修复 cookie 过期且自动续期失败时不提示重新登录

手机号登录（无密码）账号 cookie 过期后自动续期失败时，错误链只带普通错误、不带 needReLogin 信号，导致前端只显示普通错误、不弹「重新登录」引导，用户无法跳转登录页。 - 新增 ErrNeedReLogin 哨兵 + needReLoginSignal() 统一判定：密码错误或无法自动续期都视为需要重新登录 - refreshCpdailyCookie 无密码/MFA 无法自动续期时返回 ErrNeedReLogin - 所有执行路径（签到/请假/销假/返校/工作日志/表单/上传/预览）的续期失败分支统一升级为 wrapNeedReLogin，SSE task_error 与 HTTP 401 均按 needReLoginSignal 判定
2026-10-14 22:09:33 +08:00
parent 2a989a15ef
commit c47fb0a66e
9 changed files with 106 additions and 83 deletions
@@ -16,6 +16,26 @@ import (
 // ErrPasswordChanged 当 cpdaily 密码错误时返回此错误
 var ErrPasswordChanged = errors.New("cpdaily_password_error")

+// ErrNeedReLogin 当登录态失效且无法自动续期（如手机号登录无密码无法自动重登）、
+// 需要用户手动重新登录时返回此错误。与 ErrPasswordChanged 一起作为前端「重新登录」引导的信号。
+var ErrNeedReLogin = errors.New("cpdaily_need_relogin")
+
+// needReLoginSignal 判定错误是否需要引导用户重新登录。
+// 只要登录凭证已过期且无法自动续期（密码错误 或 无密码无法自动重登等），都返回 true。
+func needReLoginSignal(err error) bool {
+	return errors.Is(err, ErrPasswordChanged) || errors.Is(err, ErrNeedReLogin)
+}
+
+// wrapNeedReLogin 把「cookie 过期后自动续期失败」的错误升级为「需要重新登录」信号：
+// 密码错误保持 ErrPasswordChanged 原语义；其余失败（无密码、MFA、学校接口异常等）
+// 统一包装为 ErrNeedReLogin，让上层能识别并引导用户重新登录。
+func wrapNeedReLogin(e error) error {
+	if errors.Is(e, ErrPasswordChanged) {
+		return ErrPasswordChanged
+	}
+	return fmt.Errorf("%w: %v", ErrNeedReLogin, e)
+}
+
 // encryptRawPassword AES 加密明文密码并 base64 编码
 func encryptRawPassword(rawPassword string) (string, error) {
 	encrypted := cpd.AesEncrypt([]byte(rawPassword))
@@ -94,7 +114,7 @@ func refreshCpdailyCookie(user *model.SysUser) error {

 	if fresh.RawPassword == "" {
 		slog.Warn("刷新cookie: 未保存密码", "userId", user.ID)
-		return errors.New("未保存登录密码，无法自动重新登录")
+		return fmt.Errorf("%w: 未保存登录密码，无法自动重新登录", ErrNeedReLogin)
 	}

 	// 解密密码
@@ -131,7 +151,7 @@ func refreshCpdailyCookie(user *model.SysUser) error {
 	// 多因子认证学校：重新登录需人工输入验证码，无法自动续期
 	if errors.Is(err, cpd.ErrMFARequired) || mfaCtx != nil {
 		slog.Warn("刷新cookie: 该账号登录需多因子认证，无法自动续期", "userId", user.ID, "school", school.Name)
-		return errors.New("该账号所属学校开启登录验证码校验，需重新登录完成验证")
+		return fmt.Errorf("%w: 该账号所属学校开启登录验证码校验，需重新登录完成验证", ErrNeedReLogin)
 	}

