网页端：更新招标采购登录采招网会员

oa-ui/src/utils/bidcenterMemberLogin.js

@@ -0,0 +1,226 @@
+
+
+const SSO_LOGIN_JSONP =
+  'https://sso.bidcenter.com.cn/Inc/member_login_crs_domain.ashx'
+
+const TOKEN_SESSION_KEY = 'bidcenter_search_interface_token'
+/** 与采招网页面一致：JSONP 登录成功但未下发 token 时，依赖浏览器携带的采招网 cookie 调搜索接口 */
+const JSONP_MEMBER_SESSION_KEY = 'bidcenter_member_jsonp_session'
+
+/**
+ * @param {string} username
+ * @param {string} password
+ * @returns {Promise<object>}
+ */
+export function loginBidcenterMemberJsonp(username, password) {
+  const name = (username || '').trim()
+  const pwd = (password || '').trim()
+  if (!name || !pwd) {
+    return Promise.reject(new Error(''))
+  }
+
+  const cb = `__bidcenterLogin_${Date.now()}_${Math.random().toString(36).slice(2, 9)}`
+  return new Promise((resolve, reject) => {
+    const timer = setTimeout(() => {
+      cleanup()
+      reject(new Error(''))
+    }, 25000)
+
+    let script
+    function cleanup() {
+      clearTimeout(timer)
+      try {
+        delete window[cb]
+      } catch (e) { /* ignore */ }
+      if (script && script.parentNode) {
+        script.parentNode.removeChild(script)
+      }
+    }
+
+    window[cb] = (data) => {
+      cleanup()
+      resolve(data)
+    }
+
+    script = document.createElement('script')
+    script.onerror = () => {
+      cleanup()
+      reject(new Error(''))
+    }
+    // 与站点 $.getJSON 拼接一致：callback 为时间戳，jsoncallback 为 JSONP 函数名（见 member_login_crs_domain 调用方式）
+    const srctime = Date.now()
+    const qs = [
+      `name=${encodeURIComponent(name)}`,
+      `d=${srctime}`,
+      `pwd=${encodeURIComponent(pwd)}`,
+      'auto=0',
+      'run=1',
+      `callback=${srctime}`,
+      `jsoncallback=${encodeURIComponent(cb)}`
+    ].join('&')
+    script.src = `${SSO_LOGIN_JSONP}?${qs}`
+    document.body.appendChild(script)
+  })
+}
+
+/**
+ * �ӵ�¼ JSON �н��� interface �����õ� token
+ * @param {object} r
+ * @returns {string}
+ */
+function looksLikeSearchToken(s) {
+  const t = String(s || '').trim()
+  if (t.length < 16) return false
+  // 采招网 token 多为较长十六进制 / Base64 风格，排除明显非 token 短句
+  if (t.length > 2048) return false
+  return /^[\w+/=\-:.]+$/i.test(t)
+}
+
+/**
+ * 深度遍历对象，按字段名或值形态猜测搜索接口 token（各版本字段名不一致）
+ * @param {object} root
+ * @param {number} depth
+ * @returns {string}
+ */
+export function pickTokenFromLoginResponseDeep(root, depth = 0) {
+  if (!root || typeof root !== 'object' || depth > 8) return ''
+  const preferNames =
+    /^(token|interface_token|search_token|user_token|u_token|usertoken|access_token|loginkey|login_token|session_token|authkey|auth_key)$/i
+  const maybeNames = /token|loginkey|session|authkey/i
+
+  /** @type {string[]} */
+  const candidates = []
+
+  const visit = (obj, d) => {
+    if (!obj || typeof obj !== 'object' || d > 8) return ''
+    for (const k of Object.keys(obj)) {
+      const v = obj[k]
+      if (v == null) continue
+      if (typeof v === 'string') {
+        const t = v.trim()
+        if (!t) continue
+        if (preferNames.test(k) && looksLikeSearchToken(t)) return t
+        if (maybeNames.test(k) && looksLikeSearchToken(t)) candidates.push(t)
+      } else if (typeof v === 'object') {
+        const nested = visit(v, d + 1)
+        if (nested) return nested
+      }
+    }
+    return ''
+  }
+
+  const direct = visit(root, depth)
+  if (direct) return direct
+  if (candidates.length) return candidates[0]
+
+  const scanValues = (obj, d) => {
+    if (!obj || typeof obj !== 'object' || d > 6) return ''
+    for (const v of Object.values(obj)) {
+      if (typeof v === 'string' && looksLikeSearchToken(v)) return v.trim()
+      if (typeof v === 'object' && v) {
+        const got = scanValues(v, d + 1)
