M3 fix: /sync 端点改 Mono 返回(WebFlux 禁 block)

backend/api-gateway/src/main/java/com/deepdata/gateway/interfaces/rest/CasdoorSsoConfigController.java

@@ -14,6 +14,7 @@ import org.springframework.web.bind.annotation.PostMapping;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
 import org.springframework.web.server.ServerWebExchange;
+import reactor.core.publisher.Mono;
 
 import java.util.LinkedHashMap;
 import java.util.Map;
@@ -57,30 +58,28 @@ public class CasdoorSsoConfigController {
     }
 
     /**
-     * 手动全量同步（admin only）。
+     * 手动全量同步（admin only）。WebFlux 事件循环线程不可 block，返回 Mono。
      */
     @PostMapping("/sync")
-    public ResponseEntity<Response<Map<String, Object>>> sync(ServerWebExchange exchange) {
+    public Mono<ResponseEntity<Response<Map<String, Object>>>> sync(ServerWebExchange exchange) {
         if (!props.isEnabled() || !props.isAccountOnly()) {
-            return ResponseEntity.status(HttpStatus.FORBIDDEN)
-                    .body(new Response<>("casdoor.disabled", "Casdoor 账号同步未启用", null));
+            return Mono.just(ResponseEntity.status(HttpStatus.FORBIDDEN)
+                    .body(new Response<>("casdoor.disabled", "Casdoor 账号同步未启用", null)));
         }
         String username = currentUsername(exchange);
         if (username == null || !isAdmin(username)) {
             log.warn("casdoor sync rejected: caller={}", username);
-            return ResponseEntity.status(HttpStatus.FORBIDDEN)
-                    .body(new Response<>("casdoor.forbidden", "仅管理员可触发账号同步", null));
+            return Mono.just(ResponseEntity.status(HttpStatus.FORBIDDEN)
+                    .body(new Response<>("casdoor.forbidden", "仅管理员可触发账号同步", null)));
         }
         return syncService.syncFull()
                 .map(summary -> ResponseEntity.ok(Response.ok(summary)))
                 .onErrorResume(e -> {
                     log.error("casdoor manual sync failed: {}", e.getMessage());
-                    return reactor.core.publisher.Mono.just(
-                            ResponseEntity.status(HttpStatus.BAD_GATEWAY)
-                                    .body(new Response<>("casdoor.sync_failed",
-                                            "同步失败: " + e.getMessage(), null)));
-                })
-                .block();
+                    return Mono.just(ResponseEntity.status(HttpStatus.BAD_GATEWAY)
+                            .body(new Response<>("casdoor.sync_failed",
+                                    "同步失败: " + e.getMessage(), null)));
+                });
     }
 
     private String currentUsername(ServerWebExchange exchange) {