 	// 检查 MOD_ cookie 确保登录成功
@@ -205,18 +205,18 @@ func ExecuteLeave(c *fiber.Ctx) error {
 			if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
 				cookieMap = cpd.ParseCookieJSON(user.Cookie)
 				detail, err = cpd.FetchLeaveDetail(cookieMap, host, req.LeaveID)
-			} else if errors.Is(refreshErr, ErrPasswordChanged) {
-				err = ErrPasswordChanged
+			} else {
+				err = wrapNeedReLogin(refreshErr)
 			}
 		}
 		if err != nil {
 			errMsg := "获取请假详情失败: " + err.Error()
-			if errors.Is(err, ErrPasswordChanged) {
+			if needReLoginSignal(err) {
 				errMsg = "登录凭证已过期，请重新登录"
 			}
 			slog.Error("获取请假详情失败", "userId", userID, "leaveId", req.LeaveID, "error", err)
 			saveLog(false, errMsg, leaveLogTitle(detail, ""))
-			sendEvent("task_error", map[string]interface{}{"status": "error", "message": errMsg, "needReLogin": errors.Is(err, ErrPasswordChanged)})
+			sendEvent("task_error", map[string]interface{}{"status": "error", "message": errMsg, "needReLogin": needReLoginSignal(err)})
 			return
 		}
 		title := leaveLogTitle(detail, req.LeaveID)
@@ -246,18 +246,18 @@ func ExecuteLeave(c *fiber.Ctx) error {
 			if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
 				cookieMap = cpd.ParseCookieJSON(user.Cookie)
 				err = cpd.SubmitLeaveReport(cookieMap, host, form, req.Longitude, req.Latitude, user.MobileCode, user.StudentID)
-			} else if errors.Is(refreshErr, ErrPasswordChanged) {
-				err = ErrPasswordChanged
+			} else {
+				err = wrapNeedReLogin(refreshErr)
 			}
 		}
 		if err != nil {
 			errMsg := "销假失败: " + err.Error()
-			if errors.Is(err, ErrPasswordChanged) {
+			if needReLoginSignal(err) {
 				errMsg = "登录凭证已过期，请重新登录"
 			}
 			slog.Error("销假失败", "userId", userID, "leaveId", req.LeaveID, "error", err)
 			saveLog(false, errMsg, title)
-			sendEvent("task_error", map[string]interface{}{"status": "error", "message": errMsg, "needReLogin": errors.Is(err, ErrPasswordChanged)})
+			sendEvent("task_error", map[string]interface{}{"status": "error", "message": errMsg, "needReLogin": needReLoginSignal(err)})
 			return
 		}

