fix: harden auth flows and align api contracts

2026-05-30 21:29:24 +08:00
parent 7ad65a0138
commit a332917142
50 changed files with 23594 additions and 723 deletions
--- a/internal/api/router/router.go
+++ b/internal/api/router/router.go
@@ -381,15 +381,19 @@ func (r *Router) Setup() *gin.Engine {
 				}
 			}

-			// SSO 单点登录接口（需要认证）
+			// SSO 单点登录接口
 			if r.ssoHandler != nil {
-				sso := protected.Group("/sso")
+				ssoProtected := protected.Group("/sso")
 				{
-					sso.GET("/authorize", r.ssoHandler.Authorize)
-					sso.POST("/token", r.ssoHandler.Token)
-					sso.POST("/introspect", r.ssoHandler.Introspect)
-					sso.POST("/revoke", r.ssoHandler.Revoke)
-					sso.GET("/userinfo", r.ssoHandler.UserInfo)
+					ssoProtected.GET("/authorize", r.ssoHandler.Authorize)
+				}
+
+				ssoPublic := v1.Group("/sso")
+				{
+					ssoPublic.POST("/token", r.ssoHandler.Token)
+					ssoPublic.POST("/introspect", r.ssoHandler.Introspect)
+					ssoPublic.POST("/revoke", r.ssoHandler.Revoke)
+					ssoPublic.GET("/userinfo", r.ssoHandler.UserInfo)
 				}
 			}
 		}