Merge pull request #380 from APIParkLab/feature/1.9-OAuth

fix: Fix department selection issue

README.md

@@ -156,6 +156,10 @@ curl -sSO  https://download.apipark.com/install/quick-start.sh ;  bash quick-sta
 
 <br>
 
+<br>
+
+
+
 # 🚀 Use Cases
 ## Simplify AI Integration Costs
   - Connect to 100+ major models from all mainstream AI vendors, with standardized API calls requiring no additional adaptation work.
@@ -199,11 +203,20 @@ To achieve this goal, we plan to add new features to APIPark, including:
 # 📕 Documentation
 Visit [APIPark Documentation](https://docs.apipark.com/docs/deploy) for detailed installation guides, API references, and usage instructions.
 
+
+# 🧑‍🤝‍🧑Friendly Links
+<a href="https://xroute.ai/">
+  <img width="1248" height="158" alt="新建 PPTX 演示文稿 (2)_03" src="https://github.com/user-attachments/assets/0ebd694c-410a-4e3f-a793-90f1140d15df" />
+
+</a>
+<br>
+
 <br>
 
 # 🧾 License
 APIPark uses the Apache 2.0 License. For more details, please refer to the LICENSE file.
 
+
 <br>
 
 # 💌 Contact Us
@@ -215,3 +228,7 @@ For enterprise-level features and professional technical support, contact our pr
 <br>
 
 🙏 A big thanks to everyone who helped shape APIPark. We are thrilled to hear the community’s thoughts! Let’s make the world of APIs and AI stronger and more fun together. 🎉
+
+
+
+

controller/mcp/iml.go

@@ -6,6 +6,8 @@ import (
 	"strings"
 	"sync"
 
+	"github.com/APIParkLab/APIPark/module/service"
+
 	application_authorization "github.com/APIParkLab/APIPark/module/application-authorization"
 
 	mcp_server "github.com/APIParkLab/APIPark/mcp-server"
@@ -13,7 +15,6 @@ import (
 	"github.com/APIParkLab/APIPark/module/system"
 	"github.com/eolinker/go-common/utils"
 	"github.com/gin-gonic/gin"
-	mcp2 "github.com/mark3labs/mcp-go/mcp"
 	"github.com/mark3labs/mcp-go/server"
 )
 
@@ -22,12 +23,80 @@ var _ IMcpController = (*imlMcpController)(nil)
 type imlMcpController struct {
 	settingModule       system.ISettingModule                          `autowired:""`
 	authorizationModule application_authorization.IAuthorizationModule `autowired:""`
+	appModule           service.IAppModule                             `autowired:""`
 	mcpModule           mcp.IMcpModule                                 `autowired:""`
 	sessionKeys         sync.Map
 	server              map[string]http.Handler
 	openServer          http.Handler
 }
 
+func (i *imlMcpController) AppMCPHandle(ctx *gin.Context) {
+	appId := ctx.Param("app")
+	if appId == "" {
+		ctx.AbortWithStatusJSON(403, gin.H{"code": -1, "msg": "invalid app id", "success": "fail"})
+		return
+	}
+	cfg := i.settingModule.Get(ctx)
+	req := ctx.Request.WithContext(utils.SetGatewayInvoke(ctx.Request.Context(), cfg.InvokeAddress))
+	req = req.WithContext(utils.SetLabel(req.Context(), "app", appId))
+	paths := strings.Split(req.URL.Path, "/")
+	req.URL.Path = fmt.Sprintf("/api/v1/%s/%s", mcp_server.GlobalBasePath, paths[len(paths)-1])
+	locale := utils.I18n(ctx)
+	if v, ok := i.server[locale]; ok {
+		v.ServeHTTP(ctx.Writer, req)
+		return
+	}
+
+	i.server[languageEnUs].ServeHTTP(ctx.Writer, req)
+}
+
+func (i *imlMcpController) AppHandleSSE(ctx *gin.Context) {
+	apikey := ctx.Request.URL.Query().Get("apikey")
+	appId := ctx.Param("app")
+	if appId == "" {
+		ctx.AbortWithStatusJSON(403, gin.H{"code": -1, "msg": "invalid app id", "success": "fail"})
+		return
+	}
+	ok, err := i.authorizationModule.CheckAPIKeyAuthorizationByApp(ctx, appId, apikey)
+	if err != nil {
+		ctx.AbortWithStatusJSON(403, gin.H{"code": -1, "msg": err.Error(), "success": "fail"})
+		return
+	}
+	if !ok {
+		ctx.AbortWithStatusJSON(403, gin.H{"code": -1, "msg": "invalid apikey", "success": "fail"})
+		return
+	}
+
+	ctx.Request.URL.Path = fmt.Sprintf("/openapi/v1/%s/sse", mcp_server.GlobalBasePath)
+	i.handleSSE(ctx, i.openServer, SessionInfo{
+		Apikey: apikey,
+		App:    appId,
+	})
+}
+
+func (i *imlMcpController) AppHandleMessage(ctx *gin.Context) {
+	appId := ctx.Param("app")
+	if appId == "" {
+		ctx.AbortWithStatusJSON(403, gin.H{"code": -1, "msg": "invalid app id", "success": "fail"})
+		return
+	}
+	ctx.Request.URL.Path = fmt.Sprintf("/openapi/v1/%s/message", mcp_server.GlobalBasePath)
+	ctx.Request = ctx.Request.WithContext(utils.SetLabel(ctx.Request.Context(), "app", appId))
+	i.handleMessage(ctx, i.openServer)
+}
+
+func (i *imlMcpController) AppMCPConfig(ctx *gin.Context, appId string) (string, error) {
+	cfg := i.settingModule.Get(ctx)
+	if cfg.SitePrefix == "" {
+		return "", fmt.Errorf("site prefix is empty")
+	}
+	appInfo, err := i.appModule.GetApp(ctx, appId)
+	if err != nil {
+		return "", fmt.Errorf("get app info error: %v", err)
+	}
+	return fmt.Sprintf(mcpDefaultConfig, appInfo.Name, fmt.Sprintf("%s/openapi/v1/mcp/app/%s/sse?apikey={your_api_key}", strings.TrimSuffix(cfg.SitePrefix, "/"), appId)), nil
+}
+
 var mcpDefaultConfig = `{
   "mcpServers": {
     "%s": {
@@ -45,152 +114,18 @@ func (i *imlMcpController) GlobalMCPConfig(ctx *gin.Context) (string, error) {
 	return fmt.Sprintf(mcpDefaultConfig, "APIPark-MCP-Server", fmt.Sprintf("%s/openapi/v1/%s/sse?apikey={your_api_key}", strings.TrimSuffix(cfg.SitePrefix, "/"), mcp_server.GlobalBasePath)), nil
 }
 