@@ -321,13 +321,13 @@ func GetLeaveApprovers(c *fiber.Ctx) error {
 			if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
 				cookieMap = cpd.ParseCookieJSON(user.Cookie)
 				approvers, err = fetchLeaveNewReportApprovers(cookieMap, host, req.LeaveID, &user)
-			} else if errors.Is(refreshErr, ErrPasswordChanged) {
-				err = ErrPasswordChanged
+			} else {
+				err = wrapNeedReLogin(refreshErr)
 			}
 		}
 		if err != nil {
 			slog.Error("获取销假审批人失败(新套)", "userId", userID, "leaveId", req.LeaveID, "error", err)
-			if errors.Is(err, ErrPasswordChanged) {
+			if needReLoginSignal(err) {
 				return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
 			}
 			return utils.Fail(c, 503, "获取销假审批人失败: "+err.Error())
@@ -340,13 +340,13 @@ func GetLeaveApprovers(c *fiber.Ctx) error {
 		if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
 			cookieMap = cpd.ParseCookieJSON(user.Cookie)
 			detail, err = cpd.FetchLeaveDetail(cookieMap, host, req.LeaveID)
-		} else if errors.Is(refreshErr, ErrPasswordChanged) {
-			err = ErrPasswordChanged
+		} else {
+			err = wrapNeedReLogin(refreshErr)
 		}
 	}
 	if err != nil {
 		slog.Error("获取请假详情失败(审批人)", "userId", userID, "leaveId", req.LeaveID, "error", err)
-		if errors.Is(err, ErrPasswordChanged) {
+		if needReLoginSignal(err) {
 			return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
 		}
 		return utils.Fail(c, 503, "获取请假详情失败: "+err.Error())
@@ -360,13 +360,13 @@ func GetLeaveApprovers(c *fiber.Ctx) error {
 		if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
 			cookieMap = cpd.ParseCookieJSON(user.Cookie)
 			approvers, err = cpd.FetchReportApprovers(cookieMap, host, detail.LeaveCodeNum, detail.StartTime, detail.EndTime)
-		} else if errors.Is(refreshErr, ErrPasswordChanged) {
-			err = ErrPasswordChanged
+		} else {
+			err = wrapNeedReLogin(refreshErr)
 		}
 	}
 	if err != nil {
 		slog.Error("获取销假审批人失败", "userId", userID, "leaveId", req.LeaveID, "error", err)
-		if errors.Is(err, ErrPasswordChanged) {
+		if needReLoginSignal(err) {
 			return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
 		}
 		return utils.Fail(c, 503, "获取销假审批人失败: "+err.Error())
@@ -3,7 +3,6 @@ package handler
 import (
 	"bufio"
 	"encoding/json"
-	"errors"
 	"fmt"
 	"log/slog"
 	"strconv"
@@ -62,13 +61,13 @@ func GetLeaveTypes(c *fiber.Ctx) error {
 			} else {
 				types, err = cpd.FetchLeaveTypes(cookieMap, host)
 			}
-		} else if errors.Is(refreshErr, ErrPasswordChanged) {
-			err = ErrPasswordChanged
+		} else {
+			err = wrapNeedReLogin(refreshErr)
 		}
 	}
 	if err != nil {
 		slog.Error("获取请假类型失败", "userId", user.ID, "flavor", flavor.String(), "error", err)
-		if errors.Is(err, ErrPasswordChanged) {
+		if needReLoginSignal(err) {
 			return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
 		}
 		return utils.Fail(c, 503, "获取请假类型失败: "+err.Error())
@@ -109,13 +108,13 @@ func GetLeaveApplyApprovers(c *fiber.Ctx) error {
 			if refreshErr := refreshCpdailyCookie(user); refreshErr == nil {
 				cookieMap = cpd.ParseCookieJSON(user.Cookie)
 				res, err = fetchLeaveNewApplyApprovers(cookieMap, host, req.LeaveType, req.StartTime, req.EndTime)
-			} else if errors.Is(refreshErr, ErrPasswordChanged) {
-				err = ErrPasswordChanged
+			} else {
+				err = wrapNeedReLogin(refreshErr)
 			}
 		}
 		if err != nil {
 			slog.Error("获取请假审批人失败(新套)", "userId", user.ID, "leaveType", req.LeaveType, "error", err)
-			if errors.Is(err, ErrPasswordChanged) {
+			if needReLoginSignal(err) {
 				return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
 			}
 			return utils.Fail(c, 503, "获取请假审批人失败: "+err.Error())
@@ -129,13 +128,13 @@ func GetLeaveApplyApprovers(c *fiber.Ctx) error {
 		if refreshErr := refreshCpdailyCookie(user); refreshErr == nil {
 			cookieMap = cpd.ParseCookieJSON(user.Cookie)
 			approvers, err = cpd.FetchReportApprovers(cookieMap, host, req.LeaveType, req.StartTime, req.EndTime)
-		} else if errors.Is(refreshErr, ErrPasswordChanged) {
-			err = ErrPasswordChanged
+		} else {
+			err = wrapNeedReLogin(refreshErr)
 		}
 	}
 	if err != nil {
 		slog.Error("获取请假审批人失败", "userId", user.ID, "leaveType", req.LeaveType, "error", err)
-		if errors.Is(err, ErrPasswordChanged) {
+		if needReLoginSignal(err) {
 			return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
 		}
 		return utils.Fail(c, 503, "获取请假审批人失败: "+err.Error())
@@ -347,18 +346,18 @@ func ExecuteLeaveApply(c *fiber.Ctx) error {
 			if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
 				cookieMap = cpd.ParseCookieJSON(user.Cookie)
 				cfg, err = cpd.FetchLeaveTypeCfg(cookieMap, host, req.LeaveType)
-			} else if errors.Is(refreshErr, ErrPasswordChanged) {
-				err = ErrPasswordChanged
+			} else {
+				err = wrapNeedReLogin(refreshErr)
 			}
 		}
 		if err != nil {
 			errMsg := "获取请假类型配置失败: " + err.Error()
-			if errors.Is(err, ErrPasswordChanged) {
+			if needReLoginSignal(err) {
 				errMsg = "登录凭证已过期，请重新登录"
 			}
 			slog.Error("获取请假类型配置失败", "userId", userID, "leaveType", req.LeaveType, "error", err)
 			saveLog(false, errMsg)
-			sendEvent("task_error", map[string]interface{}{"status": "error", "message": errMsg, "needReLogin": errors.Is(err, ErrPasswordChanged)})
+			sendEvent("task_error", map[string]interface{}{"status": "error", "message": errMsg, "needReLogin": needReLoginSignal(err)})
 			return
 		}
 		if cfg.DisableTime == 1 {
@@ -455,18 +454,18 @@ func ExecuteLeaveApply(c *fiber.Ctx) error {
 			if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
 				cookieMap = cpd.ParseCookieJSON(user.Cookie)
 				err = submit(cookieMap)
-			} else if errors.Is(refreshErr, ErrPasswordChanged) {
-				err = ErrPasswordChanged
+			} else {
+				err = wrapNeedReLogin(refreshErr)
 			}
 		}
 		if err != nil {
 			errMsg := "请假申请失败: " + err.Error()
-			if errors.Is(err, ErrPasswordChanged) {
+			if needReLoginSignal(err) {
 				errMsg = "登录凭证已过期，请重新登录"
 			}
 			slog.Error("请假申请失败", "userId", userID, "error", err)
 			saveLog(false, errMsg)
-			sendEvent("task_error", map[string]interface{}{"status": "error", "message": errMsg, "needReLogin": errors.Is(err, ErrPasswordChanged)})
+			sendEvent("task_error", map[string]interface{}{"status": "error", "message": errMsg, "needReLogin": needReLoginSignal(err)})
 			return
 		}

