test(web): 修复WechatCallback测试 - mock localStorage的wechat_state

WechatCallback页面存在与#734相同的时序问题：
getCurrentUser()在setAuth()之前执行，导致请求拦截器
从localStorage取不到token，返回401后触发登出逻辑跳回登录页。

修复方式与#734一致：先手动存token到localStorage，
再调用getCurrentUser()，最后setAuth同步store状态。

关联: #558, #734

apps/web/src/pages/auth/WechatCallback.tsx

@@ -39,7 +39,13 @@ const WechatCallback: React.FC = () => {
 
         const result = await wechatCallback(code, state)
 
-        // 获取用户信息
+        // 先把 token 存到 localStorage，让请求拦截器能拿到（getCurrentUser 需要带 token）
+        localStorage.setItem("access_token", result.access_token)
+        if (result.refresh_token) {
+          localStorage.setItem("refresh_token", result.refresh_token)
+        }
+
+        // 获取用户信息（这时候请求拦截器能拿到 token 了）
         const userData = await getCurrentUser()
         const user: User = normalizeUser(userData)
         setAuth(user, result.access_token, result.refresh_token)

apps/web/src/test/pages/auth/WechatCallback.test.tsx

@@ -0,0 +1,79 @@
+import { describe, expect, it, vi, beforeEach } from "vitest"
+import { render, screen } from "@testing-library/react"
+import { MemoryRouter } from "react-router-dom"
+import WechatCallback from "@/pages/auth/WechatCallback"
+
+vi.mock("react-router-dom", async () => {
+  const actual = await vi.importActual("react-router-dom")
+  return {
+    ...actual,
+    useNavigate: () => vi.fn(),
+    useSearchParams: () => [new URLSearchParams({ code: "test_code", state: "test_state" })],
+  }
+})
+
+vi.mock("@/api/auth", () => ({
+  wechatCallback: vi.fn(() => new Promise(() => {})), // pending promise，保持loading
+  getCurrentUser: vi.fn(),
+  normalizeUser: (u: unknown) => u,
+}))
+
+vi.mock("@/store/authStore", () => ({
+  useAuthStore: () => ({
+    setAuth: vi.fn(),
+  }),
+}))
+
+vi.mock("@/components/auth/BindContactModal", () => ({
+  default: ({ open }: { open: boolean }) => (
+    <div data-testid="bind-contact-modal" style={{ display: open ? "block" : "none" }}>
+      BindContactModal
+    </div>
+  ),
+}))
+
+vi.mock("antd", async () => {
+  const actual = await vi.importActual("antd")
+  return {
+    ...actual,
+    message: {
+      success: vi.fn(),
+      error: vi.fn(),
+    },
+  }
+})
+
+describe("WechatCallback Page", () => {
+  beforeEach(() => {
+    // mock localStorage，设置wechat_state匹配，让校验通过
+    const store: Record<string, string> = {
+      wechat_state: "test_state",
+    }
+    vi.spyOn(Storage.prototype, "getItem").mockImplementation((key) => store[key] || null)
+    vi.spyOn(Storage.prototype, "setItem").mockImplementation((key, val) => {
+      store[key] = val
+    })
+    vi.spyOn(Storage.prototype, "removeItem").mockImplementation((key) => {
+      delete store[key]
+    })
+  })
+
+  it("should render without crashing", () => {
+    const { container } = render(
+      <MemoryRouter>
+        <WechatCallback />
+      </MemoryRouter>,
+    )
+    expect(container).toBeTruthy()
+  })
+
+  it("should show loading state while processing", () => {
+    render(
+      <MemoryRouter>
+        <WechatCallback />
+      </MemoryRouter>,
+    )
+    // wechatCallback 返回 pending promise，所以应该显示 loading
+    expect(screen.getByText("正在登录...")).toBeTruthy()
+  })
+})