卡密系统-后台登入


<style>
  :root{--bg:#F8F9FA;--card:#FFFFFF;--primary:#C7CEEA;--secondary:#B5EAD7;--accent:#FFD1DC;--text:#495057;--muted:#6c757d;--shadow:0 10px 30px rgba(0,0,0,.08);--radius:16px;}
  body{background:radial-gradient(1200px 600px at 10% -10%,#eef2ff 0%,transparent 60%),radial-gradient(900px 500px at 110% 110%,#eafaf2 0%,transparent 60%),var(--bg);}
  .wrap{max-width:440px;margin:52px auto 28px;padding:0 18px;}
  .brand{display:flex;align-items:center;justify-content:center;gap:10px;color:var(--text);user-select:none;margin-bottom:6px;}
  .brand svg{width:26px;height:26px}
  .subtitle{text-align:center;color:var(--muted);font-size:14px;margin-bottom:16px;}
  .card{background:var(--card);border-radius:var(--radius);box-shadow:var(--shadow);padding:24px 22px;}
  .card h2{margin:0 0 10px;font-size:20px;text-align:center;}
  .legal-hint{display:flex;align-items:center;gap:8px;color:var(--muted);font-size:12px;background:#f8f9fb;border:1px dashed #e5e7eb;padding:8px 10px;border-radius:10px;margin:6px 0 16px;}
  .legal-hint svg{width:14px;height:14px;flex:0 0 14px}
  form{display:grid;gap:12px}
  .login-container input{width:100%;padding:12px;border:1px solid #dee2e6;border-radius:10px;font-size:15px;background:#fff;}
  .login-container input:focus{border-color:#b3b9ff;box-shadow:0 0 0 3px rgba(199,206,234,.35);outline:none}
  .row-actions{display:flex;gap:8px;align-items:center;margin-top:6px;}
  .login-container button{padding:12px;border:none;border-radius:12px;font-size:15px;background:linear-gradient(135deg,var(--primary),var(--secondary));color:#1f2d3d;cursor:pointer;transition:transform .03s ease,filter .2s ease;}
  .login-container button[disabled]{opacity:.6;cursor:not-allowed;filter:grayscale(.1)}
  .login-container button:not([disabled]):active{transform:translateY(1px)}
  .hint{font-size:12px;color:var(--muted);margin-top:-4px;}
  .status{display:flex;align-items:center;gap:8px;font-size:12px;color:var(--muted);margin-top:4px;}
  .dot{width:8px;height:8px;border-radius:50%;background:#adb5bd;display:inline-block;}
  .dot.ready{background:#51cf66;}
  .trust{margin-top:12px;display:flex;gap:8px;justify-content:center;flex-wrap:wrap;}
  .badge{display:inline-flex;align-items:center;gap:6px;font-size:12px;color:#495057;background:#f1f3f5;border-radius:999px;padding:6px 10px;}
  .badge svg{width:14px;height:14px}
  footer{margin-top:14px;text-align:center;color:var(--muted);font-size:12px;}
  .links{display:flex;gap:12px;justify-content:center;margin-bottom:6px;flex-wrap:wrap;}
  .links a{color:#586174;text-decoration:none}
  .links a:hover{text-decoration:underline}
  .entity{font-weight:600;color:#3f4752}
  @media (max-width: 500px){ .wrap{margin:36px auto 22px;} .card{padding:20px 18px;} }
</style>

<div class="wrap login-container">
  <div class="brand" aria-label="站点标识">
    <svg viewBox="0 0 24 24" fill="none" aria-hidden="true">
      <circle cx="12" cy="12" r="10" stroke="#C7CEEA" stroke-width="2"/>
      <path d="M4 12h16M12 4v16" stroke="#B5EAD7" stroke-width="2" stroke-linecap="round"/>
    </svg>
    <b>地球百叶合会</b>
  </div>
  <div class="subtitle">用户-后台登入</div>

  <div class="card" role="region" aria-label="登录表单">
    <h2>登录</h2>

    <div class="legal-hint" aria-live="polite">
      <svg viewBox="0 0 24 24" fill="none" aria-hidden="true">
        <path d="M12 9v4m0 4h.01M11.29 3.86a2 2 0 0 1 1.42 0l7.29 2.92a2 2 0 0 1 1.2 2.58l-2.79 7.1a2 2 0 0 1-1.17 1.16l-7.11 2.8a2 2 0 0 1-2.58-1.2L3.86 12.7a2 2 0 0 1 0-1.42l2.92-7.29a2 2 0 1 1 1.2-1.13Z" stroke="#878e99" stroke-width="1.5"/>
      </svg>
      <span>仅限授权用户使用。登录即表示您同意隐私政策与服务条款。</span>
    </div>