@@ -1,7 +1,6 @@
 package handler

 import (
-	"errors"
 	"log/slog"
 	"strings"

@@ -44,13 +43,13 @@ func GetLeaveExtendPrefill(c *fiber.Ctx) error {
 			if refreshErr := refreshCpdailyCookie(user); refreshErr == nil {
 				cookieMap = cpd.ParseCookieJSON(user.Cookie)
 				d, err = cpd.FetchLeaveDetail(cookieMap, host, req.LeaveID)
-			} else if errors.Is(refreshErr, ErrPasswordChanged) {
-				err = ErrPasswordChanged
+			} else {
+				err = wrapNeedReLogin(refreshErr)
 			}
 		}
 		if err != nil {
 			slog.Error("获取续假预填失败(旧套)", "userId", user.ID, "leaveId", req.LeaveID, "error", err)
-			if errors.Is(err, ErrPasswordChanged) {
+			if needReLoginSignal(err) {
 				return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
 			}
 			return utils.Fail(c, 503, "获取续假信息失败: "+err.Error())
@@ -70,13 +69,13 @@ func GetLeaveExtendPrefill(c *fiber.Ctx) error {
 		if refreshErr := refreshCpdailyCookie(user); refreshErr == nil {
 			cookieMap = cpd.ParseCookieJSON(user.Cookie)
 			rd, err = cpd.FetchLeaveNewReplyDetail(cookieMap, host, req.LeaveID)
-		} else if errors.Is(refreshErr, ErrPasswordChanged) {
-			err = ErrPasswordChanged
+		} else {
+			err = wrapNeedReLogin(refreshErr)
 		}
 	}
 	if err != nil {
 		slog.Error("获取续假预填失败", "userId", user.ID, "leaveId", req.LeaveID, "error", err)
-		if errors.Is(err, ErrPasswordChanged) {
+		if needReLoginSignal(err) {
 			return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
 		}
 		return utils.Fail(c, 503, "获取续假信息失败: "+err.Error())
@@ -1,7 +1,6 @@
 package handler