+        if (got) return got
+      }
+    }
+    return ''
+  }
+  return scanValues(root, depth)
+}
+
+export function pickTokenFromLoginResponse(r) {
+  if (!r || typeof r !== 'object') return ''
+  const tryKeys = (obj) => {
+    if (!obj || typeof obj !== 'object') return ''
+    const keys = [
+      'token',
+      'interface_token',
+      'search_token',
+      'u_token',
+      'user_token',
+      'usertoken',
+      'access_token',
+      'loginkey',
+      'login_token',
+      'session_token',
+      't',
+      'key'
+    ]
+    for (const k of keys) {
+      const v = obj[k]
+      if (v != null && String(v).trim().length > 0) {
+        return String(v).trim()
+      }
+    }
+    return ''
+  }
+  return (
+    tryKeys(r) ||
+    tryKeys(r.data) ||
+    tryKeys(r.user) ||
+    tryKeys(r.result) ||
+    tryKeys(r.Result) ||
+    pickTokenFromLoginResponseDeep(r)
+  )
+}
+
+/**
+ * ��¼�ӿ������� next_token�����ڽ��������״������������һ�£�
+ * @param {object} r
+ * @returns {string}
+ */
+export function pickNextTokenFromLoginResponse(r) {
+  if (!r || typeof r !== 'object') return ''
+  const tryKeys = (obj) => {
+    if (!obj || typeof obj !== 'object') return ''
+    for (const k of ['next_token', 'nextToken', 'nexttoken']) {
+      const v = obj[k]
+      if (v != null && String(v).trim().length > 0) {
+        return String(v).trim()
+      }
+    }
+    return ''
+  }
+  return tryKeys(r) || tryKeys(r.data) || ''
+}
+
+export function getStoredBidcenterToken() {
+  try {
+    return sessionStorage.getItem(TOKEN_SESSION_KEY) || ''
+  } catch (e) {
+    return ''
+  }
+}
+
+export function setStoredBidcenterToken(token) {
+  try {
+    if (token && String(token).trim()) {
+      sessionStorage.setItem(TOKEN_SESSION_KEY, String(token).trim())
+    } else {
+      sessionStorage.removeItem(TOKEN_SESSION_KEY)
+    }
+  } catch (e) { /* ignore */ }
+}
+
+export function clearStoredBidcenterToken() {
+  setStoredBidcenterToken('')
+}
+
+export function setBidcenterJsonpMemberSession(active) {
+  try {
+    if (active) {
+      sessionStorage.setItem(JSONP_MEMBER_SESSION_KEY, '1')
+    } else {
+      sessionStorage.removeItem(JSONP_MEMBER_SESSION_KEY)
+    }
+  } catch (e) {
+    /* ignore */
+  }
+}
+
+export function getBidcenterJsonpMemberSession() {
+  try {
+    return sessionStorage.getItem(JSONP_MEMBER_SESSION_KEY) === '1'
+  } catch (e) {
+    return false
+  }
+}

oa-ui/src/views/oa/bid/index.vue

@@ -2,15 +2,44 @@
  * @Author: ysh
  * @Date: 2026-04-09 09:18:44
  * @LastEditors: Please set LastEditors
- * @LastEditTime: 2026-04-10 09:43:47
+ * @LastEditTime: 2026-04-17 15:19:25
 -->
 <template>
   <div class="app-container">
+    <el-alert
+      v-if="hasEnvBidcenterCredentials"
+      title="已在环境变量中配置采招网账号：密码会打进前端包，切勿提交仓库；生产环境请改为后端登录，仅向前端下发 token。"
+      type="warning"
+      show-icon
+      :closable="false"
+      class="mb8"
+    />
     <div class="toolbar-card mb8">
-      <div class="keyword-display-row">
+      <div class="bidcenter-auth-row">
+        <span class="field-label">采招网会员</span>
+        <el-tag :type="memberSearchActive ? 'success' : 'info'" size="small">{{ bidcenterAuthLabel }}</el-tag>
+        <el-button
+          v-if="hasEnvBidcenterCredentials"
+          size="small"
+          :loading="bidcenterLoginLoading"
+          @click="handleBidcenterLoginFromEnv"
+        >环境变量登录</el-button>
+        <el-button size="small" :loading="bidcenterLoginLoading" @click="openBidcenterLoginDialog">账号登录</el-button>
+        <el-input
+          v-model="manualTokenDraft"
+          size="small"
+          placeholder="手动粘贴搜索接口 token"
+          show-password
+          class="token-input"
+          clearable
+        />
