f/web-kboss/src/views/customer/unsubscribe/BaiduNetdisk.vue/index.vue

@@ -30,7 +30,7 @@ export default {
   mounted() {
     window.addEventListener('message', this.receiveMessage, false);
   },
-  beforeDestroy() {
+  beforeDestroy() { // Vue2 推荐使用 beforeDestroy
     window.removeEventListener('message', this.receiveMessage, false);
   },
   methods: {
@@ -41,9 +41,11 @@ export default {
         const response = await baiducloudAPI();
         this.userToken = response.data;
         if (this.userToken) {
-          const baseUrl = 'https://console.vcp.baidu.com/api/loginvcp/login/securitytoken';
+          // 修复 URL 构建：移除 baseUrl 末尾的 '?' 或者确保第一个参数用 '?'
+          const baseUrl = 'https://console.vcp.baidu.com/api/loginvcp/login/securitytoken'; // 移除末尾的 '?'
           const redirectUrl = encodeURIComponent('https://console.vcp.baidu.com/billing/#/refund/list');
           const token = encodeURIComponent(this.userToken);
+          // 使用 '?' 连接第一个参数
           this.url = `${baseUrl}?redirectUrl=${redirectUrl}&signinSecurityToken=${token}`;
         } else {
           console.error('未能从API响应中获取到token:', response);
@@ -56,19 +58,32 @@ export default {
         this.loading = false;
       }
     },
-
+    // 使用更健壮的 receiveMessage 方法
     receiveMessage(event) {
       console.log('接收到消息:', event);
+
+      // 安全性检查：验证消息来源（如果知道确切来源域名）
+      // const expectedOrigin = 'https://console.vcp.baidu.com';
+      // if (event.origin !== expectedOrigin) {
+      //   console.warn('Received message from unexpected origin:', event.origin);
+      //   return;
+      // }
+
       const data = event.data;
       console.log('接收到的 data 是:', data);
 
       // 检查接收到的数据是否包含退款信息
-      if (data && data.refundInfo && data.refundInfo.uuidList) {
-        const refundInfo = data.refundInfo.uuidList;
+      if (data && data.orderInfo && data.orderInfo.refundInfo) {
+        const refundInfo = data.orderInfo.refundInfo;
+
         // 提取订单ID，按优先级处理 uuidList, orderId, orderIdList
         let orderId = '';
         if (refundInfo.uuidList !== undefined) {
-          orderId = refundInfo.uuidList[0];
+          orderId = Array.isArray(refundInfo.uuidList) ? refundInfo.uuidList.join(',') : String(refundInfo.uuidList);
+        } else if (refundInfo.orderId !== undefined) {
+          orderId = String(refundInfo.orderId);
+        } else if (refundInfo.orderIdList !== undefined) {
+          orderId = Array.isArray(refundInfo.orderIdList) ? refundInfo.orderIdList.join(',') : String(refundInfo.orderIdList);
         } else {
           console.warn('未在 refundInfo 中找到有效的订单ID字段 (uuidList, orderId, orderIdList)');
           this.$message.warning('退订信息不完整，未找到订单ID。');
@@ -98,7 +113,7 @@ export default {
         reqBaiduJudgePrice(payload)
           .then((res) => {
             console.log("调用 reqBaiduJudgePrice 接口返回:", res);
-            if (res.status) {
+            if (res.status) { // 假设 status 为 true 表示成功
               this.$message.success('退订成功');
               // 跳转页面
               this.$router.push({
@@ -124,6 +139,7 @@ export default {
           });
       } else {
           console.log('接收到的消息不包含有效的退款信息。');
+          // 根据需要决定是否提示用户
       }
     }
   }