";
import {
useNetworkConnectionStore,
type NetworkMode,
@@ -50,9 +50,6 @@ export function useWebSocketManager(): UseWebSocketManagerReturn {
isWebSocketConnected,
isReconnecting,
reconnectAttempts,
- drawPollingIntervalId,
- walletPollingIntervalId,
- walletPollingExpiryAt,
setWebSocketConnected,
setReconnecting,
incrementReconnectAttempts,
@@ -60,9 +57,6 @@ export function useWebSocketManager(): UseWebSocketManagerReturn {
setLastDisconnectedAt,
switchToPollingMode,
switchToWebSocketMode,
- setDrawPollingIntervalId,
- setWalletPollingIntervalId,
- setWalletPollingExpiryAt,
clearWalletPolling,
} = store;
@@ -86,72 +80,56 @@ export function useWebSocketManager(): UseWebSocketManagerReturn {
}
}, []);
- // 开始画作数据轮询（30秒间隔）
+ // 画作轮询：用 getState() 读/写 timer id，避免 callback 依赖 id → effect（含卸载清理）连环重跑导致「Maximum update depth」
const startDrawPolling = useCallback(() => {
- // 先停止现有的轮询
- if (drawPollingIntervalId) {
- window.clearInterval(drawPollingIntervalId);
+ const s = useNetworkConnectionStore.getState();
+ const prevId = s.drawPollingIntervalId;
+ if (prevId !== null) {
+ window.clearInterval(prevId);
}
- // 立即执行一次
void refreshDraw();
- // 设置轮询
const intervalId = window.setInterval(() => {
void refreshDraw();
}, POLLING_INTERVAL_MS);
- setDrawPollingIntervalId(intervalId);
- }, [drawPollingIntervalId, refreshDraw, setDrawPollingIntervalId]);
+ s.setDrawPollingIntervalId(intervalId);
+ }, [refreshDraw]);
- // 停止画作数据轮询
- const stopDrawPolling = useCallback(() => {
- if (drawPollingIntervalId) {
- window.clearInterval(drawPollingIntervalId);
- setDrawPollingIntervalId(null);
- }
- }, [drawPollingIntervalId, setDrawPollingIntervalId]);
-
- // 开始钱包轮询
+ // 钱包轮询
const startWalletPolling = useCallback(
(options?: { limitedDuration?: boolean }) => {
const { limitedDuration = false } = options ?? {};
+ const s0 = useNetworkConnectionStore.getState();
- // 先停止现有的轮询
- if (walletPollingIntervalId) {
- window.clearInterval(walletPollingIntervalId);
+ const prevWalletId = s0.walletPollingIntervalId;
+ if (prevWalletId !== null) {
+ window.clearInterval(prevWalletId);
}
- // 立即执行一次
void refreshWallet();
- // 设置轮询
const intervalId = window.setInterval(() => {
- // 检查限时轮询是否过期
- if (limitedDuration && walletPollingExpiryAt) {
- if (Date.now() > walletPollingExpiryAt) {
- clearWalletPolling();
- return;
- }
+ const s = useNetworkConnectionStore.getState();
+ if (
+ limitedDuration &&
+ s.walletPollingExpiryAt !== null &&
+ Date.now() > s.walletPollingExpiryAt
+ ) {
+ s.clearWalletPolling();
+ return;
}
void refreshWallet();
}, POLLING_INTERVAL_MS);
- setWalletPollingIntervalId(intervalId);
+ s0.setWalletPollingIntervalId(intervalId);
- // 设置限时轮询的过期时间
if (limitedDuration) {
- setWalletPollingExpiryAt(Date.now() + WALLET_POLLING_DURATION_MS);
+ s0.setWalletPollingExpiryAt(Date.now() + WALLET_POLLING_DURATION_MS);
}
},
- [
- walletPollingIntervalId,
- walletPollingExpiryAt,
- refreshWallet,
- setWalletPollingIntervalId,
- setWalletPollingExpiryAt,
- clearWalletPolling,
- ],
+ [refreshWallet],
);
// 停止钱包轮询
@@ -329,16 +307,15 @@ export function useWebSocketManager(): UseWebSocketManagerReturn {
switchToPollingMode,
]);
- // 清理函数
+ // 仅挂载卸载时清理；勿依赖 stop*（否则每次 setInterval id 变化都会触发清理 → setState → 无线循环）
useEffect(() => {
return () => {
- stopDrawPolling();
- stopWalletPolling();
- if (reconnectTimerRef.current) {
+ useNetworkConnectionStore.getState().clearAllPollingIntervals();
