feat: Web端401队列拦截器 + 消息/任务/个人中心重写 + TabBar红点 + Admin页面完善

frontend/src/contexts/AuthContext.tsx

@@ -23,7 +23,7 @@ export interface UserInfo {
 interface AuthState {
   user: UserInfo | null;
   token: string | null;
-  loading: boolean; // 初始化时检查 token
+  loading: boolean;
 }
 
 interface AuthContextValue extends AuthState {
@@ -36,7 +36,8 @@ interface AuthContextValue extends AuthState {
 // Token 存储 key
 // ============================================================
 
-const TOKEN_KEY = "track_admin_token";
+const ACCESS_TOKEN_KEY = "track_admin_token";
+const REFRESH_TOKEN_KEY = "track_admin_refresh_token";
 const USER_KEY = "track_admin_user";
 
 // ============================================================
@@ -62,23 +63,27 @@ export function AuthProvider({ children }: { children: ReactNode }) {
     loading: true,
   });
 
-  // 初始化：从 localStorage 恢复 token
+  // 初始化：从 localStorage 恢复双 Token
   useEffect(() => {
-    const savedToken = localStorage.getItem(TOKEN_KEY);
+    const savedToken = localStorage.getItem(ACCESS_TOKEN_KEY);
     const savedUser = localStorage.getItem(USER_KEY);
     if (savedToken && savedUser) {
       try {
         const user = JSON.parse(savedUser) as UserInfo;
         setState({ user, token: savedToken, loading: false });
-        // 可选：后端验证 token 是否仍有效
+        // 后台静默验证 token 是否仍有效
         getMe(savedToken)
           .then((fresh) => {
             setState((prev) => ({ ...prev, user: fresh }));
             localStorage.setItem(USER_KEY, JSON.stringify(fresh));
           })
-          .catch(() => {
-            // token 过期，清除
-            logoutInternal();
+          .catch((err) => {
+            // 验证失败不踢出用户 — 真正的过期由业务 API 401 拦截器
+            // 通过 Refresh Token 无感刷新，彻底失败才跳转登录
+            console.error(
+              "[Auth] Token 后台验证失败（保留本地登录态，依赖拦截器刷新）:",
+              err?.message ?? err,
+            );
           });
       } catch {
         logoutInternal();
@@ -89,26 +94,29 @@ export function AuthProvider({ children }: { children: ReactNode }) {
   }, []);
 
   function logoutInternal() {
-    localStorage.removeItem(TOKEN_KEY);
+    localStorage.removeItem(ACCESS_TOKEN_KEY);
+    localStorage.removeItem(REFRESH_TOKEN_KEY);
     localStorage.removeItem(USER_KEY);
     setState({ user: null, token: null, loading: false });
   }
 
   const login = useCallback(async (username: string, password: string) => {
     const result = await loginApi(username, password);
-    const token = result.access_token;
+    const accessToken = result.access_token;
+    const refreshToken = result.refresh_token;
     const user: UserInfo = result.user;
 
-    localStorage.setItem(TOKEN_KEY, token);
+    // 存储双 Token
+    localStorage.setItem(ACCESS_TOKEN_KEY, accessToken);
+    localStorage.setItem(REFRESH_TOKEN_KEY, refreshToken);
     localStorage.setItem(USER_KEY, JSON.stringify(user));
-    setState({ user, token, loading: false });
+    setState({ user, token: accessToken, loading: false });
   }, []);
 
   const logout = useCallback(() => {
     logoutInternal();
   }, []);
 
-  // 🚀 稳定 Context value 引用，避免消费者不必要的 re-render
   const ctxValue = useMemo<AuthContextValue>(
     () => ({
       ...state,