From 505773043b11aa6e6c49984a60f98a47ac27155f Mon Sep 17 00:00:00 2001
From: InfinityPacer <160988576+InfinityPacer@users.noreply.github.com>
Date: Thu, 10 Oct 2024 15:40:06 +0800
Subject: [PATCH] feat(security): remove unnecessary token

---
 src/components/cards/PluginCard.vue         |  4 +---
 src/components/dialog/ReorganizeDialog.vue  |  8 +------
 src/components/filebrowser/FileList.vue     |  8 +------
 src/layouts/components/ShortcutBar.vue      |  4 +---
 src/layouts/components/UserNotification.vue | 22 ++++++++----------
 src/pages/resource.vue                      |  8 +------
 src/views/system/LoggingView.vue            | 16 +++++--------
 src/views/system/MessageView.vue            | 25 +++++++++------------
 8 files changed, 29 insertions(+), 66 deletions(-)

diff --git a/src/components/cards/PluginCard.vue b/src/components/cards/PluginCard.vue
index 66f1d118..7a1e274e 100644
--- a/src/components/cards/PluginCard.vue
+++ b/src/components/cards/PluginCard.vue
@@ -10,7 +10,6 @@ import VersionHistory from '@/components/misc/VersionHistory.vue'
 import { isNullOrEmptyObject } from '@core/utils'
 import noImage from '@images/logos/plugin.png'
 import { getDominantColor } from '@/@core/utils/image'
-import store from '@/store'
 import { useDisplay } from 'vuetify'
 import ProgressDialog from '../dialog/ProgressDialog.vue'
 
@@ -277,10 +276,9 @@ function visitAuthorPage() {
 
 // 查看日志URL
 function openLoggerWindow() {
-  const token = store.state.auth.token
   const url = `${
     import.meta.env.VITE_API_BASE_URL
-  }system/logging?token=${token}&length=-1&logfile=plugins/${props.plugin?.id?.toLowerCase()}.log`
+  }system/logging?length=-1&logfile=plugins/${props.plugin?.id?.toLowerCase()}.log`
   window.open(url, '_blank')
 }
 
diff --git a/src/components/dialog/ReorganizeDialog.vue b/src/components/dialog/ReorganizeDialog.vue
index a2a56616..a988b131 100644
--- a/src/components/dialog/ReorganizeDialog.vue
+++ b/src/components/dialog/ReorganizeDialog.vue
@@ -1,7 +1,6 @@
 <script lang="ts" setup>
 import { useToast } from 'vue-toast-notification'
 import MediaIdSelector from '../misc/MediaIdSelector.vue'
-import store from '@/store'
 import api from '@/api'
 import { storageOptions } from '@/api/constants'
 import { numberValidator } from '@/@validators'
@@ -119,12 +118,7 @@ watch(transferForm, async () => {
 // 使用SSE监听加载进度
 function startLoadingProgress() {
   progressText.value = '请稍候 ...'
-
-  const token = store.state.auth.token
-
-  progressEventSource.value = new EventSource(
-    `${import.meta.env.VITE_API_BASE_URL}system/progress/filetransfer?token=${token}`,
-  )
+  progressEventSource.value = new EventSource(`${import.meta.env.VITE_API_BASE_URL}system/progress/filetransfer`)
   progressEventSource.value.onmessage = event => {
     const progress = JSON.parse(event.data)
     if (progress) {
diff --git a/src/components/filebrowser/FileList.vue b/src/components/filebrowser/FileList.vue
index 41123dce..252e747d 100644
--- a/src/components/filebrowser/FileList.vue
+++ b/src/components/filebrowser/FileList.vue
@@ -6,7 +6,6 @@ import { useToast } from 'vue-toast-notification'
 import ReorganizeDialog from '../dialog/ReorganizeDialog.vue'
 import { formatBytes } from '@core/utils/formatters'
 import type { Context, EndPoints, FileItem } from '@/api/types'
-import store from '@/store'
 import api from '@/api'
 import MediaInfoCard from '@/components/cards/MediaInfoCard.vue'
 import ProgressDialog from '../dialog/ProgressDialog.vue'
@@ -524,12 +523,7 @@ async function batchScrape() {
 // 使用SSE监听加载进度
 function startLoadingProgress() {
   progressText.value = '请稍候 ...'
-
-  const token = store.state.auth.token
-
-  progressEventSource.value = new EventSource(
-    `${import.meta.env.VITE_API_BASE_URL}system/progress/batchrename?token=${token}`,
-  )
+  progressEventSource.value = new EventSource(`${import.meta.env.VITE_API_BASE_URL}system/progress/batchrename`)
   progressEventSource.value.onmessage = event => {
     const progress = JSON.parse(event.data)
     if (progress) {
diff --git a/src/layouts/components/ShortcutBar.vue b/src/layouts/components/ShortcutBar.vue
index 119d556a..930eec14 100644
--- a/src/layouts/components/ShortcutBar.vue
+++ b/src/layouts/components/ShortcutBar.vue
@@ -5,7 +5,6 @@ import LoggingView from '@/views/system/LoggingView.vue'
 import RuleTestView from '@/views/system/RuleTestView.vue'
 import ModuleTestView from '@/views/system/ModuleTestView.vue'
 import MessageView from '@/views/system/MessageView.vue'
-import store from '@/store'
 import api from '@/api'
 import { useDisplay } from 'vuetify'
 import { getQueryValue } from '@/@core/utils'
@@ -55,8 +54,7 @@ function scrollMessageToEnd() {
 
