点赞和改造开关加入后台配置

src/services/apiClient.ts

@@ -497,6 +497,13 @@ function withAuthorizationHeaders(
 
 let refreshAccessTokenPromise: Promise<string> | null = null;
 
+function shouldClearAuthAfterRefreshFailure(error: unknown) {
+  return (
+    error instanceof ApiClientError &&
+    (error.status === 401 || error.status === 403)
+  );
+}
+
 async function refreshAccessToken() {
   if (refreshAccessTokenPromise) {
     return refreshAccessTokenPromise;
@@ -522,11 +529,11 @@ async function refreshAccessToken() {
         )
       : null;
 
-    if (payload?.ok !== true || !payload.token?.trim()) {
+    const nextToken = payload?.token?.trim();
+    if (!nextToken) {
       throw new Error('刷新登录状态失败');
     }
 
-    const nextToken = payload.token.trim();
     setStoredAccessToken(nextToken, { emit: false });
     return nextToken;
   })();
@@ -556,7 +563,10 @@ export async function refreshStoredAccessToken(
   try {
     return await refreshAccessToken();
   } catch (error) {
-    if (options.clearOnFailure !== false) {
+    if (
+      options.clearOnFailure !== false &&
+      shouldClearAuthAfterRefreshFailure(error)
+    ) {
       clearStoredAccessToken({ emit: false });
     }
     throw error;
@@ -629,11 +639,15 @@ export async function fetchWithApiAuth(
           // 不能把当前业务请求的首次 401 直接放大成全局鉴权变更，
           // 否则像 Puzzle works 这类受保护列表会把单接口失败放大成整个平台重复 hydrate。
           continue;
-        } catch {
-          if (hasAuthHeader && authFailurePolicy.clearAuthOnUnauthorized) {
+        } catch (refreshError) {
+          const shouldClearAuth =
+            hasAuthHeader &&
+            authFailurePolicy.clearAuthOnUnauthorized &&
+            shouldClearAuthAfterRefreshFailure(refreshError);
+          if (shouldClearAuth) {
             clearStoredAccessToken({ emit: false });
           }
-          if (authFailurePolicy.notifyAuthStateChange) {
+          if (shouldClearAuth && authFailurePolicy.notifyAuthStateChange) {
             emitAuthStateChange();
           }
         }