01705aa66b
- 实现OIDC用户自动创建和部门管理逻辑，支持并发场景下的用户去重处理 - 重构OIDC回调流程，采用一次性code机制提升安全性，避免敏感信息通过URL传递 - 增加对已注销OIDC用户的恢复支持，兼容历史后缀用户ID格式 - 优化用户软删除逻辑，使用user_id和id组合生成哈希避免重名冲突
82 lines
2.0 KiB
JavaScript
82 lines
2.0 KiB
JavaScript
/**
|
|
* 认证相关 API
|
|
*/
|
|
|
|
async function parseErrorDetail(response, fallbackMessage) {
|
|
const contentType = response.headers.get('content-type') || ''
|
|
|
|
if (contentType.includes('application/json')) {
|
|
const error = await response.json()
|
|
return error?.detail || fallbackMessage
|
|
}
|
|
|
|
const text = (await response.text()).trim()
|
|
return text || fallbackMessage
|
|
}
|
|
|
|
/**
|
|
* 获取 OIDC 配置
|
|
* @returns {Promise<{enabled: boolean, provider_name?: string}>}
|
|
*/
|
|
async function getOIDCConfig() {
|
|
const response = await fetch('/api/auth/oidc/config')
|
|
if (!response.ok) {
|
|
throw new Error('获取 OIDC 配置失败')
|
|
}
|
|
return response.json()
|
|
}
|
|
|
|
/**
|
|
* 获取 OIDC 登录 URL
|
|
* @param {string} redirectPath - 登录后的重定向路径
|
|
* @returns {Promise<{login_url: string}>}
|
|
*/
|
|
async function getOIDCLoginUrl(redirectPath = '/') {
|
|
const params = new URLSearchParams({ redirect_path: redirectPath })
|
|
const response = await fetch(`/api/auth/oidc/login-url?${params}`)
|
|
if (!response.ok) {
|
|
const detail = await parseErrorDetail(response, '获取 OIDC 登录地址失败')
|
|
throw new Error(detail)
|
|
}
|
|
return response.json()
|
|
}
|
|
|
|
/**
|
|
* 使用一次性 code 交换 OIDC 登录结果
|
|
* @param {string} code - 一次性登录 code
|
|
* @returns {Promise<{
|
|
* access_token: string,
|
|
* token_type: string,
|
|
* user_id: number,
|
|
* username: string,
|
|
* user_id_login: string,
|
|
* phone_number: string | null,
|
|
* avatar: string | null,
|
|
* role: string,
|
|
* department_id: number | null,
|
|
* department_name: string | null
|
|
* }>}
|
|
*/
|
|
async function exchangeOIDCCode(code) {
|
|
const response = await fetch('/api/auth/oidc/exchange-code', {
|
|
method: 'POST',
|
|
headers: {
|
|
'Content-Type': 'application/json'
|
|
},
|
|
body: JSON.stringify({ code })
|
|
})
|
|
|
|
if (!response.ok) {
|
|
const detail = await parseErrorDetail(response, 'OIDC 登录失败')
|
|
throw new Error(detail)
|
|
}
|
|
|
|
return response.json()
|
|
}
|
|
|
|
export const authApi = {
|
|
getOIDCConfig,
|
|
getOIDCLoginUrl,
|
|
exchangeOIDCCode,
|
|
}
|