+        <el-button size="small" @click="applyManualBidcenterToken">应用 token</el-button>
+        <el-button v-if="memberSearchActive" size="small" type="text" @click="clearBidcenterMemberToken">清除</el-button>
+      </div>
+      <!-- <div class="keyword-display-row">
         <span class="field-label">当前关键词</span>
         <el-tag type="primary" effect="plain" class="keyword-tag">{{ displayKeyword || '—' }}</el-tag>
-      </div>
+      </div> -->
       <el-form :inline="true" size="small" class="remote-search-form" @submit.native.prevent>
         <el-form-item label="修改关键词">
           <el-input v-model="keywordText" placeholder="多个关键词用英文逗号分隔" clearable style="width: 620px"
@@ -59,6 +88,72 @@
     </el-table>
     <el-pagination v-if="pageTotal > 0" class="mt16" background :current-page="searchQuery.page" :page-size="pageSize"
       layout="total, prev, pager, next, jumper" :total="pageTotal" @current-change="handlePageChange" />
+
+    <el-dialog
+      :visible.sync="bidcenterLoginDialogVisible"
+      custom-class="bidcenter-login-dialog"
+      width="440px"
+      append-to-body
+      :close-on-click-modal="false"
+      @open="onBidcenterDialogOpen"
+    >
+      <template slot="title">
+        <div class="bidcenter-login-dialog__title">
+          <div class="bidcenter-login-dialog__brand" aria-hidden="true">
+            <i class="el-icon-medal" />
+          </div>
+          <div class="bidcenter-login-dialog__title-text">
+            <span class="bidcenter-login-dialog__title-main">采招网会员登录</span>
+            <span class="bidcenter-login-dialog__title-sub">登录成功后，检索请求将按会员身份发起</span>
+          </div>
+        </div>
+      </template>
+      <div class="bidcenter-login-dialog__panel">
+        <el-form
+          class="bidcenter-login-dialog__form"
+          label-position="top"
+          size="medium"
+          @submit.native.prevent
+        >
+          <el-form-item label="用户名 / 手机号">
+            <el-input
+              v-model="bidcenterLoginForm.username"
+              autocomplete="username"
+              clearable
+              placeholder="请输入采招网账号"
+              prefix-icon="el-icon-user"
+            />
+          </el-form-item>
+          <el-form-item label="密码">
+            <el-input
+              v-model="bidcenterLoginForm.password"
+              type="password"
+              show-password
+              autocomplete="current-password"
+              clearable
+              placeholder="请输入密码"
+              prefix-icon="el-icon-lock"
+              @keyup.enter.native="handleBidcenterLoginFromForm"
+            />
+          </el-form-item>
+        </el-form>
+        <p class="bidcenter-login-dialog__hint">
+          <i class="el-icon-info" />
+          凭账号校验后可能仅写入 Cookie；若检索权限异常，可在页面使用「应用 token」。
+        </p>
+      </div>
+      <div slot="footer" class="bidcenter-login-dialog__footer">
+        <el-button size="medium" @click="bidcenterLoginDialogVisible = false">取消</el-button>
+        <el-button
+          type="primary"
+          size="medium"
+          :loading="bidcenterLoginLoading"
+          @click="handleBidcenterLoginFromForm"
+        >
+          登录
+        </el-button>
+      </div>
+    </el-dialog>
   </div>
 </template>
 
@@ -67,6 +162,16 @@ import axios from 'axios'
 import CryptoJS from 'crypto-js'
 import { Message, Loading } from 'element-ui'
 import { listBid } from '@/api/oa/bid/bid'
+import {
+  loginBidcenterMemberJsonp,
+  pickTokenFromLoginResponse,
+  pickNextTokenFromLoginResponse,
+  getStoredBidcenterToken,
+  setStoredBidcenterToken,
+  clearStoredBidcenterToken,
+  setBidcenterJsonpMemberSession,
+  getBidcenterJsonpMemberSession
+} from '@/utils/bidcenterMemberLogin'
 