 import (
-	"errors"
 	"fmt"
 	"log/slog"
 	"strings"
@@ -128,7 +127,7 @@ func leaveNewExecuteReport(user *model.SysUser, cookieMap map[string]string, hos
 			if refreshErr := refreshCpdailyCookie(user); refreshErr == nil {
 				cookieMap = cpd.ParseCookieJSON(user.Cookie)
 				detail, err = cpd.FetchLeaveNewDetail(cookieMap, host, leaveID)
-			} else if errors.Is(refreshErr, ErrPasswordChanged) {
+			} else {
 				return false, "登录凭证已过期，请重新登录", true
 			}
 		}
@@ -171,7 +170,7 @@ func leaveNewExecuteReport(user *model.SysUser, cookieMap map[string]string, hos
 		if refreshErr := refreshCpdailyCookie(user); refreshErr == nil {
 			cookieMap = cpd.ParseCookieJSON(user.Cookie)
 			err = cpd.SubmitLeaveNewReport(cookieMap, host, form)
-		} else if errors.Is(refreshErr, ErrPasswordChanged) {
+		} else {
 			return false, "登录凭证已过期，请重新登录", true
 		}
 	}
@@ -193,7 +192,7 @@ func leaveNewExecuteApply(user *model.SysUser, cookieMap map[string]string, host
 			if refreshErr := refreshCpdailyCookie(user); refreshErr == nil {
 				cookieMap = cpd.ParseCookieJSON(user.Cookie)
 				detail, err = cpd.FetchLeaveNewTypeDetail(cookieMap, host, req.LeaveType)
-			} else if errors.Is(refreshErr, ErrPasswordChanged) {
+			} else {
 				return false, "登录凭证已过期，请重新登录", true, false
 			}
 		}
@@ -217,7 +216,7 @@ func leaveNewExecuteApply(user *model.SysUser, cookieMap map[string]string, host
 			if refreshErr := refreshCpdailyCookie(user); refreshErr == nil {
 				cookieMap = cpd.ParseCookieJSON(user.Cookie)
 				approver, flowData, candidates, err = leaveNewResolveApproverAndFlow(cookieMap, host, req.LeaveType, req.StartTime, req.EndTime, req.ApproverWid)
-			} else if errors.Is(refreshErr, ErrPasswordChanged) {
+			} else {
 				return false, "登录凭证已过期，请重新登录", true, false
 			}
 		}
@@ -250,7 +249,7 @@ func leaveNewExecuteApply(user *model.SysUser, cookieMap map[string]string, host
 			if refreshErr := refreshCpdailyCookie(user); refreshErr == nil {
 				cookieMap = cpd.ParseCookieJSON(user.Cookie)
 				rd, rerr = cpd.FetchLeaveNewReplyDetail(cookieMap, host, req.ExtendLeaveID)
-			} else if errors.Is(refreshErr, ErrPasswordChanged) {
+			} else {
 				return false, "登录凭证已过期，请重新登录", true, false
 			}
 		}
@@ -292,7 +291,7 @@ func leaveNewExecuteApply(user *model.SysUser, cookieMap map[string]string, host
 		if refreshErr := refreshCpdailyCookie(user); refreshErr == nil {
 			cookieMap = cpd.ParseCookieJSON(user.Cookie)
 			err = cpd.SubmitLeaveNewApply(cookieMap, host, form)
-		} else if errors.Is(refreshErr, ErrPasswordChanged) {
+		} else {
 			return false, "登录凭证已过期，请重新登录", true, false
 		}
 	}
@@ -1,7 +1,6 @@
 package handler

 import (
-	"errors"
 	"fmt"
 	"log/slog"