-func (i *imlMcpController) generateZhCNMCPServer() *server.MCPServer {
-	s := server.NewMCPServer("APIPark MCP Server", "1.0.0", server.WithLogging())
-	s.AddTool(
-		mcp2.NewTool(
-			"service_list",
-			mcp2.WithDescription("此工具用于获取 APIPark 中已注册服务的列表。每个服务包含其唯一标识（service ID）、名称、描述及包含的 API 列表等关键信息。支持通过关键词进行模糊搜索，以便快速缩小查找范围。在获得某个服务的 ID 后，可以调用 openapi_document 工具来获取该服务的 OpenAPI 文档，以便后续调用其提供的 API 接口。"),
-			mcp2.WithString("keyword", mcp2.Description("关键词，用于模糊搜索服务")),
-		),
-		i.mcpModule.Services,
-	)
-	s.AddTool(
-		mcp2.NewTool(
-			"openapi_document",
-			mcp2.WithDescription("此工具用于获取指定服务的 OpenAPI 接口文档。返回内容支持 OpenAPI v3 与 v2 两种规范格式。通过传入服务 ID，可以查看该服务的所有 API 定义、参数结构、请求方式等详细信息，为后续构造请求做准备。"),
-			mcp2.WithString("service", mcp2.Description("服务的唯一标识 ID")),
-		),
-		i.mcpModule.APIs,
-	)
-	s.AddTool(
-		mcp2.NewTool(
-			"invoke_api",
-			mcp2.WithDescription("此工具用于直接调用指定的 API 接口。调用前需根据该接口的 OpenAPI 文档构造必要的请求参数，如请求路径、方法、查询参数、请求头、请求体等。调用过程中无需传递认证信息，例如请求头中的 Authorization 字段不需要提供。"),
-			mcp2.WithString("path", mcp2.Description("API 请求路径"), mcp2.Required()),
-			mcp2.WithString("method", mcp2.Description("API 请求方法，例如 GET、POST、PUT"), mcp2.Required()),
-			mcp2.WithString("content-type", mcp2.Description("请求的 Content-Type 类型。如果方法为 POST、PUT 或 PATCH，则必须指定该字段。")),
-			mcp2.WithObject("query", mcp2.Description("请求的查询参数，类型为 map[string]string")),
-			mcp2.WithObject("header", mcp2.Description("请求的头部参数，类型为 map[string]string")),
-			mcp2.WithString("body", mcp2.Description("请求体内容，通常为 JSON 字符串")),
-		),
-		i.mcpModule.Invoke,
-	)
-	return s
-}
-
-func (i *imlMcpController) generateZhTWMCPServer() *server.MCPServer {
-	s := server.NewMCPServer("APIPark MCP Server", "1.0.0", server.WithLogging())
-	s.AddTool(
-		mcp2.NewTool(
-			"service_list",
-			mcp2.WithDescription("此工具用於獲取 APIPark 中已註冊服務的清單。每個服務包含其唯一識別碼（service ID）、名稱、描述以及該服務所包含的 API 列表。支援關鍵字模糊搜尋，可快速縮小查詢範圍。獲取到服務 ID 後，可使用 openapi_document 工具來查詢該服務對應的 OpenAPI 文件，為後續 API 呼叫做準備。"),
-			mcp2.WithString("keyword", mcp2.Description("關鍵字，用於模糊搜尋服務")),
-		),
-		i.mcpModule.Services,
-	)
-	s.AddTool(
-		mcp2.NewTool(
-			"openapi_document",
-			mcp2.WithDescription("此工具用於查詢指定服務的 OpenAPI 文件。返回的格式支援 OpenAPI v3 與 v2 標準。透過輸入服務 ID，可查閱該服務所有 API 的定義、參數結構、請求方式等細節，有助於後續構造 API 呼叫請求。"),
-			mcp2.WithString("service", mcp2.Description("欲查詢的服務唯一識別碼")),
-		),
-		i.mcpModule.APIs,
-	)
-	s.AddTool(
-		mcp2.NewTool(
-			"invoke_api",
-			mcp2.WithDescription("此工具可直接發送 API 請求。在呼叫此工具之前，需根據該 API 的 OpenAPI 文件構造所需的請求參數，如請求路徑、方法、查詢參數、標頭、主體等。使用此工具時不需傳送任何認證資訊，例如 Authorization 標頭可省略。"),
-			mcp2.WithString("path", mcp2.Description("API 的請求路徑"), mcp2.Required()),
-			mcp2.WithString("method", mcp2.Description("API 的請求方法，例如 GET、POST、PUT"), mcp2.Required()),
-			mcp2.WithString("content-type", mcp2.Description("請求的 Content-Type。若方法為 POST、PUT 或 PATCH，則必須指定")),
-			mcp2.WithObject("query", mcp2.Description("請求的查詢參數，類型為 map[string]string")),
-			mcp2.WithObject("header", mcp2.Description("請求的標頭，類型為 map[string]string")),
-			mcp2.WithString("body", mcp2.Description("請求主體內容，通常為 JSON 字串")),
-		),
-		i.mcpModule.Invoke,
-	)
-	return s
-}
-
-func (i *imlMcpController) generateEnMCPServer() *server.MCPServer {
-	s := server.NewMCPServer("APIPark MCP Server", "1.0.0", server.WithLogging())
-	s.AddTool(
-		mcp2.NewTool(
-			"service_list",
-			mcp2.WithDescription("This tool can retrieve a list of registered services on APIPark, including key information such as service ID, name, description, and API list within the service. Support keyword search to quickly narrow down the search scope. After obtaining the service ID, you can use this ID to call the tool openapi_document to obtain the openapi document of the service for the corresponding service, preparing for subsequent API calls."),
-			mcp2.WithString("keyword", mcp2.Description("Keyword for fuzzy search")),
-		),
-		i.mcpModule.Services,
-	)
-	s.AddTool(
-		mcp2.NewTool(
-			"openapi_document",
-			mcp2.WithDescription("This tool returns the openAPI documentation for the corresponding service. The format supports the specifications of OpenAPI v3 and OpenAPI v2."),
-			mcp2.WithString("service", mcp2.Description("Service ID")),
-		),
-		i.mcpModule.APIs,
-	)
-	s.AddTool(
-		mcp2.NewTool(