 const SEARCH_PRO_URL = 'https://interface.bidcenter.com.cn/search/GetSearchProHandler.ashx'
 const BIDCENTER_GUID = 'cad034bd-ad01-4dce-a4ca-1a1252f0dbf1'
@@ -89,7 +194,7 @@ function serializeSearchParams(data) {
   for (const key of Object.keys(data)) {
     const v = data[key]
     if (v === undefined || v === null) continue
-    if (v === '' && key !== 'token') continue
+    if (v === '' && key !== 'token' && key !== 'next_token') continue
     if (key === 'keywords') {
       parts.push(`keywords=${v}`)
     } else {
@@ -111,7 +216,10 @@ export default {
       searchWarning: '',
       emptyText: '暂无数据',
       searchLoading: false,
-      nextToken: '',
+      /** 接口每次返回的 next_token（searchv16：20 页后靠此续页） */
+      storedNextTokenFromApi: '',
+      /** 仅用于下一次 POST 的 next_token，发出后清空 */
+      pendingNextToken: '',
       /** 检索输入框与接口关键词（明文） */
       keywordText: '控制网,库容复核,测量技术,地形测量,安全监测,基准网复测,测量中心,土地测绘',
       /** 接口返回或上次成功检索后的展示文案 */
@@ -123,10 +231,34 @@ export default {
         type: 1,
         mod: 0,
         page: 1
+      },
+      /** 采招网搜索接口 token（与 searchv16 中 token 一致） */
+      bidcenterMemberToken: '',
+      /** JSONP 登录成功但未返回 token 时，与 sessionStorage 同步：用采招网 cookie + withCredentials 调搜索 */
+      bidcenterCookieMember: false,
+      bidcenterLoginLoading: false,
+      manualTokenDraft: '',
+      bidcenterLoginDialogVisible: false,
+      bidcenterLoginForm: {
+        username: '',
+        password: ''
       }
     }
   },
   computed: {
+    bidcenterAuthLabel() {
+      if ((this.bidcenterMemberToken || '').trim()) return '已登录（请求已携带 token）'
+      if (this.bidcenterCookieMember) return '已登录（采招网 Cookie，无 token 字段）'
+      return '未登录（匿名）'
+    },
+    memberSearchActive() {
+      return !!(this.bidcenterMemberToken || '').trim() || this.bidcenterCookieMember
+    },
+    hasEnvBidcenterCredentials() {
+      const u = process.env.VUE_APP_BIDCENTER_USERNAME
+      const p = process.env.VUE_APP_BIDCENTER_PASSWORD
+      return !!(u && String(u).trim() && p && String(p).trim())
+    },
     tableFilterTrimmed() {
       return (this.tableFilter || '').trim()
     },
@@ -157,10 +289,135 @@ export default {
       return this.emptyText
     }
   },
-  created() {
-    this.getList()
+  async created() {
+    this.restoreBidcenterTokenFromStorage()
+    await this.tryAutoLoginBidcenterFromEnv()
+    await this.getList()
   },
   methods: {
+    restoreBidcenterTokenFromStorage() {
+      this.bidcenterMemberToken = getStoredBidcenterToken()
+      this.bidcenterCookieMember = getBidcenterJsonpMemberSession()
+      if (this.memberSearchActive && Number(this.searchQuery.mod) === 0) {
+        this.searchQuery.mod = 1
+      }
+    },
+    async tryAutoLoginBidcenterFromEnv() {
+      if (!this.hasEnvBidcenterCredentials) return
+      if (this.memberSearchActive) return
+      const u = String(process.env.VUE_APP_BIDCENTER_USERNAME || '').trim()
+      const p = String(process.env.VUE_APP_BIDCENTER_PASSWORD || '').trim()
+      await this.runBidcenterMemberLogin(u, p, { silent: true })
+    },
+    onBidcenterDialogOpen() {
+      const u = String(process.env.VUE_APP_BIDCENTER_USERNAME || '').trim()
+      const p = String(process.env.VUE_APP_BIDCENTER_PASSWORD || '').trim()
+      if (!this.bidcenterLoginForm.username && u) this.bidcenterLoginForm.username = u
+      if (!this.bidcenterLoginForm.password && p) this.bidcenterLoginForm.password = p
+    },
+    openBidcenterLoginDialog() {
+      this.bidcenterLoginDialogVisible = true
+    },
+    async handleBidcenterLoginFromEnv() {
+      const u = String(process.env.VUE_APP_BIDCENTER_USERNAME || '').trim()
+      const p = String(process.env.VUE_APP_BIDCENTER_PASSWORD || '').trim()
+      await this.runBidcenterMemberLogin(u, p, { silent: false })