+ if (reconnectTimerRef.current !== null) {
window.clearTimeout(reconnectTimerRef.current);
}
};
- }, [stopDrawPolling, stopWalletPolling]);
+ }, []);
return {
mode,
diff --git a/src/i18n/.gitkeep b/src/i18n/.gitkeep
deleted file mode 100644
index e69de29..0000000
diff --git a/src/i18n/index.ts b/src/i18n/index.ts
new file mode 100644
index 0000000..9706241
--- /dev/null
+++ b/src/i18n/index.ts
@@ -0,0 +1,85 @@
+import i18n from "i18next";
+import LanguageDetector from "i18next-browser-languagedetector";
+import { initReactI18next } from "react-i18next";
+
+import enCommon from "./locales/en/common.json";
+import enEntry from "./locales/en/entry.json";
+import enLayout from "./locales/en/layout.json";
+import neCommon from "./locales/ne/common.json";
+import neEntry from "./locales/ne/entry.json";
+import neLayout from "./locales/ne/layout.json";
+import zhCommon from "./locales/zh/common.json";
+import zhEntry from "./locales/zh/entry.json";
+import zhLayout from "./locales/zh/layout.json";
+
+/** 对齐后端与产品：尼泊尔语 / 英语 / 中文（简体） */
+export const SUPPORTED_LANGUAGES = [
+ { code: "en" as const, flag: "🇺🇸" },
+ { code: "ne" as const, flag: "🇳🇵" },
+ { code: "zh" as const, flag: "🇨🇳" },
+];
+
+export type AppLanguage = (typeof SUPPORTED_LANGUAGES)[number]["code"];
+
+export const DEFAULT_LANGUAGE: AppLanguage = "en";
+
+const namespaces = ["common", "entry", "layout"] as const;
+
+const resources = {
+ en: {
+ common: enCommon,
+ entry: enEntry,
+ layout: enLayout,
+ },
+ ne: {
+ common: neCommon,
+ entry: neEntry,
+ layout: neLayout,
+ },
+ zh: {
+ common: zhCommon,
+ entry: zhEntry,
+ layout: zhLayout,
+ },
+} satisfies Record<
+ AppLanguage,
+ Record<(typeof namespaces)[number], Record>
+>;
+
+export function normalizeLanguage(lang: string | undefined): AppLanguage {
+ const base = lang?.split("-")[0]?.toLowerCase();
+ if (base === "ne") return "ne";
+ if (base === "zh") return "zh";
+ return "en";
+}
+
+if (!i18n.isInitialized) {
+ void i18n
+ .use(LanguageDetector)
+ .use(initReactI18next)
+ .init({
+ resources,
+ fallbackLng: DEFAULT_LANGUAGE,
+ supportedLngs: ["en", "ne", "zh"],
+ defaultNS: "common",
+ ns: [...namespaces],
+ /** zh-CN → zh，ne-NP → ne，未匹配时用 fallbackLng */
+ load: "languageOnly",
+
+ detection: {
+ order: ["localStorage", "navigator"],
+ caches: ["localStorage"],
+ lookupLocalStorage: "i18nextLng",
+ },
+
+ interpolation: {
+ escapeValue: false,
+ },
+
+ react: {
+ useSuspense: false,
+ },
+ });
+}
+
+export default i18n;
diff --git a/src/i18n/locales/en/common.json b/src/i18n/locales/en/common.json
new file mode 100644
index 0000000..346877d
--- /dev/null
+++ b/src/i18n/locales/en/common.json
@@ -0,0 +1,21 @@
+{
+ "language": {
+ "en": "English",
+ "ne": "नेपाली",
+ "zh": "中文"
+ },
+ "languageShort": {
+ "en": "EN",
+ "ne": "NE",
+ "zh": "ZH"
+ },
+ "status": {
+ "done": "Done",
+ "inProgress": "In progress",
+ "pending": "Pending",
+ "failed": "Failed"
+ },
+ "errors": {
+ "general": "General"
+ }
+}
diff --git a/src/i18n/locales/en/entry.json b/src/i18n/locales/en/entry.json
new file mode 100644
index 0000000..0711ea8
--- /dev/null
+++ b/src/i18n/locales/en/entry.json
@@ -0,0 +1,65 @@
+{
+ "header": {
+ "backgroundAlt": "Header background"
+ },
+ "loading": {
+ "title": "Loading lottery hall",
+ "progress": "Progress"
+ },
+ "steps": {
+ "token": {
+ "title": "Checking token",
+ "description": "Verifying your session securely."