-			"invoke_api",
-			mcp2.WithDescription("This tool can directly make API calls. Before calling this tool, it is necessary to construct relevant parameters based on the corresponding API's openAPI documentation, including query, header, body, method, path, and other parameters. By using this tool, no authentication related information needs to be transmitted, that is, no request header Authorization needs to be transmitted."),
-			mcp2.WithString("path", mcp2.Description("API path"), mcp2.Required()),
-			mcp2.WithString("method", mcp2.Description("API method"), mcp2.Required()),
-			mcp2.WithString("content-type", mcp2.Description("API Request Content-Type. If method is POST,PUT,PATCH, it must be set. If not set, it will be ignored.")),
-			mcp2.WithObject("query", mcp2.Description("API Request query,param type is map[string]string")),
-			mcp2.WithObject("header", mcp2.Description("API Request header,param type is map[string]string")),
-			mcp2.WithString("body", mcp2.Description("API Request body")),
-		),
-		i.mcpModule.Invoke,
-	)
-	return s
-}
-
-func (i *imlMcpController) generateJPMCPServer() *server.MCPServer {
-	s := server.NewMCPServer("APIPark MCP Server", "1.0.0", server.WithLogging())
-	s.AddTool(
-		mcp2.NewTool(
-			"service_list",
-			mcp2.WithDescription("このツールは、APIPark に登録されているサービスの一覧を取得するためのものです。各サービスには、サービスID、名称、説明、およびそのサービスに含まれるAPI一覧といった重要な情報が含まれます。キーワードによるあいまい検索が可能で、目的のサービスを素早く絞り込むことができます。取得したサービスIDを使用して openapi_document ツールを呼び出すことで、そのサービスの OpenAPI ドキュメントを取得でき、APIの利用準備が整います。"),
-			mcp2.WithString("keyword", mcp2.Description("キーワード。サービスをあいまい検索するための文字列")),
-		),
-		i.mcpModule.Services,
-	)
-	s.AddTool(
-		mcp2.NewTool(
-			"openapi_document",
-			mcp2.WithDescription("指定されたサービスの OpenAPI ドキュメントを取得するためのツールです。OpenAPI v3 および v2 のフォーマットに対応しています。このドキュメントを使用することで、APIのエンドポイント、リクエスト方法、パラメータなどの詳細を確認でき、API呼び出しの準備に役立ちます。"),
-			mcp2.WithString("service", mcp2.Description("対象のサービスID")),
-		),
-		i.mcpModule.APIs,
-	)
-	s.AddTool(
-		mcp2.NewTool(
-			"invoke_api",
-			mcp2.WithDescription("このツールは、指定された API を直接呼び出すためのものです。呼び出し前に、OpenAPI ドキュメントに基づいて必要なパラメータ（パス、メソッド、クエリ、ヘッダー、ボディなど）を構築する必要があります。呼び出し時に認証情報（例：Authorization ヘッダー）を送信する必要はありません。"),
-			mcp2.WithString("path", mcp2.Description("API のリクエストパス"), mcp2.Required()),
-			mcp2.WithString("method", mcp2.Description("HTTPメソッド（GET、POST、PUTなど）。"), mcp2.Required()),
-			mcp2.WithString("content-type", mcp2.Description("リクエストの Content-Type。メソッドが POST、PUT、PATCH の場合に必須。")),
-			mcp2.WithObject("query", mcp2.Description("リクエストのクエリパラメータ。型は map[string]string")),
-			mcp2.WithObject("header", mcp2.Description("リクエストヘッダー。型は map[string]string")),
-			mcp2.WithString("body", mcp2.Description("リクエストボディ。通常はJSON文字列")),
-		),
-		i.mcpModule.Invoke,
-	)
-	return s
-}
-
 func (i *imlMcpController) OnComplete() {
 	i.server = make(map[string]http.Handler)
-	enSer := i.generateEnMCPServer()
-	i.server["en-US"] = server.NewSSEServer(enSer, server.WithBasePath(fmt.Sprintf("/api/v1/%s", mcp_server.GlobalBasePath)))
-	i.server["zh-CN"] = server.NewSSEServer(i.generateZhCNMCPServer(), server.WithBasePath(fmt.Sprintf("/api/v1/%s", mcp_server.GlobalBasePath)))
-	i.server["zh-TW"] = server.NewSSEServer(i.generateZhTWMCPServer(), server.WithBasePath(fmt.Sprintf("/api/v1/%s", mcp_server.GlobalBasePath)))
-	i.server["ja-JP"] = server.NewSSEServer(i.generateJPMCPServer(), server.WithBasePath(fmt.Sprintf("/api/v1/%s", mcp_server.GlobalBasePath)))
-
-	i.openServer = server.NewSSEServer(enSer, server.WithBasePath(fmt.Sprintf("/openapi/v1/%s", strings.Trim(mcp_server.GlobalBasePath, "/"))))
-
+	for language, tools := range mcpToolsByLanguage {
+		s := server.NewMCPServer("APIPark MCP Server", "1.0.0", server.WithLogging())
+		s.AddTool(tools[ToolServiceList], i.mcpModule.Services)
+		s.AddTool(tools[ToolOpenAPIDocument], i.mcpModule.APIs)
+		s.AddTool(tools[ToolInvokeAPI], i.mcpModule.Invoke)
+		i.server[language] = server.NewSSEServer(s, server.WithStaticBasePath(fmt.Sprintf("/api/v1/%s", mcp_server.GlobalBasePath)))
+		if language == languageEnUs {
+			i.openServer = server.NewSSEServer(s, server.WithStaticBasePath(fmt.Sprintf("/openapi/v1/%s", strings.Trim(mcp_server.GlobalBasePath, "/"))))
+		}
+	}
 }
 