@@ -25,10 +24,8 @@ func refreshAfterCookieExpired(user *model.SysUser, err error, retry func() erro
 	}
 	slog.Info("cookie过期，尝试刷新", "userId", user.ID)
 	if refreshErr := refreshCpdailyCookie(user); refreshErr != nil {
-		if errors.Is(refreshErr, ErrPasswordChanged) {
-			return ErrPasswordChanged
-		}
-		return err
+		// 续期失败：无论原因（密码错/无密码无法自动重登等）都升级为「需要重新登录」
+		return wrapNeedReLogin(refreshErr)
 	}
 	return retry()
 }
@@ -182,7 +179,7 @@ func GetLeaveNewCcSearch(c *fiber.Ctx) error {
 	}
 	if err != nil {
 		slog.Error("获取抄送人失败", "userId", user.ID, "error", err)
-		if errors.Is(err, ErrPasswordChanged) {
+		if needReLoginSignal(err) {
 			return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
 		}
 		return utils.Fail(c, 503, "获取抄送人失败: "+err.Error())
@@ -211,7 +208,7 @@ func leaveNewRetryOnExpired(user *model.SysUser, err error, retry func() error)

 // leaveNewFriendlyErr 新套错误统一包装（带 401 语义）
 func leaveNewFriendlyErr(c *fiber.Ctx, action string, err error) error {
-	if errors.Is(err, ErrPasswordChanged) {
+	if needReLoginSignal(err) {
 		return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
 	}
 	return utils.Fail(c, 503, fmt.Sprintf("%s: %v", action, err))
@@ -187,10 +187,12 @@ func GetTaskForm(c *fiber.Ctx) error {
 			if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
 				cookieMap = cpd.ParseCookieJSON(user.Cookie)
 				fields, err = cpd.FetchWorklogDetail(cookieMap, host, wid)
+			} else {
+				err = wrapNeedReLogin(refreshErr)
 			}
 		}
 		if err != nil {
-			if errors.Is(err, ErrPasswordChanged) {
+			if needReLoginSignal(err) {
 				return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
 			}
 			return utils.Fail(c, 503, "获取工作日志表单失败: "+err.Error())
@@ -219,12 +221,14 @@ func GetTaskForm(c *fiber.Ctx) error {
 			if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
 				cookieMap = cpd.ParseCookieJSON(user.Cookie)
 				detail, err = cpd.GetTaskDetailByWid(cookieMap, host, cpd.TaskType(task.TaskType), task.SignWid, task.SignInstanceWid, task.Title)
+			} else {
+				err = wrapNeedReLogin(refreshErr)
 			}
 		}
 	}
 	if err != nil {
 		slog.Warn("获取任务表单失败", "taskId", id, "error", err)
-		if errors.Is(err, ErrPasswordChanged) {
+		if needReLoginSignal(err) {
 			return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
 		}
 		return utils.Fail(c, 503, "获取任务表单失败: "+err.Error())
@@ -663,13 +667,13 @@ func executeSignTask(c *fiber.Ctx) error {
 			if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
 				cookieMap = cpd.ParseCookieJSON(user.Cookie)
 				detail, err = cpd.FetchTodayTaskDetail(cookieMap, host, cpd.TaskType(task.TaskType), task.Title)
-			} else if errors.Is(refreshErr, ErrPasswordChanged) {
-				err = ErrPasswordChanged
+			} else {
+				err = wrapNeedReLogin(refreshErr)
 			}
 		}
 		if err != nil {
 			errMsg := "获取签到表单失败: " + err.Error()
-			if errors.Is(err, ErrPasswordChanged) {
+			if needReLoginSignal(err) {
 				errMsg = "登录凭证已过期，请重新登录"
 			}
 			slog.Error("获取表单失败", "taskId", id, "error", err)
@@ -678,7 +682,7 @@ func executeSignTask(c *fiber.Ctx) error {
 				"error_message": errMsg,
 			})
 			saveLog(false, errMsg, taskTitle(task))
-			sendEvent("task_error", map[string]interface{}{"status": "error", "message": errMsg, "needReLogin": errors.Is(err, ErrPasswordChanged)})
+			sendEvent("task_error", map[string]interface{}{"status": "error", "message": errMsg, "needReLogin": needReLoginSignal(err)})
 			return
 		}