+    },
+    async handleBidcenterLoginFromForm() {
+      const u = (this.bidcenterLoginForm.username || '').trim()
+      const p = (this.bidcenterLoginForm.password || '').trim()
+      const ok = await this.runBidcenterMemberLogin(u, p, { silent: false })
+      if (ok) this.bidcenterLoginDialogVisible = false
+    },
+    /**
+     * @returns {Promise<boolean>} 是否拿到 token
+     */
+    async runBidcenterMemberLogin(username, password, { silent }) {
+      this.bidcenterLoginLoading = true
+      try {
+        const r = await loginBidcenterMemberJsonp(username, password)
+        const ok = r.status === 'true' || r.status === true
+        if (!ok) {
+          let brief = '登录失败'
+          if (r.brief != null) {
+            try {
+              brief = decodeURIComponent(String(r.brief))
+            } catch (e) {
+              brief = String(r.brief)
+            }
+          }
+          Message.error(brief)
+          return false
+        }
+        const tok = pickTokenFromLoginResponse(r)
+        if (tok) {
+          setBidcenterJsonpMemberSession(false)
+          this.bidcenterCookieMember = false
+          this.bidcenterMemberToken = tok
+          setStoredBidcenterToken(tok)
+          this.searchQuery.mod = 1
+          const nt = pickNextTokenFromLoginResponse(r)
+          this.storedNextTokenFromApi = nt || ''
+          if (!silent) {
+            Message.success('采招网会员登录成功')
+            this.fetchBidcenterSearch()
+          }
+          return true
+        }
+        // 与采招网原页一致：登录接口常只写 cookie、不返回搜索 token；凭 cookie 请求搜索接口
+        setBidcenterJsonpMemberSession(true)
+        this.bidcenterCookieMember = true
+        this.bidcenterMemberToken = ''
+        this.searchQuery.mod = 1
+        this.storedNextTokenFromApi = ''
+        this.pendingNextToken = ''
+        if (!silent) {
+          Message.success('采招网账号已校验；将携带采招网 Cookie 请求检索（若仍非会员数据，请从采招网页复制 token 后「应用 token」）')
+          this.fetchBidcenterSearch()
+        } else {
+          Message({
+            message:
+              '采招网环境账号已登录（Cookie 会话）。若检索权限异常，请在页面使用「应用 token」或检查浏览器是否拦截第三方 Cookie。',
+            type: 'warning',
+            duration: 8000
+          })
+        }
+        return true
+      } catch (e) {
+        Message.error(e.message || '采招网登录失败')
+        return false
+      } finally {
+        this.bidcenterLoginLoading = false
+      }
+    },
+    applyManualBidcenterToken() {
+      const t = (this.manualTokenDraft || '').trim()
+      if (!t) {
+        Message.warning('请先粘贴 token')
+        return
+      }
+      setBidcenterJsonpMemberSession(false)
+      this.bidcenterCookieMember = false
+      this.bidcenterMemberToken = t
+      setStoredBidcenterToken(t)
+      this.searchQuery.mod = 1
+      this.storedNextTokenFromApi = ''
+      this.pendingNextToken = ''
+      this.manualTokenDraft = ''
+      Message.success('已保存 token，正在按会员身份重新检索')
+      this.fetchBidcenterSearch()
+    },
+    clearBidcenterMemberToken() {
+      clearStoredBidcenterToken()
+      setBidcenterJsonpMemberSession(false)
+      this.bidcenterCookieMember = false
+      this.bidcenterMemberToken = ''
+      this.searchQuery.mod = 0
+      this.storedNextTokenFromApi = ''
+      this.pendingNextToken = ''
+      Message.success('已清除采招网 token')
+      this.fetchBidcenterSearch()
+    },
     async getList() {
       const queryParams = {
         url:
@@ -177,24 +434,37 @@ export default {
       }
       this.keywordText = t
       this.searchQuery.page = 1
-      this.nextToken = ''
+      this.storedNextTokenFromApi = ''
+      this.pendingNextToken = ''
       this.tableFilter = ''
+      if (this.memberSearchActive) {
+        this.searchQuery.mod = 1
+      }