+ },
+ "account": {
+ "title": "Creating account",
+ "description": "Setting up your account."
+ },
+ "hall": {
+ "title": "Loading lottery hall",
+ "description": "Preparing the lottery hall."
+ }
+ },
+ "messages": {
+ "initializing": "Initializing…",
+ "retrying": "Retrying…",
+ "verifying": "Verifying session…",
+ "connectingHall": "Connecting to lottery hall…",
+ "ready": "Ready",
+ "retryProgress": "Retrying ({{current}}/{{total}})…"
+ },
+ "failure": {
+ "title": "Authorization failed",
+ "subtitle": "We couldn’t authorize your session. Please try again.",
+ "detailsTitle": "Failure details",
+ "table": {
+ "no": "No.",
+ "check": "Check",
+ "reason": "Reason"
+ },
+ "reenter": "Re-enter"
+ },
+ "success": {
+ "title": "Authorization successful!",
+ "subtitle": "Your session has been verified successfully.",
+ "doneLabel": "Done",
+ "continue": "Continue to lottery hall"
+ },
+ "footer": {
+ "secure": "Secure. Trusted. Authorized access."
+ },
+ "errors": {
+ "noToken": "No authorization token found",
+ "noTokenDetail": "Please return to the main site and try again.",
+ "authFailed": "Authorization failed",
+ "unknown": "Unknown error",
+ "network": "Network error occurred",
+ "networkDetail": "Please check your internet connection and try again.",
+ "maxRetries": "Unable to connect after multiple attempts",
+ "maxRetriesDetail": "The server may be temporarily unavailable.",
+ "tryLater": "Please try again later",
+ "http401": "Token is invalid or expired",
+ "http403": "Account has been blocked",
+ "http404": "Account not found in the system"
+ }
+}
diff --git a/src/i18n/locales/en/layout.json b/src/i18n/locales/en/layout.json
new file mode 100644
index 0000000..e33d6a3
--- /dev/null
+++ b/src/i18n/locales/en/layout.json
@@ -0,0 +1,5 @@
+{
+ "brand": {
+ "title": "Lottery"
+ }
+}
diff --git a/src/i18n/locales/ne/common.json b/src/i18n/locales/ne/common.json
new file mode 100644
index 0000000..5b4ce5f
--- /dev/null
+++ b/src/i18n/locales/ne/common.json
@@ -0,0 +1,21 @@
+{
+ "language": {
+ "en": "English",
+ "ne": "नेपाली",
+ "zh": "中文"
+ },
+ "languageShort": {
+ "en": "EN",
+ "ne": "NE",
+ "zh": "ZH"
+ },
+ "status": {
+ "done": "पूरा",
+ "inProgress": "जारी",
+ "pending": "बाँकी",
+ "failed": "असफल"
+ },
+ "errors": {
+ "general": "सामान्य"
+ }
+}
diff --git a/src/i18n/locales/ne/entry.json b/src/i18n/locales/ne/entry.json
new file mode 100644
index 0000000..ad7abec
--- /dev/null
+++ b/src/i18n/locales/ne/entry.json
@@ -0,0 +1,65 @@
+{
+ "header": {
+ "backgroundAlt": "हेडर पृष्ठभूमि"
+ },
+ "loading": {
+ "title": "लटरी हल लोड हुँदैछ",
+ "progress": "प्रगति"
+ },
+ "steps": {
+ "token": {
+ "title": "टोकन जाँच गर्दै",
+ "description": "तपाईंको सत्र सुरक्षित रूपमा प्रमाणित गर्दै।"
+ },