@@ -756,13 +760,13 @@ func executeSignTask(c *fiber.Ctx) error {
 			if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
 				cookieMap = cpd.ParseCookieJSON(user.Cookie)
 				err = cpd.SubmitSign(cookieMap, host, cpd.TaskType(task.TaskType), submitForm, user.MobileCode, user.StudentID)
-			} else if errors.Is(refreshErr, ErrPasswordChanged) {
-				err = ErrPasswordChanged
+			} else {
+				err = wrapNeedReLogin(refreshErr)
 			}
 		}
 		if err != nil {
 			errMsg := fmt.Sprintf("签到失败(%s): %s", taskTitle(task), err.Error())
-			if errors.Is(err, ErrPasswordChanged) {
+			if needReLoginSignal(err) {
 				errMsg = "登录凭证已过期，请重新登录"
 			}
 			slog.Error("签到失败", "taskId", id, "error", err)
@@ -771,7 +775,7 @@ func executeSignTask(c *fiber.Ctx) error {
 				"error_message": errMsg,
 			})
 			saveLog(false, errMsg, taskTitle(task))
-			sendEvent("task_error", map[string]interface{}{"status": "error", "message": errMsg, "needReLogin": errors.Is(err, ErrPasswordChanged)})
+			sendEvent("task_error", map[string]interface{}{"status": "error", "message": errMsg, "needReLogin": needReLoginSignal(err)})
 			return
 		}