 func (i *imlMcpController) GlobalMCPHandle(ctx *gin.Context) {
@@ -201,15 +136,17 @@ func (i *imlMcpController) GlobalMCPHandle(ctx *gin.Context) {
 		v.ServeHTTP(ctx.Writer, req)
 		return
 	}
-	i.server["en-US"].ServeHTTP(ctx.Writer, req)
+	i.server[languageEnUs].ServeHTTP(ctx.Writer, req)
 }
 
 func (i *imlMcpController) GlobalHandleSSE(ctx *gin.Context) {
 	apikey := ctx.Request.URL.Query().Get("apikey")
-	i.handleSSE(ctx, i.openServer, apikey)
+	i.handleSSE(ctx, i.openServer, SessionInfo{
+		Apikey: apikey,
+	})
 }
 
-func (i *imlMcpController) handleSSE(ctx *gin.Context, server http.Handler, apikey string) {
+func (i *imlMcpController) handleSSE(ctx *gin.Context, server http.Handler, sIn SessionInfo) {
 
 	writer := &ResponseWriter{
 		Writer:    ctx.Writer,
@@ -223,7 +160,7 @@ func (i *imlMcpController) handleSSE(ctx *gin.Context, server http.Handler, apik
 		if !ok {
 			return
 		}
-		i.sessionKeys.Store(sessionId, apikey)
+		i.sessionKeys.Store(sessionId, sIn)
 	}()
 	server.ServeHTTP(writer, ctx.Request)
 	i.sessionKeys.Delete(sessionId)
@@ -247,7 +184,7 @@ func (i *imlMcpController) ServiceHandleSSE(ctx *gin.Context) {
 		ctx.AbortWithStatusJSON(403, gin.H{"code": -1, "msg": "invalid service id", "success": "fail"})
 		return
 	}
-	ok, err := i.authorizationModule.CheckAPIKeyAuthorization(ctx, serviceId, apikey)
+	ok, err := i.authorizationModule.CheckAPIKeyAuthorizationByService(ctx, serviceId, apikey)
 	if err != nil {
 		ctx.AbortWithStatusJSON(403, gin.H{"code": -1, "msg": err.Error(), "success": "fail"})
 		return
@@ -257,7 +194,9 @@ func (i *imlMcpController) ServiceHandleSSE(ctx *gin.Context) {
 		return
 	}
 
-	i.handleSSE(ctx, mcp_server.DefaultMCPServer(), apikey)
+	i.handleSSE(ctx, mcp_server.DefaultMCPServer(), SessionInfo{
+		Apikey: apikey,
+	})
 }
 
 func (i *imlMcpController) ServiceHandleMessage(ctx *gin.Context) {
@@ -271,7 +210,7 @@ func (i *imlMcpController) ServiceHandleStreamHTTP(ctx *gin.Context) {
 		ctx.AbortWithStatusJSON(403, gin.H{"code": -1, "msg": "invalid service id", "success": "fail"})
 		return
 	}
-	ok, err := i.authorizationModule.CheckAPIKeyAuthorization(ctx, serviceId, apikey)
+	ok, err := i.authorizationModule.CheckAPIKeyAuthorizationByService(ctx, serviceId, apikey)
 	if err != nil {
 		ctx.AbortWithStatusJSON(403, gin.H{"code": -1, "msg": err.Error(), "success": "fail"})
 		return
@@ -288,13 +227,20 @@ func (i *imlMcpController) ServiceHandleStreamHTTP(ctx *gin.Context) {
 
 func (i *imlMcpController) handleMessage(ctx *gin.Context, server http.Handler) {
 	sessionId := ctx.Request.URL.Query().Get("sessionId")
-	apikey, ok := i.sessionKeys.Load(sessionId)
+	params, ok := i.sessionKeys.Load(sessionId)
 	if !ok {
 		ctx.String(403, "sessionId not found")
 		return
 	}
+	ps, ok := params.(SessionInfo)
 	cfg := i.settingModule.Get(ctx)
 	req := ctx.Request.WithContext(utils.SetGatewayInvoke(ctx.Request.Context(), cfg.InvokeAddress))
-	req = req.WithContext(utils.SetLabel(req.Context(), "apikey", apikey.(string)))
+	req = req.WithContext(utils.SetLabel(req.Context(), "apikey", ps.Apikey))
+	req = req.WithContext(utils.SetLabel(req.Context(), "app", ps.App))
 	server.ServeHTTP(ctx.Writer, req)
 }
+
+type SessionInfo struct {
+	Apikey string
+	App    string
+}

controller/mcp/mcp.go

@@ -9,12 +9,20 @@ import (
 
 type IMcpController interface {
 	MCPHandle(ctx *gin.Context)
+
 	GlobalMCPHandle(ctx *gin.Context)
 	GlobalHandleSSE(ctx *gin.Context)
 	GlobalHandleMessage(ctx *gin.Context)
+	GlobalMCPConfig(ctx *gin.Context) (string, error)
+
+	AppMCPHandle(ctx *gin.Context)
+	AppHandleSSE(ctx *gin.Context)
+	AppHandleMessage(ctx *gin.Context)
+	AppMCPConfig(ctx *gin.Context, appId string) (string, error)
+
 	ServiceHandleSSE(ctx *gin.Context)
 	ServiceHandleMessage(ctx *gin.Context)
-	GlobalMCPConfig(ctx *gin.Context) (string, error)
+
 	ServiceHandleStreamHTTP(ctx *gin.Context)
 }
 