       this.fetchBidcenterSearch()
     },
     buildSearchPostBody() {
+      const token = (this.bidcenterMemberToken || '').trim()
+      const isMember = this.memberSearchActive
+      const modNum = Number(this.searchQuery.mod)
       const body = {
         from: 6137,
         guid: BIDCENTER_GUID,
         location: 6138,
-        token: '',
+        token,
         keywords: encodeURIComponent((this.keywordText || '').trim()),
         time: this.searchQuery.time,
         type: this.searchQuery.type,
-        mod: this.searchQuery.mod,
+        mod: isMember ? (modNum >= 1 ? modNum : 1) : this.searchQuery.mod,
         page: this.searchQuery.page
       }
-      if (this.nextToken) {
-        body.next_token = this.nextToken
+      let nextTok = ''
+      if (this.pendingNextToken) {
+        nextTok = this.pendingNextToken
+      } else if (isMember && this.storedNextTokenFromApi) {
+        nextTok = this.storedNextTokenFromApi
+      }
+      if (nextTok) {
+        body.next_token = nextTok
       }
       return body
     },
@@ -210,12 +480,16 @@ export default {
       } catch (e) { /* ignore */ }
       this.searchLoading = true
       const postData = this.buildSearchPostBody()
+      this.pendingNextToken = ''
+      const useCookieMember =
+        this.bidcenterCookieMember && !(this.bidcenterMemberToken || '').trim()
       try {
         const res = await axios({
           url: SEARCH_PRO_URL,
           method: 'post',
           timeout: 20000,
           responseType: 'text',
+          withCredentials: useCookieMember,
           headers: {
             'Content-Type': 'application/x-www-form-urlencoded;charset=UTF-8'
           },
@@ -224,7 +498,16 @@ export default {
         })
         this.bindSearchData(res.data)
       } catch (e) {
-        Message({ message: '网络错误，请重试', type: 'error' })
+        if (useCookieMember && e && e.message === 'Network Error') {
+          Message({
+            message:
+              '携带采招网 Cookie 的请求被浏览器或 CORS 拦截。请关闭第三方 Cookie 限制，或从采招网搜索页复制 token 后使用「应用 token」。',
+            type: 'error',
+            duration: 10000
+          })
+        } else {
+          Message({ message: '网络错误，请重试', type: 'error' })
+        }
         this.tableData = []
       } finally {
         this.searchLoading = false
@@ -258,7 +541,10 @@ export default {
         }
         const resultData = data.other2
         this.applyPageSearchJson(resultData.pageSearchJson)
-        this.nextToken = resultData.next_token || ''
+        this.storedNextTokenFromApi =
+          resultData.next_token != null && resultData.next_token !== ''
+            ? String(resultData.next_token)
+            : ''
         const list = resultData.listData
         this.tableData = Array.isArray(list) ? list : []
         this.pageTotal = Number(resultData.showInfoCount) || 0
@@ -273,6 +559,7 @@ export default {
         this.realInfoCount = total != null ? total : this.pageTotal
         this.emptyText = this.tableData.length ? '暂无数据' : '未查询到相关信息'
       } else {
+        this.storedNextTokenFromApi = ''
         if (data.msg) {
           Message.warning(data.msg)
         }
@@ -302,6 +589,12 @@ export default {
         if (jq.page != null) {
           this.searchQuery.page = jq.page
         }
+        if (jq.mod != null && jq.mod !== '') {
+          const m = parseInt(jq.mod, 10)
+          if (!Number.isNaN(m)) {
+            this.searchQuery.mod = m
+          }
+        }
         if (jq.keywords != null && String(jq.keywords).trim() !== '') {
           this.displayKeyword = String(jq.keywords).trim()
         } else {
@@ -313,9 +606,21 @@ export default {
         if (k) this.displayKeyword = k
       }
     },
+    /**
