Skip to content

feat: 新增 OAuth 2.0 / OIDC 统一认证中心 - #129

Merged
insistence merged 13 commits into
masterfrom
feat-unified-authentication‌
Oct 1, 2026

Hidden character warning

The head ref may contain hidden characters: "feat-unified-authentication\u200c"
Merged

insistence merged 13 commits into
masterfrom
feat-unified-authentication‌

Conversation

@insistence

@insistence insistence commented Oct 1, 2026 •

Copy link
Copy Markdown
Owner

新增统一认证中心,为业务应用提供统一登录、授权、令牌管理和单点退出能力,并与现有后台登录体系保持隔离。
主要改动:

  • 新增 module_identity,支持授权码模式与 PKCE S256、刷新令牌、客户端凭据模式,以及 Discovery、JWKS、UserInfo、令牌撤销和内省接口。
  • 实现 SSO 会话、授权确认、密码修改及退出流程,支持应用发起退出和 Back-channel Logout。
  • 新增客户端、资源、Scope、授权记录、访问策略、会话、签名密钥和认证审计管理页面。
  • 完善回调地址校验、刷新令牌轮换与重放检测、令牌用途隔离、客户端密钥轮换和安全事件联动撤销。
  • 统一账户认证逻辑和客户端 IP 获取方式,整理公共工具、类型注解及重复封装。
  • 补充 MySQL/PostgreSQL 初始化结构、菜单权限、环境配置、密钥初始化命令和接入文档。
  • 新增相关后端及前端测试,引入 Prettier 并统一前端代码格式。

Closes #95

@insistence
insistence merged commit a89aec5 into master Oct 1, 2026
15 checks passed
@insistence
insistence deleted the feat-unified-authentication‌ branch October 1, 2026 14:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

能否提供外部用户登录接口

1 participant