f1997d3194
- 新增 OIDC 认证配置项到 .env.template 文件 - 实现 OIDC 认证路由和处理逻辑，包括登录、回调和配置获取接口 - 创建 OIDC 配置模型和服务工具类，支持从环境变量加载配置 - 在前端登录页面添加 OIDC 登录选项，支持动态配置显示 - 添加 OIDC 认证相关配置文档说明 - 支持自动创建 OIDC 用户和部门管理功能
127 lines
3.9 KiB
Plaintext
127 lines
3.9 KiB
Plaintext
MODEL_DIR=./models
|
||
SAVE_DIR=./saves
|
||
|
||
# region model_provider
|
||
SILICONFLOW_API_KEY= # 推荐使用硅基流动免费服务 https://cloud.siliconflow.cn/i/Eo5yTHGJ
|
||
TAVILY_API_KEY= # 获取搜索服务的 api key 请访问 https://app.tavily.com/
|
||
|
||
# # 其余可选配置
|
||
# OPENAI_API_KEY=
|
||
# OPENAI_API_BASE=
|
||
# ZHIPUAI_API_KEY=
|
||
# DASHSCOPE_API_KEY=
|
||
# DEEPSEEK_API_KEY=
|
||
# ARK_API_KEY=
|
||
# MINIMAX_API_KEY= # MiniMax 大模型 https://platform.minimaxi.com/
|
||
# TOGETHER_API_KEY=
|
||
# # endregion model_provider
|
||
|
||
# # region neo4j
|
||
# NEO4J_URI=
|
||
# NEO4J_USERNAME=
|
||
# NEO4J_PASSWORD=
|
||
# # endregion neo4j
|
||
|
||
# # Servies
|
||
# YUXI_SUPER_ADMIN_NAME=
|
||
# YUXI_SUPER_ADMIN_PASSWORD=
|
||
|
||
# # URL Whitelist (comma-separated domains/IPs, empty to disable URL parsing)
|
||
# YUXI_URL_WHITELIST=github.com,docs.example.com,gitlab.example.com,127.0.0.1
|
||
|
||
# # MinerU
|
||
# MINERU_API_KEY=
|
||
|
||
# LightRag llm 并发限制
|
||
# MAX_ASYNC=5
|
||
# EMBEDDING_FUNC_MAX_ASYNC=8
|
||
|
||
# Sandbox (deerFlow-style provisioner)
|
||
# SANDBOX_PROVIDER=provisioner
|
||
# SANDBOX_PROVISIONER_URL=http://sandbox-provisioner:8002
|
||
# SANDBOX_VIRTUAL_PATH_PREFIX=/home/gem/user-data
|
||
# SANDBOX_EXEC_TIMEOUT_SECONDS=180
|
||
# SANDBOX_MAX_OUTPUT_BYTES=262144
|
||
# SANDBOX_KEEPALIVE_INTERVAL_SECONDS=30
|
||
# SANDBOX_IDLE_TIMEOUT_SECONDS=120
|
||
# SANDBOX_IDLE_CHECK_INTERVAL_SECONDS=10
|
||
# # sandbox-provisioner backend: memory | docker | kubernetes
|
||
# # `local` 仍兼容，但只是 `docker` 的历史别名，不再推荐继续配置
|
||
# SANDBOX_PROVISIONER_BACKEND=docker
|
||
|
||
# sandbox-provisioner 通用配置
|
||
# SANDBOX_IMAGE=enterprise-public-cn-beijing.cr.volces.com/vefaas-public/all-in-one-sandbox:latest
|
||
# SANDBOX_CONTAINER_PORT=8080
|
||
# SANDBOX_HEALTH_TIMEOUT_SECONDS=300
|
||
# MEMORY_SANDBOX_URL_TEMPLATE=http://agent-sandbox:8000
|
||
# SANDBOX_HTTP_PROXY=http://host.docker.internal:7897
|
||
# SANDBOX_HTTPS_PROXY=http://host.docker.internal:7897
|
||
|
||
# Docker backend 专用 (used when SANDBOX_PROVISIONER_BACKEND=docker/local)
|
||
# SANDBOX_DOCKER_NETWORK=yuxi-know_app-network
|
||
# SANDBOX_DOCKER_THREADS_HOST_PATH=
|
||
# SANDBOX_DOCKER_SANDBOX_PREFIX=yuxi-sandbox
|
||
# SANDBOX_DOCKER_SANDBOX_HOST=host.docker.internal
|
||
|
||
# Kubernetes backend 专用 (used when SANDBOX_PROVISIONER_BACKEND=kubernetes)
|
||
# SANDBOX_K8S_NAMESPACE=yuxi-know
|
||
# SANDBOX_NODE_HOST=host.docker.internal
|
||
# KUBECONFIG_PATH=/root/.kube/config
|
||
# THREAD_PVC=yuxi-thread
|
||
# SKILLS_PVC=yuxi-skills # 当前代码会读取，但 Pod 挂载实际仍只使用 THREAD_PVC
|
||
|
||
# =============================================================================
|
||
# OIDC 认证配置
|
||
# =============================================================================
|
||
# 是否启用 OIDC 认证 (true/false)
|
||
# OIDC_ENABLED=false
|
||
|
||
# 认证源名称（显示在登录按钮上的文字，建议简短且具有辨识度, 默认: OIDC登录）
|
||
# OIDC_PROVIDER_NAME="OIDC登录"
|
||
|
||
# OIDC Provider 的 Issuer URL (例如: https://auth.example.com)
|
||
# OIDC_ISSUER_URL=
|
||
|
||
# OIDC Client ID
|
||
# OIDC_CLIENT_ID=
|
||
|
||
# OIDC Client Secret
|
||
# OIDC_CLIENT_SECRET=
|
||
|
||
# OIDC 回调 URL (可选，默认自动构建为 /api/auth/oidc/callback, 不建议自定义)
|
||
# 需要确保此 URL 在 OIDC Provider 中已注册
|
||
# OIDC_REDIRECT_URI=
|
||
|
||
# 授权端点 (可选，自动从 discovery 获取)
|
||
# OIDC_AUTHORIZATION_ENDPOINT=
|
||
|
||
# Token 端点 (可选，自动从 discovery 获取)
|
||
# OIDC_TOKEN_ENDPOINT=
|
||
|
||
# UserInfo 端点 (可选，自动从 discovery 获取)
|
||
# OIDC_USERINFO_ENDPOINT=
|
||
|
||
# 登出端点 (可选，自动从 discovery 获取)
|
||
# OIDC_END_SESSION_ENDPOINT=
|
||
|
||
# 请求的 scope (默认: openid profile email)
|
||
# OIDC_SCOPES=openid profile email
|
||
|
||
# 是否自动创建用户 (true/false，默认: true)
|
||
# OIDC_AUTO_CREATE_USER=true
|
||
|
||
# OIDC 用户的默认角色 (user/admin，默认: user)
|
||
# OIDC_DEFAULT_ROLE=user
|
||
|
||
# OIDC 用户的默认部门名称 (默认: OIDC用户)
|
||
# OIDC_DEFAULT_DEPARTMENT=OIDC用户
|
||
|
||
# 用户名映射字段 (默认: preferred_username)
|
||
# OIDC_USERNAME_CLAIM=preferred_username
|
||
|
||
# 邮箱映射字段 (默认: email)
|
||
# OIDC_EMAIL_CLAIM=email
|
||
|
||
# 姓名映射字段 (默认: name)
|
||
# OIDC_NAME_CLAIM=name
|