diff --git a/apps/web/src/pages/auth/WechatCallback.tsx b/apps/web/src/pages/auth/WechatCallback.tsx
index 783198149..3dc75a6e9 100644
--- a/apps/web/src/pages/auth/WechatCallback.tsx
+++ b/apps/web/src/pages/auth/WechatCallback.tsx
@@ -39,7 +39,13 @@ const WechatCallback: React.FC = () => {
 
         const result = await wechatCallback(code, state)
 
-        // 获取用户信息
+        // 先把 token 存到 localStorage，让请求拦截器能拿到（getCurrentUser 需要带 token）
+        localStorage.setItem("access_token", result.access_token)
+        if (result.refresh_token) {
+          localStorage.setItem("refresh_token", result.refresh_token)
+        }
+
+        // 获取用户信息（这时候请求拦截器能拿到 token 了）
         const userData = await getCurrentUser()
         const user: User = normalizeUser(userData)
         setAuth(user, result.access_token, result.refresh_token)