重构为 HTTP SSO 扫码方案并引入 Vue3 前端

移除 Playwright 浏览器自动化，改用 passport/SSO HTTP 接口获取二维码与轮询登录；后端模块化拆分，前端替换为 Vue3 SPA。

Co-authored-by: Cursor <cursoragent@cursor.com>

backend/routes/__init__.py

@@ -0,0 +1 @@
+# API routes package

backend/routes/api.py

@@ -0,0 +1,139 @@
+import base64
+import logging
+import os
+import time
+
+from flask import Blueprint, jsonify, request, send_file
+
+from backend.config import LOGIN_TIMEOUT, STATIC_DIR
+from backend.proxy import test_proxy_api
+from backend.session import login_session
+from backend.sso.qr_login import check_login_state, cleanup_session, debug_snapshot, start_qr_login
+
+api_bp = Blueprint("api", __name__)
+logger = logging.getLogger(__name__)
+
+login_session.login_timeout = LOGIN_TIMEOUT
+
+
+def _save_qr_png(qrcode_b64: str):
+    if not qrcode_b64:
+        return
+    raw = qrcode_b64.split(",", 1)[-1]
+    img_bytes = base64.b64decode(raw)
+    path = os.path.join(STATIC_DIR, "qrcode.png")
+    with open(path, "wb") as f:
+        f.write(img_bytes)
+
+
+@api_bp.route("/api/start_qr", methods=["POST"])
+def start_qr():
+    if not login_session.lock.acquire(blocking=False):
+        return jsonify({"status": "error", "message": "已有正在进行的扫码任务，请稍后重试"})
+    try:
+        data = request.get_json() or {}
+        proxy_api = data.get("proxy_api", "").strip()
+        result, qr_b64 = start_qr_login(proxy_api)
+        if qr_b64:
+            try:
+                _save_qr_png(qr_b64)
+            except Exception as e:
+                logger.warning("保存二维码图片失败: %s", e)
+        return jsonify(result)
+    finally:
+        login_session.lock.release()
+
+
+@api_bp.route("/api/check_login", methods=["GET"])
+def check_login():
+    req_sid = request.args.get("session_id", "")
+    if req_sid and login_session.session_id and req_sid != login_session.session_id:
+        return jsonify({"status": "idle", "message": "会话已过期，请重新获取二维码"})
+
+    if login_session.status in ("idle", "loading"):
+        return jsonify({"status": login_session.status, "message": login_session.message})
+
+    if login_session.status == "error":
+        return jsonify({"status": "error", "message": login_session.message})
+
+    if login_session.status == "success" and login_session.cookies:
+        return jsonify({
+            "status": "success",
+            "session_id": login_session.session_id,
+            "nickname": login_session.nickname,
+            "cookies": login_session.cookies,
+            "message": login_session.message,
+        })
+
+    try:
+        return jsonify(check_login_state())
+    except Exception as e:
+        logger.error("检查登录异常: %s", e, exc_info=True)
+        return jsonify({"status": "error", "message": str(e)})
+
+
+@api_bp.route("/api/test_proxy", methods=["POST"])
+def test_proxy():
+    data = request.get_json() or {}
+    proxy_api = data.get("proxy_api", "").strip()
+    if not proxy_api:
+        return jsonify({"status": "error", "message": "请提供代理 API"})
+    try:
+        return jsonify(test_proxy_api(proxy_api))
+    except Exception as e:
+        return jsonify({"status": "error", "message": str(e)})
+
+
+@api_bp.route("/api/status", methods=["GET"])
+def api_status():
+    elapsed = ""
+    if login_session.status in ("qr_ready", "scanning", "success") and login_session.start_time:
+        elapsed_sec = int(time.time() - login_session.start_time)
+        elapsed = f" (已等待 {elapsed_sec}s)"
+    client = login_session.sso_client
+    return jsonify({
+        "status": login_session.status,
+        "message": login_session.message + elapsed,
+        "session_id": login_session.session_id or "",
+        "nickname": login_session.nickname or "",
+        "proxy_used": login_session.proxy_used,
+        "api_mode": getattr(client, "api_mode", None) if client else None,
+        "login_timeout": LOGIN_TIMEOUT,
+    })
+
+
+@api_bp.route("/api/reset", methods=["POST"])
+def api_reset():
+    cleanup_session()
+    login_session.reset()
+    login_session.message = "会话已重置"
+    return jsonify({"status": "success", "message": "会话已重置"})
+
+
+@api_bp.route("/api/health", methods=["GET"])
+def api_health():
+    client = login_session.sso_client
+    return jsonify({
+        "status": "ok",
+        "session_status": login_session.status,
+        "session_id": login_session.session_id or "",
+        "api_mode": getattr(client, "api_mode", None) if client else None,
+        "engine": "http_sso",
+        "timestamp": time.time(),
+    })
+
+
+@api_bp.route("/api/debug", methods=["GET"])
+def api_debug():
+    try:
+        return jsonify(debug_snapshot())
+    except Exception as e:
+        return jsonify({"status": "error", "message": str(e)})
+
+
+@api_bp.route("/qrcode.png")
+def get_qrcode():
+    qr_path = os.path.join(STATIC_DIR, "qrcode.png")
+    if os.path.exists(qr_path):
+        return send_file(qr_path, mimetype="image/png")
+    return "二维码未生成，请先点击获取二维码", 404

backend/routes/spa.py

@@ -0,0 +1,55 @@
+import os
+
+from flask import Blueprint, abort, send_file, send_from_directory
+
+from backend.config import FRONTEND_DIST
+
+spa_bp = Blueprint("spa", __name__)
+
+
+def _frontend_index_path():
+    return os.path.join(FRONTEND_DIST, "index.html")
+
+
+def _has_frontend_build():
+    return os.path.isfile(_frontend_index_path())
+
+
+def serve_spa():
+    if not _has_frontend_build():
+        return (
+            "前端未构建，请在 frontend 目录执行: npm install && npm run build",
+            503,
+            {"Content-Type": "text/plain; charset=utf-8"},
+        )
+    return send_file(_frontend_index_path())
+
+
+@spa_bp.route("/")
+def index():
+    return serve_spa()
+
+
+@spa_bp.route("/debug")
+def debug_view():
+    return serve_spa()
+
+
+@spa_bp.route("/assets/<path:filename>")
+def frontend_assets(filename):
+    assets_dir = os.path.join(FRONTEND_DIST, "assets")
+    if not os.path.isdir(assets_dir):
+        abort(404)
+    return send_from_directory(assets_dir, filename)
+
+
+@spa_bp.route("/<path:path>")
+def spa_fallback(path):
+    if path.startswith("api/") or path == "qrcode.png":
+        abort(404)
+    if not _has_frontend_build():
+        abort(404)
+    dist_file = os.path.join(FRONTEND_DIST, path)
+    if os.path.isfile(dist_file):
+        return send_from_directory(FRONTEND_DIST, path)
+    return send_file(_frontend_index_path())