@@ -918,13 +922,13 @@ func GetUploadPolicy(c *fiber.Ctx) error {
 			if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
 				cookieMap = cpd.ParseCookieJSON(user.Cookie)
 				policy, err = cpd.GetLeaveNewUploadPolicy(cookieMap, host)
-			} else if errors.Is(refreshErr, ErrPasswordChanged) {
-				err = ErrPasswordChanged
+			} else {
+				err = wrapNeedReLogin(refreshErr)
 			}
 		}
 		if err != nil {
 			slog.Error("获取上传策略失败(新套)", "error", err)
-			if errors.Is(err, ErrPasswordChanged) {
+			if needReLoginSignal(err) {
 				return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
 			}
 			return utils.Fail(c, 503, "获取上传策略失败: "+err.Error())
@@ -938,13 +942,13 @@ func GetUploadPolicy(c *fiber.Ctx) error {
 		if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
 			cookieMap = cpd.ParseCookieJSON(user.Cookie)
 			policy, err = cpd.GetUploadPolicy(cookieMap, host, cpd.TaskType(req.TaskType))
-		} else if errors.Is(refreshErr, ErrPasswordChanged) {
-			err = ErrPasswordChanged
+		} else {
+			err = wrapNeedReLogin(refreshErr)
 		}
 	}
 	if err != nil {
 		slog.Error("获取上传策略失败", "error", err)
-		if errors.Is(err, ErrPasswordChanged) {
+		if needReLoginSignal(err) {
 			return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
 		}
 		return utils.Fail(c, 503, "获取上传策略失败: "+err.Error())
@@ -983,13 +987,13 @@ func GetPreviewUrl(c *fiber.Ctx) error {
 			if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
 				cookieMap = cpd.ParseCookieJSON(user.Cookie)
 				previewUrl, err = cpd.GetLeaveNewPreviewURL(cookieMap, host, req.FileKey)
-			} else if errors.Is(refreshErr, ErrPasswordChanged) {
-				err = ErrPasswordChanged
+			} else {
+				err = wrapNeedReLogin(refreshErr)
 			}
 		}
 		if err != nil {
 			slog.Error("获取预览 URL 失败(新套)", "error", err)
-			if errors.Is(err, ErrPasswordChanged) {
+			if needReLoginSignal(err) {
 				return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
 			}
 			return utils.Fail(c, 503, "获取预览 URL 失败: "+err.Error())
@@ -1003,13 +1007,13 @@ func GetPreviewUrl(c *fiber.Ctx) error {
 		if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
 			cookieMap = cpd.ParseCookieJSON(user.Cookie)
 			previewUrl, err = cpd.GetPreviewUrl(cookieMap, host, cpd.TaskType(req.TaskType), req.FileKey)
-		} else if errors.Is(refreshErr, ErrPasswordChanged) {
-			err = ErrPasswordChanged
+		} else {
+			err = wrapNeedReLogin(refreshErr)
 		}
 	}
 	if err != nil {
 		slog.Error("获取预览 URL 失败", "error", err)
-		if errors.Is(err, ErrPasswordChanged) {
+		if needReLoginSignal(err) {
 			return utils.Fail(c, 401, "登录凭证已过期，请重新登录")
 		}
 		return utils.Fail(c, 503, "获取预览 URL 失败: "+err.Error())
@@ -103,6 +103,8 @@ func executeReturnRegisterTask(c *fiber.Ctx, task *model.CpTask) error {
 			if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
 				cookieMap = cpd.ParseCookieJSON(user.Cookie)
 				places, err = cpd.FetchLeaveReturnPlaces(cookieMap, host)
+			} else {
+				err = wrapNeedReLogin(refreshErr)
 			}
 		}
 		if err != nil {
@@ -129,6 +131,8 @@ func executeReturnRegisterTask(c *fiber.Ctx, task *model.CpTask) error {
 			if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
 				cookieMap = cpd.ParseCookieJSON(user.Cookie)
 				err = cpd.SubmitLeaveReturnRegister(cookieMap, host, taskWid, stuWid, place.Address, place.Longitude, place.Latitude, 1, "")
+			} else {
+				err = wrapNeedReLogin(refreshErr)
 			}
 		}
 		if err != nil {
@@ -3,7 +3,6 @@ package handler
 import (
 	"bufio"
 	"encoding/json"
-	"errors"
 	"fmt"
 	"log/slog"
 	"strconv"
@@ -71,15 +70,17 @@ func executeWorklogTask(c *fiber.Ctx, task *model.CpTask) error {
 			if refreshErr := refreshCpdailyCookie(&user); refreshErr == nil {
 				cookieMap = cpd.ParseCookieJSON(user.Cookie)
 				fields, err = cpd.FetchWorklogDetail(cookieMap, host, wid)
+			} else {
+				err = wrapNeedReLogin(refreshErr)
 			}
 		}
 		if err != nil {
 			msg := "获取工作日志表单失败: " + err.Error()
-			if errors.Is(err, ErrPasswordChanged) {
+			if needReLoginSignal(err) {
 				msg = "登录凭证已过期，请重新登录"
 			}
 			saveLog(false, msg)
-			sendEvent("task_error", map[string]interface{}{"status": "error", "message": msg, "needReLogin": errors.Is(err, ErrPasswordChanged)})
+			sendEvent("task_error", map[string]interface{}{"status": "error", "message": msg, "needReLogin": needReLoginSignal(err)})
 			return
 		}