    <!-- 表单（去掉 device_sig，只保留 fingerprint + UA） -->
    <form method="post" id="loginForm">
      <input name="username" placeholder="用户名" required>
      <input name="password" type="password" placeholder="密码" required>

      <!-- 隐藏字段 -->
      <input type="hidden" name="fingerprint"  id="fp">
      <input type="hidden" name="device_model" id="model">

      <div class="hint">为保障账号安全：同一台设备不论使用哪个浏览器都只算 1 台。</div>

      <div class="row-actions">
        <button type="submit" id="loginBtn" disabled>正在校验设备…</button>
        <button type="button" id="selfCheckBtn" disabled title="清理同一物理设备的重复记录">设备自检</button>
      </div>

      <div class="status">
        <span class="dot" id="statusDot"></span>
        <span id="statusText">初始化指纹计算中…</span>
      </div>
    </form>

    <div class="trust" aria-hidden="true">
      <span class="badge" title="TLS 加密">
        <svg viewBox="0 0 24 24" fill="none"><path d="M6 10V8a 6 6 0 0112 0v2m-1 9H7a2 2 0 01-2-2v-7h14v7a2 2 0 01-2 2z" stroke="currentColor" stroke-width="1.6"/></svg>
        安全加密
      </span>
      <span class="badge" title="仅用于授权访问">受控访问</span>
      <span class="badge" title="内部后台">内部后台</span>
    </div>
  </div>

  <footer>
    <div class="links">
      <a href="https://diqiu.baiye.click/privacy.html" rel="nofollow">隐私政策</a>
      <a href="https://diqiu.baiye.click/terms.html" rel="nofollow">服务条款</a>
      <a href="mailto:baiye_by@qq.com">联系方式（邮箱）</a>
      <a href="/ticket">工单支持</a>
    </div>
    <div>主体信息：<span class="entity">百叶键盘团队 · baiye.click</span></div>
  </footer>
</div>

<script src="https://cdn.jsdelivr.net/npm/@fingerprintjs/fingerprintjs@4/dist/fp.min.js"></script>
<script>
  function deviceModelForLog() {
    const nav = navigator || {};
    const scr = screen || {};
    return nav.userAgent || '';
  }
  (async () => {
    const btn   = document.getElementById('loginBtn');
    const scBtn = document.getElementById('selfCheckBtn');
    const dot   = document.getElementById('statusDot');
    const text  = document.getElementById('statusText');
    const fpEl  = document.getElementById('fp');
    const mdEl  = document.getElementById('model');

    try {
      const fpLib = await FingerprintJS.load();
      text.textContent = '正在获取浏览器指纹…';
      const fpRes = await fpLib.get();

      fpEl.value = fpRes.visitorId || '';
      mdEl.value = deviceModelForLog();

      btn.disabled = false; scBtn.disabled = false;
      btn.textContent = '登录';
      dot.classList.add('ready');
      text.textContent = '设备校验完成，可以登录';
    } catch (e) {
      console.error(e);
      fpEl.value = '';               // 失败就留空：后端不依赖它
      mdEl.value = deviceModelForLog();

      btn.disabled = false; scBtn.disabled = false;
      btn.textContent = '登录';
      dot.classList.add('ready');
      text.textContent = '设备校验已降级，仍可登录';
    }
  })();

  // 设备自检：把用户名/密码随表单一起 POST 到 /self_check
  document.getElementById('selfCheckBtn').addEventListener('click', async ()=>{
    const form = document.getElementById('loginForm');
    const fd   = new FormData(form);
    try{
      const r = await fetch('/self_check', { method:'POST', body: fd });
      const j = await r.json();
      alert(j.msg || (j.ok ? '自检完成' : '自检失败'));
    }catch(e){
      alert('网络异常，稍后再试');
    }
  });

  // 阻止“指纹尚未准备好”时提交（可选）
  document.getElementById('loginForm').addEventListener('submit', (e)=>{
    const md = document.getElementById('model').value;
    if (!md) {
      e.preventDefault();
      alert('设备信息尚未准备好，请稍候片刻再登录~');
    }
  });
</script>