+ "account": {
+ "title": "खाता सिर्जना गर्दै",
+ "description": "तपाईंको खाता सेट अप गर्दै।"
+ },
+ "hall": {
+ "title": "लटरी हल लोड गर्दै",
+ "description": "लटरी हल तयार गर्दै।"
+ }
+ },
+ "messages": {
+ "initializing": "सुरु गर्दै…",
+ "retrying": "पुन: प्रयास गर्दै…",
+ "verifying": "सत्र प्रमाणित गर्दै…",
+ "connectingHall": "लटरी हलमा जोडिँदै…",
+ "ready": "तयार",
+ "retryProgress": "पुन: प्रयास ({{current}}/{{total}})…"
+ },
+ "failure": {
+ "title": "प्राधिकरण असफल",
+ "subtitle": "हामीले तपाईंको सत्र प्राधिकृत गर्न सकेनौं। कृपया फेरि प्रयास गर्नुहोस्।",
+ "detailsTitle": "विफलताको विवरण",
+ "table": {
+ "no": "क्र.सं.",
+ "check": "जाँच",
+ "reason": "कारण"
+ },
+ "reenter": "पुन: प्रवेश"
+ },
+ "success": {
+ "title": "प्राधिकरण सफल!",
+ "subtitle": "तपाईंको सत्र सफलतापूर्वक प्रमाणित भयो।",
+ "doneLabel": "पूरा",
+ "continue": "लटरी हलमा जानुहोस्"
+ },
+ "footer": {
+ "secure": "सुरक्षित। विश्वसनीय। अधिकृत पहुँच।"
+ },
+ "errors": {
+ "noToken": "कुनै प्राधिकरण टोकन फेला परेन",
+ "noTokenDetail": "कृपया मुख्य साइटमा फर्कनुहोस् र फेरि प्रयास गर्नुहोस्।",
+ "authFailed": "प्राधिकरण असफल",
+ "unknown": "अज्ञात त्रुटि",
+ "network": "नेटवर्क त्रुटि भयो",
+ "networkDetail": "कृपया आफ्नो इन्टरनेट जाँच गर्नुहोस् र फेरि प्रयास गर्नुहोस्।",
+ "maxRetries": "धेरै पटक पछि पनि जडान हुन सकेन",
+ "maxRetriesDetail": "सर्भर अस्थायी रूपमा अनुपलब्ध हुन सक्छ।",
+ "tryLater": "कृपया पछि प्रयास गर्नुहोस्",
+ "http401": "टोकन अमान्य वा म्याद सकियो",
+ "http403": "खाता रोकिएको छ",
+ "http404": "प्रणालीमा खाता फेला परेन"
+ }
+}
diff --git a/src/i18n/locales/ne/layout.json b/src/i18n/locales/ne/layout.json
new file mode 100644
index 0000000..2fe6c16
--- /dev/null
+++ b/src/i18n/locales/ne/layout.json
@@ -0,0 +1,5 @@
+{
+ "brand": {
+ "title": "लटरी"
+ }
+}
diff --git a/src/i18n/locales/zh/common.json b/src/i18n/locales/zh/common.json
new file mode 100644
index 0000000..379ef22
--- /dev/null
+++ b/src/i18n/locales/zh/common.json
@@ -0,0 +1,21 @@
+{
+ "language": {
+ "en": "English",
+ "ne": "नेपाली",
+ "zh": "中文"
+ },
+ "languageShort": {
+ "en": "EN",
+ "ne": "NE",
+ "zh": "ZH"
+ },
+ "status": {
+ "done": "完成",
+ "inProgress": "进行中",
+ "pending": "待处理",
+ "failed": "失败"
+ },
+ "errors": {
+ "general": "通用"
+ }
+}
diff --git a/src/i18n/locales/zh/entry.json b/src/i18n/locales/zh/entry.json
new file mode 100644
index 0000000..2b154db
--- /dev/null
+++ b/src/i18n/locales/zh/entry.json
@@ -0,0 +1,65 @@
+{
+ "header": {
+ "backgroundAlt": "页头背景"
+ },
+ "loading": {
+ "title": "正在进入彩票大厅",
+ "progress": "进度"
+ },
+ "steps": {
+ "token": {
+ "title": "校验登录凭证",
+ "description": "正在安全验证您的会话。"
+ },
+ "account": {
+ "title": "创建/同步账号",
+ "description": "正在为您设置账号。"
+ },
+ "hall": {
+ "title": "加载彩票大厅",
+ "description": "正在准备彩票大厅。"