controller/mcp/tool.go

@@ -0,0 +1,104 @@
+package mcp
+
+import "github.com/mark3labs/mcp-go/mcp"
+
+const (
+	ToolServiceList     = "service_list"
+	ToolOpenAPIDocument = "openapi_document"
+	ToolInvokeAPI       = "invoke_api"
+
+	languageZhCN = "zh-CN"
+	languageZhTW = "zh-TW"
+	languageEnUs = "en-US"
+	languageJaJp = "ja-JP"
+)
+
+var mcpToolsByLanguage = map[string]map[string]mcp.Tool{
+	languageZhCN: toolsZhCN,
+	languageZhTW: toolsZhTW,
+	languageEnUs: toolsEnUs,
+	languageJaJp: toolsJaJp,
+}
+
+var toolsZhTW = map[string]mcp.Tool{
+	ToolServiceList: mcp.NewTool(
+		ToolServiceList,
+		mcp.WithDescription("此工具用於獲取 APIPark 中已註冊服務的列表。每個服務包含其唯一標識（service ID）、名稱、描述及包含的 API 列表等關鍵信息。支持通過關鍵詞進行模糊搜索，以便快速縮小查找範圍。在獲得某個服務的 ID 後，可以調用 openapi_document 工具來獲取該服務的 OpenAPI 文檔，以便後續調用其提供的 API 接口。"),
+		mcp.WithString("keyword", mcp.Description("關鍵詞，用於模糊搜索服務"))),
+	ToolOpenAPIDocument: mcp.NewTool(
+		ToolOpenAPIDocument,
+		mcp.WithDescription("此工具用於獲取 APIPark 中服務的 OpenAPI 文檔。"),
+		mcp.WithString("service_id", mcp.Description("服務 ID"))),
+	ToolInvokeAPI: mcp.NewTool(
+		ToolInvokeAPI,
+		mcp.WithDescription("此工具可直接發送 API 請求。在調用此工具之前，需要根據該 API 的 OpenAPI 文檔構造所需的請求參數，如請求路徑、方法、查詢參數、頭部信息、主體內容等。使用此工具時不需要傳遞任何認證信息，例如 Authorization 頭部可以省略。"),
+		mcp.WithString("path", mcp.Description("API 的請求路徑"), mcp.Required()),
+		mcp.WithString("method", mcp.Description("API 的請求方法，例如 GET、POST、PUT"), mcp.Required()),
+		mcp.WithString("content-type", mcp.Description("請求的 Content-Type。若方法為 POST、PUT 或 PATCH，則必須指定")),
+		mcp.WithObject("query", mcp.Description("請求的查詢參數，類型為 map[string]string")),
+		mcp.WithObject("header", mcp.Description("請求的頭部，類型為 map[string]string")),
+		mcp.WithString("body", mcp.Description("請求主體內容，通常為 JSON 字符串")),
+	),
+}
+
+var toolsZhCN = map[string]mcp.Tool{
+	ToolServiceList: mcp.NewTool(
+		ToolServiceList,
+		mcp.WithDescription("此工具用于获取 APIPark 中已注册服务的列表。每个服务包含其唯一标识（service ID）、名称、描述及包含的 API 列表等关键信息。支持通过关键词进行模糊搜索，以便快速缩小查找范围。在获得某个服务的 ID 后，可以调用 openapi_document 工具来获取该服务的 OpenAPI 文档，以便后续调用其提供的 API 接口。"),
+		mcp.WithString("keyword", mcp.Description("关键词，用于模糊搜索服务"))),
+	ToolOpenAPIDocument: mcp.NewTool(
+		ToolOpenAPIDocument, mcp.WithDescription("此工具用于查询指定服务的 OpenAPI 文档。返回的格式支持 OpenAPI v3 和 v2 标准。通过输入服务 ID，可以查看该服务所有 API 的定义、参数结构、请求方式等详细信息，为后续构造 API 调用请求做准备。"),
+		mcp.WithString("service", mcp.Description("欲查询的服务唯一标识")),
+	),
+	ToolInvokeAPI: mcp.NewTool(ToolInvokeAPI,
+		mcp.WithDescription("此工具可直接发送 API 请求。在调用此工具之前，需要根据该 API 的 OpenAPI 文档构造所需的请求参数，如请求路径、方法、查询参数、头部信息、主体内容等。使用此工具时不需要传递任何认证信息，例如 Authorization 头部可以省略。"),
+		mcp.WithString("path", mcp.Description("API 的请求路径"), mcp.Required()),
+		mcp.WithString("method", mcp.Description("API 的请求方法，例如 GET、POST、PUT"), mcp.Required()),
+		mcp.WithString("content-type", mcp.Description("请求的 Content-Type。若方法为 POST、PUT 或 PATCH，则必须指定")),
+		mcp.WithObject("query", mcp.Description("请求的查询参数，类型为 map[string]string")),
+		mcp.WithObject("header", mcp.Description("请求的头部，类型为 map[string]string")),
+		mcp.WithString("body", mcp.Description("请求主体内容，通常为 JSON 字符串")),
+	),
+}
+
+var toolsEnUs = map[string]mcp.Tool{
+	ToolServiceList: mcp.NewTool(
+		ToolServiceList,
+		mcp.WithDescription("This tool is used to retrieve a list of registered services in APIPark. Each service includes its unique identifier (service ID), name, description, and a list of APIs it contains. It supports fuzzy searching by keyword for quick narrowing down of results. After obtaining a service ID, you can use the openapi_document tool to get the OpenAPI documentation for that service, which is necessary for invoking its APIs."),
+		mcp.WithString("keyword", mcp.Description("Keyword for fuzzy search of services"))),
+	ToolOpenAPIDocument: mcp.NewTool(
+		ToolOpenAPIDocument,
+		mcp.WithDescription("This tool is used to query the OpenAPI documentation of a specified service. The returned format supports both OpenAPI v3 and v2 standards. By entering the service ID, you can view detailed information about all APIs of that service, including definitions, parameter structures, request methods, etc., which prepares you for subsequent API calls."),
+		mcp.WithString("service", mcp.Description("Unique identifier of the service to query"))),
+	ToolInvokeAPI: mcp.NewTool(
+		ToolInvokeAPI,
+		mcp.WithDescription("This tool can directly send API requests. Before using this tool, you need to construct the required request parameters based on the OpenAPI documentation of the API, such as request path, method, query parameters, header information, body content, etc. No authentication information like Authorization header is required when using this tool."),
+		mcp.WithString("path", mcp.Description("API request path"), mcp.Required()),
+		mcp.WithString("method", mcp.Description("API request method, e.g., GET, POST, PUT"), mcp.Required()),
+		mcp.WithString("content-type", mcp.Description("Content-Type of the request. Must be specified if method is POST, PUT, or PATCH")),
+		mcp.WithObject("query", mcp.Description("Query parameters of the request, type map[string]string")),
+		mcp.WithObject("header", mcp.Description("Header information of the request, type map[string]string")),
+		mcp.WithString("body", mcp.Description("Body content of the request, usually in JSON string")),
+	),
+}
+
+var toolsJaJp = map[string]mcp.Tool{
+	ToolServiceList: mcp.NewTool(
+		ToolServiceList,
+		mcp.WithDescription("このツールは、APIParkに登録されているサービスのリストを取得するために使用されます。各サービスには、ユニークな識別子（サービスID）、名前、説明、および含まれるAPIのリストが含まれています。キーワードによるあいまい検索をサポートしており、結果を迅速に絞り込むことができます。サービスIDを取得した後は、openapi_documentツールを使用してそのサービスのOpenAPIドキュメントを取得し、そのAPIを呼び出す準備をします。"),
+		mcp.WithString("keyword", mcp.Description("サービスをあいまい検索するためのキーワード"))),
+	ToolOpenAPIDocument: mcp.NewTool(
+		ToolOpenAPIDocument,
+		mcp.WithDescription("このツールは、指定されたサービスのOpenAPIドキュメントを照会するために使用されます。返される形式は、OpenAPI v3およびv2標準の両方をサポートしています。サービスIDを入力することで、そのサービスのすべてのAPIに関する詳細情報（定義、パラメータ構造、リクエスト方法など）を表示し、後続のAPI呼び出しの準備をします。"),
+		mcp.WithString("service", mcp.Description("照会するサービスのユニークな識別子"))),
+	ToolInvokeAPI: mcp.NewTool(
+		ToolInvokeAPI,
+		mcp.WithDescription("このツールは、APIリクエストを直接送信できます。このツールを使用する前に、APIのOpenAPIドキュメントに基づいて、必要なリクエストパラメータ（リクエストパス、メソッド、クエリパラメータ、ヘッダー情報、ボディコンテンツなど）を構築する必要があります。このツールを使用する際には、Authorizationヘッダーなどの認証情報は必要ありません。"),
+		mcp.WithString("path", mcp.Description("APIのリクエストパス"), mcp.Required()),
+		mcp.WithString("method", mcp.Description("APIのリクエストメソッド（例：GET、POST、PUT）"), mcp.Required()),
+		mcp.WithString("content-type", mcp.Description("リクエストのContent-Type。メソッドがPOST、PUT、またはPATCHの場合は必須です")),
+		mcp.WithObject("query", mcp.Description("リクエストのクエリパラメータ、タイプはmap[string]string")),
+		mcp.WithObject("header", mcp.Description("リクエストのヘッダー、タイプはmap[string]string")),
+		mcp.WithString("body", mcp.Description("リクエストのボディコンテンツ、通常はJSON文字列")),
+	),
+}

