优化

src/core/auth/auth.test.ts

@@ -129,6 +129,31 @@ describe('admin auth session', () => {
     expect(auth.isAuthenticated).toBe(true)
   })
 
+  it('refreshes a valid persisted session so newly granted permissions appear after reload', async () => {
+    localStorage.setItem('cc-admin-token', token())
+    localStorage.setItem('cc-admin-refresh-token', 'refresh-old')
+    localStorage.setItem('cc-admin-permission-codes', '["platform:warehouse:list"]')
+    const refreshedToken = token({
+      permissions: ['platform:warehouse:list', 'platform:firstleg:inbound:list'],
+    })
+    mocks.post.mockResolvedValue(loginResponse(refreshedToken, 'refresh-rotated'))
+    mocks.listCurrentPlatformPermissionCodes.mockResolvedValue([
+      'platform:warehouse:list',
+      'platform:firstleg:inbound:list',
+    ])
+    const auth = useAuthStore()
+
+    await expect(auth.restoreSession()).resolves.toBe(true)
+
+    expect(mocks.post).toHaveBeenCalledWith('/auth/refresh', { refreshToken: 'refresh-old' })
+    expect([...auth.permissionCodes]).toEqual([
+      'platform:warehouse:list',
+      'platform:firstleg:inbound:list',
+    ])
+    expect(localStorage.getItem('cc-admin-permission-codes'))
+      .toBe('["platform:warehouse:list","platform:firstleg:inbound:list"]')
+  })
+
   it('does not let an in-flight refresh restore a session after logout', async () => {
     localStorage.setItem('cc-admin-token', token())
     localStorage.setItem('cc-admin-refresh-token', 'refresh-old')

src/core/auth/auth.ts

@@ -162,7 +162,15 @@ export const useAuthStore = defineStore('admin-auth', () => {
   }
 
   async function restoreSession() {
-    if (isAuthenticated.value) return true
+    if (isAuthenticated.value) {
+      if (!refreshToken.value) return true
+      try {
+        await refreshSession()
+        return true
+      } catch {
+        return false
+      }
+    }
     if (!refreshToken.value) return false
     try {
       await refreshSession()