+ }
+ },
+ "messages": {
+ "initializing": "正在初始化…",
+ "retrying": "正在重试…",
+ "verifying": "正在校验会话…",
+ "connectingHall": "正在连接彩票大厅…",
+ "ready": "就绪",
+ "retryProgress": "正在重试（{{current}}/{{total}}）…"
+ },
+ "failure": {
+ "title": "授权失败",
+ "subtitle": "无法完成授权，请重试。",
+ "detailsTitle": "失败详情",
+ "table": {
+ "no": "序号",
+ "check": "检查项",
+ "reason": "原因"
+ },
+ "reenter": "重新进入"
+ },
+ "success": {
+ "title": "授权成功！",
+ "subtitle": "您的会话已通过验证。",
+ "doneLabel": "完成",
+ "continue": "进入彩票大厅"
+ },
+ "footer": {
+ "secure": "安全 · 可信 · 授权访问"
+ },
+ "errors": {
+ "noToken": "未发现授权令牌",
+ "noTokenDetail": "请返回主站后重试。",
+ "authFailed": "授权失败",
+ "unknown": "未知错误",
+ "network": "网络异常",
+ "networkDetail": "请检查网络连接后重试。",
+ "maxRetries": "多次重试仍无法连接",
+ "maxRetriesDetail": "服务器可能暂时不可用。",
+ "tryLater": "请稍后再试",
+ "http401": "令牌无效或已过期",
+ "http403": "账号已被封禁",
+ "http404": "系统中未找到该账号"
+ }
+}
diff --git a/src/i18n/locales/zh/layout.json b/src/i18n/locales/zh/layout.json
new file mode 100644
index 0000000..2bba1b1
--- /dev/null
+++ b/src/i18n/locales/zh/layout.json
@@ -0,0 +1,5 @@
+{
+ "brand": {
+ "title": "彩票"
+ }
+}
diff --git a/src/lib/.gitkeep b/src/lib/.gitkeep
deleted file mode 100644
index e69de29..0000000
diff --git a/src/lib/csp-config.ts b/src/lib/csp-config.ts
new file mode 100644
index 0000000..20289d4
--- /dev/null
+++ b/src/lib/csp-config.ts
@@ -0,0 +1,109 @@
+/**
+ * Content Security Policy (CSP) 配置
+ *
+ * 支持 iframe 嵌入场景，允许主站加载彩票系统
+ */
+
+// 允许的主站来源
+const ALLOWED_PARENT_ORIGINS: string[] = [
+ process.env.NEXT_PUBLIC_MAIN_SITE_URL,
+ process.env.NEXT_PUBLIC_PARENT_ORIGIN,
+ // 开发环境
+ "http://localhost:3001",
+ "http://127.0.0.1:3001",
+ // 生产环境应从环境变量读取
+].filter((o): o is string => Boolean(o));
+
+/**
+ * 生成 CSP 指令字符串
+ */
+export function generateCSP(): string {
+ const directives: Record = {
+ // 默认只允许同源
+ "default-src": ["'self'"],
+
+ // 脚本允许同源和内联（Next.js 需要）
+ "script-src": ["'self'", "'unsafe-inline'", "'unsafe-eval'"],
+
+ // 样式允许同源和内联
+ "style-src": ["'self'", "'unsafe-inline'"],
+
+ // 图片允许同源、data URL 和 blob
+ "img-src": ["'self'", "data:", "blob:"],
+
+ // 字体允许同源
+ "font-src": ["'self'"],
+
+ // 连接允许同源和 API 域名
+ "connect-src": [
+ "'self'",
+ process.env.NEXT_PUBLIC_API_URL || "",
+ // WebSocket 连接
+ "ws:",
+ "wss:",
+ ].filter(Boolean),
+
+ // 媒体允许同源和 blob
+ "media-src": ["'self'", "blob:"],
+
+ // 对象不允许
+ "object-src": ["'none'"],
+
+ // 框架允许同源和指定父站
+ "frame-src": ["'self'", ...ALLOWED_PARENT_ORIGINS],
+
+ // 允许被嵌入到指定父站
+ "frame-ancestors": ["'self'", ...ALLOWED_PARENT_ORIGINS],
+
+ // 表单提交允许同源
+ "form-action": ["'self'"],
+
+ // 不升级 HTTPS
+ "upgrade-insecure-requests": [],
+ };
+
+ // 构建 CSP 字符串
+ return Object.entries(directives)
+ .map(([key, values]) => {
+ if (values.length === 0) return key;