controller/system-apikey/apikey.go

@@ -16,7 +16,7 @@ type IAPIKeyController interface {
 	Search(ctx *gin.Context, keyword string) ([]*system_apikey_dto.Item, error)
 	SimpleList(ctx *gin.Context) ([]*system_apikey_dto.SimpleItem, error)
 	MyAPIKeys(ctx *gin.Context) ([]*system_apikey_dto.SimpleItem, error)
-	MyAPIKeysByService(ctx *gin.Context, serviceId string) ([]*system_apikey_dto.AuthorizationItem, error)
+	MyAPIKeysByService(ctx *gin.Context, serviceId string, appId string) ([]*system_apikey_dto.AuthorizationItem, error)
 }
 
 func init() {

controller/system-apikey/iml.go

@@ -12,8 +12,14 @@ type imlAPIKeyController struct {
 	apikeyModule system_apikey.IAPIKeyModule `autowired:""`
 }
 
-func (i *imlAPIKeyController) MyAPIKeysByService(ctx *gin.Context, serviceId string) ([]*system_apikey_dto.AuthorizationItem, error) {
-	return i.apikeyModule.MyAPIKeysByService(ctx, serviceId)
+func (i *imlAPIKeyController) MyAPIKeysByService(ctx *gin.Context, serviceId string, appId string) ([]*system_apikey_dto.AuthorizationItem, error) {
+	if serviceId != "" {
+		return i.apikeyModule.MyAPIKeysByService(ctx, serviceId)
+	}
+	if appId != "" {
+		return i.apikeyModule.MyAPIKeysByApp(ctx, appId)
+	}
+	return nil, nil
 }
 
 func (i *imlAPIKeyController) MyAPIKeys(ctx *gin.Context) ([]*system_apikey_dto.SimpleItem, error) {