 // 拼接全部日志url
 function allLoggingUrl() {
-  const token = store.state.auth.token
-  return `${import.meta.env.VITE_API_BASE_URL}system/logging?token=${token}&length=-1`
+  return `${import.meta.env.VITE_API_BASE_URL}system/logging?length=-1`
 }
 
 // 发送消息
diff --git a/src/layouts/components/UserNotification.vue b/src/layouts/components/UserNotification.vue
index 663a3145..48abca0a 100644
--- a/src/layouts/components/UserNotification.vue
+++ b/src/layouts/components/UserNotification.vue
@@ -1,5 +1,4 @@
 <script setup lang="ts">
-import store from '@/store'
 import { formatDateDifference } from '@core/utils/formatters'
 import { SystemNotification } from '@/api/types'
 
@@ -17,18 +16,15 @@ const appsMenu = ref(false)
 
 // SSE持续接收消息
 function startSSEMessager() {
-  const token = store.state.auth.token
-  if (token) {
-    eventSource = new EventSource(`${import.meta.env.VITE_API_BASE_URL}system/message?token=${token}`)
-    eventSource.addEventListener('message', event => {
-      if (event.data) {
-        const noti: SystemNotification = JSON.parse(event.data)
-        notificationList.value.unshift(noti)
-        hasNewMessage.value = true
-        // TODO 在顶部显示消息汽泡
-      }
-    })
-  }
+  eventSource = new EventSource(`${import.meta.env.VITE_API_BASE_URL}system/message`)
+  eventSource.addEventListener('message', event => {
+    if (event.data) {
+      const noti: SystemNotification = JSON.parse(event.data)
+      notificationList.value.unshift(noti)
+      hasNewMessage.value = true
+      // TODO 在顶部显示消息汽泡
+    }
+  })
 }
 
 // 页面加载时，加载当前用户数据
diff --git a/src/pages/resource.vue b/src/pages/resource.vue
index 0621e2df..dbdab691 100644
--- a/src/pages/resource.vue
+++ b/src/pages/resource.vue
@@ -2,7 +2,6 @@
 import NoDataFound from '@/components/NoDataFound.vue'
 import api from '@/api'
 import type { Context } from '@/api/types'
-import store from '@/store'
 import TorrentCardListView from '@/views/discover/TorrentCardListView.vue'
 import TorrentRowListView from '@/views/discover/TorrentRowListView.vue'
 import { useDisplay } from 'vuetify'
@@ -55,12 +54,7 @@ const errorDescription = ref('未搜索到任何资源')
 // 使用SSE监听加载进度
 function startLoadingProgress() {
   progressText.value = '正在搜索，请稍候...'
-
-  const token = store.state.auth.token
-
-  progressEventSource.value = new EventSource(
-    `${import.meta.env.VITE_API_BASE_URL}system/progress/search?token=${token}`,
-  )
+  progressEventSource.value = new EventSource(`${import.meta.env.VITE_API_BASE_URL}system/progress/search`)
   progressEventSource.value.onmessage = event => {
     const progress = JSON.parse(event.data)
     if (progress) {
diff --git a/src/views/system/LoggingView.vue b/src/views/system/LoggingView.vue
index 44770a15..34e400e9 100644
--- a/src/views/system/LoggingView.vue
+++ b/src/views/system/LoggingView.vue
@@ -1,6 +1,4 @@
 <script lang="ts" setup>
-import store from '@/store'
-
 // 日志列表
 const logs = ref<string[]>([])
 
@@ -17,15 +15,11 @@ let eventSource: EventSource | null = null
 
 // SSE持续获取日志
 function startSSELogging() {
-  const token = store.state.auth.token
-  if (token) {
-    eventSource = new EventSource(`${import.meta.env.VITE_API_BASE_URL}system/logging?token=${token}`)
-
-    eventSource.addEventListener('message', event => {
-      const message = event.data
-      if (message) logs.value.push(message)
-    })
-  }
+  eventSource = new EventSource(`${import.meta.env.VITE_API_BASE_URL}system/logging`)
+  eventSource.addEventListener('message', event => {
+    const message = event.data
+    if (message) logs.value.push(message)
+  })
 }
 
 // 从日志中提取日志详情
diff --git a/src/views/system/MessageView.vue b/src/views/system/MessageView.vue
index 1083230b..7bf7b133 100644
--- a/src/views/system/MessageView.vue
+++ b/src/views/system/MessageView.vue
@@ -1,5 +1,4 @@
 <script lang="ts" setup>
-import store from '@/store'
 import type { Message } from '@/api/types'
 import MessageCard from '@/components/cards/MessageCard.vue'
 import api from '@/api'
@@ -29,20 +28,16 @@ let eventSource: EventSource | null = null
 
 // SSE持续获取消息
 function startSSEMessager() {
-  const token = store.state.auth.token
-  if (token) {
-    eventSource = new EventSource(`${import.meta.env.VITE_API_BASE_URL}system/message?token=${token}&role=user`)
-
-    eventSource.addEventListener('message', event => {
-      const message = event.data
-      if (message) {
-        const object = JSON.parse(message)
-        if (compareTime(object.date, lastTime.value) <= 0) return
-        messages.value.push(object)
-        emit('scroll')
-      }
-    })
-  }
+  eventSource = new EventSource(`${import.meta.env.VITE_API_BASE_URL}system/message?role=user`)
+  eventSource.addEventListener('message', event => {
+    const message = event.data
+    if (message) {
+      const object = JSON.parse(message)
+      if (compareTime(object.date, lastTime.value) <= 0) return
+      messages.value.push(object)
+      emit('scroll')
+    }
+  })
 }
 
 // 调用API加载存量消息