+ return `${key} ${values.join(" ")}`;
+ })
+ .join("; ");
+}
+
+/**
+ * 检测是否允许被 iframe 嵌入
+ * @param parentOrigin 父窗口来源
+ */
+export function isAllowedParent(parentOrigin: string): boolean {
+ if (ALLOWED_PARENT_ORIGINS.length === 0) return true; // 未配置时允许所有
+ return ALLOWED_PARENT_ORIGINS.some(
+ (origin) => origin && parentOrigin.startsWith(origin),
+ );
+}
+
+/**
+ * 安全头配置（用于 next.config.ts）
+ */
+export const securityHeaders = [
+ {
+ key: "Content-Security-Policy",
+ value: generateCSP(),
+ },
+ {
+ key: "X-Frame-Options",
+ value: "SAMEORIGIN", // 允许同源，通过 CSP frame-ancestors 控制跨域
+ },
+ {
+ key: "X-Content-Type-Options",
+ value: "nosniff",
+ },
+ {
+ key: "Referrer-Policy",
+ value: "strict-origin-when-cross-origin",
+ },
+ {
+ key: "Permissions-Policy",
+ value: "camera=(), microphone=(), geolocation=()",
+ },
+];
+
-
-
-
);
}
+
+function EntryStatusBadge({ status }: { status: EntryStepStatus }) {
+ const { t } = useTranslation("common");
+
+ if (status === "done") {
+ return (
+
+ {t("status.done")}
+
-
-
-
- {phase === "success"
- ? "授权成功"
- : "正在进入彩票系统"}
-
-
- {phase === "success"
- ? "即将跳转至下注大厅"
- : "请稍候，正在连接服务器"}
-
-
-
-
- {phase === "success" ? (
-
-
-
- ) : null}
-
- ) : null}
-
- {phase === "error" ? (
-
-
- 授权失败
-
- {errorMessage}
-
-
-
-
-
- {MAIN_SITE_URL ? (
-
- 返回主站重新进入
-
- ) : (
-
- )}
-
-
-
- ) : null}
+
-
+ - Play smart. Win more. -
- - {phase === "loading" || phase === "success" ? ( -
-
-
- 进度
- {progress}%
-
-
-
-
- -
- {steps.map((s) => (
-
-
- {s.status === "done" ? (
-
- ) : s.status === "active" ? ( - - ) : ( - - )} - {s.label} - - {s.status === "done" - ? "完成" - : s.status === "active" - ? "进行中" - : "等待"} - -
- ))}
-
-
- - 常见原因 -
--
-
- • Token 无效或已过期 -
- • 账号未授权或未建档 -
- • 会话校验失败 -
+
+ {phase === "loading" ? (
+
+
+
+
+ ) : null}
+
+ {phase === "failed" ? (
+
+
+
+
+
+ {t("loading.title")}
+
+
+
+
+ {t("loading.progress")}
+ {progress}%
+
+
+
+
+
+ {steps.map((step) => (
+
+
+
+ ))}
+
+ {step.status === "done" ? (
+
+
+
+
+
+ {t(`steps.${step.id}.title`)}
+
+
+ + {t(`steps.${step.id}.description`)} +
+
+
+ ) : null}
+
+ {phase === "success" ? (
+
+
+
+ {failureDetails.length > 0 ? (
+
+
+ {t("failure.title")}
+{t("failure.subtitle")}
+
+
+
+
+
+ ) : null}
+
+
+
+
+ {t("failure.detailsTitle")}
+
+
+ | + {t("failure.table.no")} + | ++ {t("failure.table.check")} + | ++ {t("failure.table.reason")} + | +
|---|---|---|
| {idx + 1} | ++ {detail.code ?? tc("errors.general")} + | ++ {detail.detailKey + ? t(detail.detailKey) + : (detail.fallbackMessage ?? t("errors.unknown"))} + | +
+
+ ) : null}
+
+
+
+
+
+ + {t("success.title")} +
+{t("success.subtitle")}
+
+ {steps.map((step) => (
+
+
+
+
+
+ ))}
+
+
+
+ {t(`steps.${step.id}.title`)}
+
+ {t("success.doneLabel")}
+
+