frontend/package.json

@@ -8,7 +8,7 @@
   "description": "",
   "scripts": {
     "test": "jest",
-    "build": "set NODE_OPTIONS=--max-old-space-size=4096  && lerna run build --scope=core --stream  --verbose ",
+    "build": "set NODE_OPTIONS=--max-old-space-size=8192  && lerna run build --scope=core --stream  --verbose ",
     "serve": "lerna run preview --parallel",
     "serve:remotes": "lerna run serve --scope=remote --parallel",
     "dev": "lerna run dev --scope=core --stream",

frontend/packages/common/src/components/aoplatform/BasicLayout.tsx

@@ -137,7 +137,7 @@ function BasicLayout({ project = 'core' }: { project: string }) {
   const items: MenuProps['items'] = useMemo(
     () =>
       [
-        userInfo?.type !== 'guest' && {
+        !['guest', 'third-user'].includes(userInfo?.type as string) && {
           key: '2',
           label: (
             <Button

frontend/packages/common/src/const/permissions.ts

@@ -119,6 +119,11 @@ export const PERMISSION_DEFINITION = [
         anyOf: [{ backend: ['system.organization.role.manager_team_role'] }]
       }
     },
+    'system.organization.auth.view': {
+      granted: {
+        anyOf: [{ backend: ['system.settings.login.manager', 'system.settings.login.view'] }]
+      }
+    },
     'system.api_market.service_classification.view': {
       granted: {
         anyOf: [{ backend: ['system.settings.general.view'] }]
@@ -634,6 +639,15 @@ export const PERMISSION_DEFINITION = [
         ]
       }
     },
+    'team.consumer.mcp.view': {
+      granted: {
+        anyOf: [
+          {
+            backend: ['team.consumer.mcp.manager', 'team.consumer.mcp.view']
+          }
+        ]
+      }
+    },
     'team.application.authorization.add': {
       granted: {
         anyOf: [{ backend: ['system.workspace.application.manager_all', 'team.consumer.authorization.manager'] }]

frontend/packages/common/src/contexts/GlobalStateContext.tsx

@@ -207,8 +207,15 @@ const mockData = [
             name: '角色',
             key: 'role',
             path: '/role',
-            icon: 'ic:baseline-verified-user',
+            icon: 'ph:user-circle-gear-fill',
             access: 'system.organization.role.view'
+          },
+          {
+            name: '鉴权',
+            key: 'auth',
+            path: '/auth',
+            icon: 'ic:baseline-verified-user',
+            access: 'system.organization.auth.view'
           }
         ]
       },

frontend/packages/common/src/hooks/pluginLoader.ts

@@ -60,6 +60,16 @@ const mockData = {
         }
       ]
     },
+    {
+      driver: 'apipark.builtIn.component',
+      name: 'auth',
+      router: [
+        {
+          path: 'auth',
+          type: 'normal'
+        }
+      ]
+    },
     {
       driver: 'apipark.builtIn.component',
       name: 'cluster',

frontend/packages/common/src/locales/keyHashMap.json

@@ -461,6 +461,17 @@
   "待审核": "K35612f29",
   "已审核": "K47eaafde",
   "发布申请": "K56b4254f",
+  "鉴权": "Kb35e6a18",
+  "系统用户账号登录授权配置": "K679bd7e4",
+  "授权类型": "K9e7bb257",
+  "请选择授权类型": "Kc499fc1d",
+  "APP ID": "Kee9f8f26",
+  "请输入APP ID": "K9e4c19bb",
+  "APP ID 参数位于飞书开发人员控制台中的应用程序凭证和基础信息页面上": "K45c99f97",
+  "APP Secret": "K90f7c3b4",
+  "请输入APP Secret": "Kdc53d96f",
+  "APP Secret 参数位于飞书开发人员控制台中的应用程序凭证和基础信息页面上": "K56e77c4",
+  "启用授权": "K50693bd8",
   "API 调用地址": "Kea2f9279",
   "API base URL 一般设置为API 网关的外部网络访问地址，或者是API网关绑定的域名。": "K7fc496a1",
   "OpenAPI & MCP 调用地址": "Ka7ca8fde",
@@ -553,6 +564,7 @@
   "请输入密码": "K25c895d5",
   "密码": "K551b0348",
   "登录": "Kd2c1a316",
+  "飞书授权登录": "K682b11cb",
   "访客模式": "K192b3e38",
   "您可通过访客模式查看所有页面和功能，但是无法编辑数据。访客模式仅用于了解产品功能，您可以在正式产品中关闭该功能。": "K91aa4801",
   "Version (0)-(1)": "K480045ce",
@@ -564,6 +576,8 @@
   "AI 代理集成": "Ke6908f16",
   "请先订阅该服务": "K71ed51fa",
   "申请": "K4aa9ed2c",
+  "未配置 API Key": "Kf7b54a1",
+  "配置": "K2a1422d2",
   "选择 API Key": "K1bec8cbe",
   "新增 API Key": "Kb0e0aeda",
   "API 密钥可用于调用系统级 Open API 和 MCP。": "K9d81999c",

frontend/packages/common/src/locales/scan/en-US.json

@@ -972,5 +972,19 @@
   "K6c267c7b": "Avg Requests per Subscriber",
   "K133d4291": "Avg Traffic per Subscriber",
   "K37c5f1d0": "Token",
-  "Kb98264d4": "Avg Token per Subscriber"
+  "Kb98264d4": "Avg Token per Subscriber",
+  "Kb35e6a18": "Auth",
+  "K679bd7e4": "System User Account Login Authorization Settings",
+  "K9e7bb257": "Authorization Type",
+  "Kc499fc1d": "Please select an authorization type",
+  "Kee9f8f26": "APP ID",
+  "K9e4c19bb": "Please enter APP ID",
+  "K90f7c3b4": "APP Secret",
+  "Kdc53d96f": "Please enter APP Secret",
+  "K50693bd8": "Enable Authorization",
+  "K682b11cb": "Feishu Authorization Login",
+  "K45c99f97": "The APP ID parameter can be found on the App Credentials and Basic Information page in the Feishu Developer Console",
+  "K56e77c4": "The APP Secret parameter can be found on the App Credentials and Basic Information page in the Feishu Developer Console",
+  "Kf7b54a1": "API Key not configured",
+  "K2a1422d2": "Configure"
 }

