16 Commits

Include renames

Author	SHA1	Message	Date
figmar	f8c605b858	fix(gateway): 空 email 按用户名合成 casdoor.local 占位（email 列 NOT NULL UNIQUE）	2026-09-01 19:24:21 +08:00
figmar	13262aa4b1	fix(gateway): casdoor provisioning — 空 email 落 NULL 避免唯一键冲突；race 分支查重为空时显式报错	2026-09-01 19:22:00 +08:00
figmar	4e2ec55167	M5: 方法更新移植 —— 移除 accountOnly/定时同步，本地登录与 Casdoor SSO 并存，登录时自动建号 ... - 网关: CasdoorProperties 移除 accountOnly/sync* 配置块; SsoConfigController 移除 /sync 管理端点; UserController 移除本地登录/注册 403 - 删除 CasdoorAccountSyncService/CasdoorAdminClient/CasdoorUserDto (定时全量同步方案废弃, 由 CasdoorUserService.upsertFromCasdoor 登录时自动建号替代) - 保留既有修复: JJWT 0.12 适配(IdTokenVerifier/validateToken), updateById 修主键, RoleResolver owner/name 组名处理, WebFlux 兼容 - 前端: LoginDialog 移除 accountOnly 条件(本地登录+SSO 按钮恒显), Header 恢复注册入口恒显	2026-09-01 18:04:28 +08:00
figmar	8e5121ed0d	M3 fix: /sync 端点改 Mono 返回(WebFlux 禁 block)	2026-08-31 14:11:43 +08:00
figmar	ab1255a1eb	M3: Casdoor 账号账权全量接管 ... - accountOnly 时本地登录/注册 403,前端隐藏入口 - validateToken 增加用户存在+启用校验,禁用账号存量 JWT 立即失效 - 新增 CasdoorAdminClient(password grant 管理令牌)+ 全量账号同步服务(5 分钟定时+手动端点) - /sso/casdoor/config 暴露 accountOnly; POST /sso/casdoor/sync 手动同步(admin)	2026-08-31 13:57:58 +08:00
apescale	76e537cf34	fix(sso): updateById for existing users (IRepository.save is insert-only)	2026-08-31 12:08:13 +08:00
apescale	09b04a77fb	fix(sso): decode JWT header manually to extract kid ... jjwt 0.12 的无密钥 parse() 对已签名 JWT 抛 UnsupportedJwtException， 改为直接 base64url 解码 header 段取 kid。	2026-08-31 11:51:12 +08:00
apescale	9b2ce37ceb	feat(sso): strip owner prefix in roleKey; expose /sso/casdoor/config; casdoor env passthrough ... - RoleResolver.roleKey 取组名最后一段再匹配前缀，兼容 Casdoor user.groups 的 owner/name 全 ID - 前端 nginx 增加精确 location /sso/casdoor/config 转发网关 - docker-compose 网关服务透传 DEEPDATA_CASDOOR_* 环境变量（Spring relaxed binding）	2026-08-31 11:37:23 +08:00
figmar	7fcef906de	fix(gateway): Spring 6.2 + Base64 API migrations (ResponseCookie, statusCode, encodeToString, orElseThrow, effectively-final) ... - CasdoorOauthController: stateCookie -> ResponseCookie (HttpCookie.builder removed in 6.2), B64URL encoder/decoder split, encodeBytes -> encodeToString - CasdoorClient: resp.status() -> resp.statusCode() - CasdoorIdTokenVerifier: Optional.orElseThrow in map (type witness), no ternary+Mono.error - CasdoorUserService: throw instead of Mono.error inside fromCallable (type inference) - AuthFilter: effectively-final local for lambda capture	2026-08-31 04:15:58 +08:00
figmar	9b8f96c877	fix(gateway): postToken param type BodyInserter<?, ? super ClientHttpRequest> (matches body() signature)	2026-08-31 03:28:22 +08:00
figmar	b1caabdd18	fix(gateway): use BodyInserter supertype — Spring 6.2 renamed FormDataSpec to FormInserter	2026-08-31 03:25:53 +08:00
figmar	6cae8d4988	fix(gateway): kid extraction via Header map cast (0.12 has no typed get)	2026-08-31 03:10:35 +08:00
figmar	193aad5836	fix(security-common): Claims setters removed in jjwt 0.12; rebuild claims via JwtBuilder	2026-08-31 03:06:11 +08:00
figmar	c19a5eea08	fix(gateway): migrate jjwt to 0.12.6 and fix removed Spring WebClient FormDataSpec ... - CasdoorIdTokenVerifier: RSAKey does not exist in any jjwt release; build RSAPublicKey from JWKS n/e via RSAPublicKeySpec, use 0.12 parser API - JwtUtils / UserService: parserBuilder/parseClaimsJws -> parser()/parseSignedClaims - CasdoorClient: WebClient.RequestBodySpec.FormDataSpec removed in Spring 6.2, use BodyInserters.FormDataSpec	2026-08-31 02:52:09 +08:00
figmar	b94dae79fe	deepdata: fix main application class filename (rebrand residue broke build)	2026-08-31 02:22:01 +08:00
figmar	bd3db30be9	deepdata: core product code (backend, frontend, runtime, deepflow module)	2026-08-30 19:23:38 +08:00