+     * 匿名：仅第 20→21 页用 pending 带 next_token（与 searchv16 layui-last 一致）。
+     * 会员：翻页时在 buildSearchPostBody 中自动带上一响应的 storedNextTokenFromApi；跳页/回退则清空游标。
+     */
     handlePageChange(page) {
+      const oldPage = this.searchQuery.page
+      this.pendingNextToken = ''
+      const hasMember = this.memberSearchActive
+      if (!hasMember && page === oldPage + 1 && oldPage >= 20 && this.storedNextTokenFromApi) {
+        this.pendingNextToken = this.storedNextTokenFromApi
+      }
+      if (page < oldPage || page > oldPage + 1) {
+        this.storedNextTokenFromApi = ''
+      }
       this.searchQuery.page = page
-      this.nextToken = ''
       this.fetchBidcenterSearch()
     },
     plainTitle(html) {
@@ -407,6 +712,20 @@ export default {
   margin-bottom: 8px;
 }
 
+.bidcenter-auth-row {
+  display: flex;
+  align-items: center;
+  flex-wrap: wrap;
+  gap: 10px;
+  margin-bottom: 14px;
+  padding-bottom: 12px;
+  border-bottom: 1px dashed #ebeef5;
+}
+
+.token-input {
+  width: 200px;
+}
+
 .table-filter-row {
   display: flex;
   align-items: center;
@@ -445,3 +764,141 @@ export default {
   color: #e6a23c;
 }
 </style>
+
+<!-- append-to-body 时对话框在 body 下，需非 scoped 样式 + custom-class -->
+<style lang="scss">
+.bidcenter-login-dialog {
+  border-radius: 14px;
+  overflow: hidden;
+  box-shadow: 0 22px 55px rgba(15, 52, 96, 0.14), 0 0 1px rgba(15, 52, 96, 0.06);
+
+  .el-dialog__header {
+    padding: 0;
+    margin: 0;
+    border: none;
+  }
+
+  .el-dialog__headerbtn {
+    top: 18px;
+    right: 18px;
+    font-size: 16px;
+
+    .el-dialog__close {
+      color: rgba(255, 255, 255, 0.88);
+    }
+
+    &:hover .el-dialog__close,
+    &:focus .el-dialog__close {
+      color: #fff;
+    }
+  }
+
+  .el-dialog__body {
+    padding: 0 24px 8px;
+    background: linear-gradient(180deg, #f7fafc 0%, #fff 48%);
+  }
+
+  .el-dialog__footer {
+    padding: 12px 24px 20px;
+    border-top: 1px solid #eef2f6;
+    background: #fff;
+  }
+}
+
+.bidcenter-login-dialog__title {
+  display: flex;
+  align-items: center;
+  gap: 14px;
+  padding: 22px 48px 18px 24px;
+  background: linear-gradient(135deg, #1a5fb4 0%, #409eff 55%, #66b1ff 100%);
+  color: #fff;
+}
+
+.bidcenter-login-dialog__brand {
+  flex-shrink: 0;
+  width: 48px;
+  height: 48px;
+  border-radius: 12px;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  background: rgba(255, 255, 255, 0.18);
+  backdrop-filter: blur(6px);
+  font-size: 24px;
+}
+
+.bidcenter-login-dialog__title-text {
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+  min-width: 0;
+}
+
+.bidcenter-login-dialog__title-main {
+  font-size: 18px;
+  font-weight: 600;
+  letter-spacing: 0.02em;
+  line-height: 1.3;
+}
+
+.bidcenter-login-dialog__title-sub {
+  font-size: 12px;
+  opacity: 0.92;
+  line-height: 1.45;
+}
+
+.bidcenter-login-dialog__panel {
+  padding-top: 20px;
+}
+
+.bidcenter-login-dialog__form {
+  .el-form-item {
+    margin-bottom: 18px;
+  }
+
+  .el-form-item__label {
+    padding: 0 0 6px;
+    line-height: 1.4;
+    color: #606266;
+    font-weight: 500;
+  }
+
+  .el-input__inner {
+    border-radius: 8px;
+    height: 40px;
+    line-height: 40px;
+  }
+}
+
+.bidcenter-login-dialog__hint {
+  margin: 4px 0 0;
+  padding: 10px 12px;
+  font-size: 12px;
+  line-height: 1.55;
+  color: #909399;
+  background: #f4f7fb;
+  border-radius: 8px;
+  border: 1px solid #e8eef5;
+
+  .el-icon-info {
+    margin-right: 6px;
+    color: #409eff;
+  }
+}
+
+.bidcenter-login-dialog__footer {
+  display: flex;
+  justify-content: flex-end;
+  align-items: center;
+  gap: 12px;
+
+  .el-button {
+    min-width: 96px;
+    border-radius: 8px;
+  }
+
+  .el-button--primary {
+    box-shadow: 0 4px 12px rgba(64, 158, 255, 0.35);
+  }
+}
+</style>