fix: defer mini program phone auth until login

src/components/auth/AuthGate.test.tsx

@@ -26,6 +26,8 @@ const authMocks = vi.hoisted(() => ({
   getAuthAuditLogs: vi.fn(),
   getAuthRiskBlocks: vi.fn(),
   getAuthSessions: vi.fn(),
+  isWechatMiniProgramWebViewRuntime: vi.fn(() => false),
+  requestWechatMiniProgramPhoneLogin: vi.fn(),
   revokeAuthSessions: vi.fn(),
   sendPhoneLoginCode: vi.fn(),
   startWechatLogin: vi.fn(),
@@ -52,10 +54,12 @@ vi.mock('../../services/authService', () => ({
   getCurrentAuthUser: authMocks.getCurrentAuthUser,
   getAuthSessions: authMocks.getAuthSessions,
   getCaptchaChallengeFromError: vi.fn(() => null),
+  isWechatMiniProgramWebViewRuntime: authMocks.isWechatMiniProgramWebViewRuntime,
   liftAuthRiskBlock: vi.fn(),
   loginWithPhoneCode: authMocks.loginWithPhoneCode,
   logoutAllAuthSessions: authMocks.logoutAllAuthSessions,
   logoutAuthUser: authMocks.logoutAuthUser,
+  requestWechatMiniProgramPhoneLogin: authMocks.requestWechatMiniProgramPhoneLogin,
   redeemRegistrationInviteCode: authMocks.redeemRegistrationInviteCode,
   resetPassword: authMocks.resetPassword,
   revokeAuthSessions: authMocks.revokeAuthSessions,
@@ -152,6 +156,8 @@ beforeEach(() => {
     expiresInSeconds: 300,
   });
   authMocks.startWechatLogin.mockResolvedValue(undefined);
+  authMocks.isWechatMiniProgramWebViewRuntime.mockReturnValue(false);
+  authMocks.requestWechatMiniProgramPhoneLogin.mockResolvedValue(true);
 });
 
 async function acceptLegalConsent(
@@ -412,6 +418,29 @@ test('auth gate opens a login modal for protected actions and resumes after logi
   expect(screen.queryByRole('dialog', { name: '账号入口' })).toBeNull();
 });
 
+test('auth gate uses mini program auth bridge instead of opening login modal in mini program runtime', async () => {
+  const user = userEvent.setup();
+  authMocks.isWechatMiniProgramWebViewRuntime.mockReturnValue(true);
+  authMocks.getAuthLoginOptions.mockResolvedValue({
+    availableLoginMethods: ['phone', 'wechat'],
+  });
+
+  render(
+    <AuthGate>
+      <ProtectedActionButton onAuthenticated={vi.fn()} />
+    </AuthGate>,
+  );
+
+  await user.click(await screen.findByRole('button', { name: '进入作品' }));
+
+  await waitFor(() => {
+    expect(authMocks.requestWechatMiniProgramPhoneLogin).toHaveBeenCalledTimes(1);
+  });
+  expect(authMocks.startWechatLogin).not.toHaveBeenCalled();
+  expect(screen.queryByRole('dialog', { name: '账号入口' })).toBeNull();
+  expect(authMocks.isWechatMiniProgramWebViewRuntime).toHaveBeenCalled();
+});
+
 test('login modal requires first-time legal consent before sms login', async () => {
   const user = userEvent.setup();
 

src/components/auth/AuthGate.tsx

@@ -32,11 +32,13 @@ import {
   getAuthSessions,
   getCaptchaChallengeFromError,
   getCurrentAuthUser,
+  isWechatMiniProgramWebViewRuntime,
   liftAuthRiskBlock,
   loginWithPhoneCode,
   logoutAllAuthSessions,
   logoutAuthUser,
   redeemRegistrationInviteCode,
+  requestWechatMiniProgramPhoneLogin,
   resetPassword,
   revokeAuthSessions,
   sendPhoneLoginCode,
@@ -276,6 +278,22 @@ export function AuthGate({ children }: AuthGateProps) {
     setInitialSettingsSection(null);
   }, []);
 
+  const requestMiniProgramLogin = useCallback(() => {
+    setWechatLoading(true);
+    setError('');
+    void requestWechatMiniProgramPhoneLogin()
+      .catch((miniProgramError) => {
+        setError(
+          miniProgramError instanceof Error
+            ? miniProgramError.message
+            : '请在微信小程序内完成登录。',
+        );
+      })
+      .finally(() => {
+        setWechatLoading(false);
+      });
+  }, []);
+
   const openLoginModal = useCallback(
     (postLoginAction?: (() => void) | null) => {
       if (readyUser) {
@@ -284,9 +302,15 @@ export function AuthGate({ children }: AuthGateProps) {
       }
 
       pendingProtectedActionRef.current = postLoginAction ?? null;
+      if (isWechatMiniProgramWebViewRuntime()) {
+        setShowLoginModal(false);
+        requestMiniProgramLogin();
+        return;
+      }
+
       setShowLoginModal(true);
     },
-    [readyUser],
+    [readyUser, requestMiniProgramLogin],
   );
 
   const requireAuth = useCallback(
@@ -425,11 +449,26 @@ export function AuthGate({ children }: AuthGateProps) {
       void hydrate(++authHydrateVersionRef.current);
     };
 
+    const handleAuthHashChange = () => {
+      const callbackResult = consumeAuthCallbackResult();
+      if (!callbackResult) {
+        return;
+      }
+      if (callbackResult.error) {
+        setError(callbackResult.error);
+        return;
+      }
+      setStatus('checking');
+      void hydrate(++authHydrateVersionRef.current);
+    };
+
     window.addEventListener(AUTH_STATE_EVENT, handleAuthStateChange);
+    window.addEventListener('hashchange', handleAuthHashChange);
 
     return () => {
       isActive = false;
       window.removeEventListener(AUTH_STATE_EVENT, handleAuthStateChange);
+      window.removeEventListener('hashchange', handleAuthHashChange);
     };
   }, [restoreAuthSession]);
 

src/components/auth/LoginScreen.tsx

@@ -7,6 +7,9 @@ import type {
   AuthLoginMethod,
 } from '../../services/authService';
 import { getStoredLastLoginPhone } from '../../services/authService';
+import {
+  isWechatMiniProgramWebViewRuntime,
+} from '../../services/authService';
 import { LegalDocumentModal } from '../common/LegalDocumentModal';
 import {
   getLegalDocument,
@@ -83,6 +86,7 @@ export function LoginScreen({
   const passwordLoginEnabled = true;
   const phoneLoginEnabled = true;
   const wechatLoginEnabled = availableLoginMethods.includes('wechat');
+  const miniProgramRuntime = isWechatMiniProgramWebViewRuntime();
   const [activeLoginTab, setActiveLoginTab] = useState<LoginTab>('phone');
 
   useEffect(() => {
@@ -317,7 +321,7 @@ export function LoginScreen({
                   </button>
                 </div>
 
-                {wechatLoginEnabled ? (
+                {wechatLoginEnabled && !miniProgramRuntime ? (
                   <WechatButton
                     loading={wechatLoading}
                     disabled={submitDisabled}
@@ -364,7 +368,8 @@ export function LoginScreen({
 
             {!passwordLoginEnabled &&
             !phoneLoginEnabled &&
-            !wechatLoginEnabled ? (
+            !wechatLoginEnabled &&
+            !miniProgramRuntime ? (
               <div className="platform-subpanel rounded-2xl px-4 py-4 text-sm text-[var(--platform-text-base)]">
                 当前登录入口暂不可用。
               </div>