frontend/packages/common/src/locales/scan/ja-JP.json

@@ -994,5 +994,19 @@
   "K6c267c7b": "消費者あたりの平均リクエスト数",
   "K133d4291": "消費者あたりの平均ネットワークトラフィック",
   "K37c5f1d0": "トークン消費量",
-  "Kb98264d4": "消費者あたりの平均トークン消費量"
+  "Kb98264d4": "消費者あたりの平均トークン消費量",
+  "Kb35e6a18": "認証",
+  "K679bd7e4": "システムユーザーアカウントログイン認可設定",
+  "K9e7bb257": "認可タイプ",
+  "Kc499fc1d": "認可タイプを選択してください",
+  "Kee9f8f26": "APP ID",
+  "K9e4c19bb": "APP ID を入力してください",
+  "K90f7c3b4": "APP Secret",
+  "Kdc53d96f": "APP Secret を入力してください",
+  "K50693bd8": "認可を有効化",
+  "K682b11cb": "Feishu 認証ログイン",
+  "K45c99f97": "APP ID パラメータは Feishu 開発者コンソールのアプリ認証情報と基本情報ページにあります",
+  "K56e77c4": "APP Secret パラメータは Feishu 開発者コンソールのアプリ認証情報と基本情報ページにあります",
+  "Kf7b54a1": "API Key が設定されていません",
+  "K2a1422d2": "設定"
 }

frontend/packages/common/src/locales/scan/zh-CN.json

@@ -923,5 +923,19 @@
   "K6c267c7b": "平均每消费者的请求次数",
   "K133d4291": "平均每消费者的网络流量",
   "K37c5f1d0": "Token 消耗",
-  "Kb98264d4": "平均每消费者的 Token 消耗"
+  "Kb98264d4": "平均每消费者的 Token 消耗",
+  "Kb35e6a18": "鉴权",
+  "K679bd7e4": "系统用户账号登录授权配置",
+  "K9e7bb257": "授权类型",
+  "Kc499fc1d": "请选择授权类型",
+  "Kee9f8f26": "APP ID",
+  "K9e4c19bb": "请输入APP ID",
+  "K90f7c3b4": "APP Secret",
+  "Kdc53d96f": "请输入APP Secret",
+  "K50693bd8": "启用授权",
+  "K682b11cb": "飞书授权登录",
+  "K45c99f97": "APP ID 参数位于飞书开发人员控制台中的应用程序凭证和基础信息页面上",
+  "K56e77c4": "APP Secret 参数位于飞书开发人员控制台中的应用程序凭证和基础信息页面上",
+  "Kf7b54a1": "未配置 API Key",
+  "K2a1422d2": "配置"
 }

frontend/packages/common/src/locales/scan/zh-TW.json

@@ -994,5 +994,19 @@
   "K6c267c7b": "平均每位使用者的請求次數",
   "K133d4291": "平均每位使用者的網路流量",
   "K37c5f1d0": "Token 消耗",
-  "Kb98264d4": "平均每位使用者的 Token 消耗"
+  "Kb98264d4": "平均每位使用者的 Token 消耗",
+  "Kb35e6a18": "鑑權",
+  "K679bd7e4": "系統用戶帳號登入授權配置",
+  "K9e7bb257": "授權類型",
+  "Kc499fc1d": "請選擇授權類型",
+  "Kee9f8f26": "APP ID",
+  "K9e4c19bb": "請輸入 APP ID",
+  "K90f7c3b4": "APP Secret",
+  "Kdc53d96f": "請輸入 APP Secret",
+  "K50693bd8": "啟用授權",
+  "K682b11cb": "飛書授權登入",
+  "K45c99f97": "APP ID 參數位於飛書開發人員控制台中的應用程式憑證與基礎資訊頁面",
+  "K56e77c4": "APP Secret 參數位於飛書開發人員控制台中的應用程式憑證與基礎資訊頁面",
+  "Kf7b54a1": "未配置 API Key",
+  "K2a1422d2": "配置"
 }

frontend/packages/core/src/const/const.tsx

@@ -618,6 +618,16 @@ export const routerMap: Map<string, RouterMapConfig> = new Map([
                     /* webpackChunkName: "[request]" */ '@market/pages/serviceHub/management/ManagementAppSetting.tsx'
                   )
               )
+            },
+            {
+              path: 'mcp',
+              key: 'consumerMcp',
+              lazy: lazy(
+                () =>
+                  import(
+                    /* webpackChunkName: "[request]" */ '@market/pages/serviceHub/management/mcpContent.tsx'
+                  )
+              )
             }
           ]
         },
@@ -693,6 +703,14 @@ export const routerMap: Map<string, RouterMapConfig> = new Map([
       ]
     }
   ],
+  [
+    'auth',
+    {
+      type: 'module',
+      lazy: lazy(() => import(/* webpackChunkName: "[request]" */ '@core/pages/auth/Auth.tsx')),
+      key: 'auth'
+    }
+  ],
   [
     'analytics',
     {

frontend/packages/core/src/const/member/type.ts

@@ -19,6 +19,7 @@ export type MemberTableListItem = {
     enable:boolean
     departmentId:string
     roles:EntityItem[]
+    from: string
 };
 
 export type AddToDepartmentProps = {
@@ -40,7 +41,7 @@ export type MemberDropdownModalFieldType = {
 
 export type MemberDropdownModalProps = {
     type:'addDep'|'addChild'|'addMember'|'editMember'|'rename'
-    entity?:(MemberTableListItem & {departmentIds:string[]}) | ({id?:string, departmentIds?:string[],name?:string})
+    entity?:(MemberTableListItem & {departmentIds:string[]}) | ({id?:string, departmentIds?:string[],name?:string,from?:string})
     selectedMemberGroupId?:string
 }
 

frontend/packages/core/src/pages/Login.tsx

@@ -1,221 +1,405 @@
-import {FC, useCallback, useEffect, useRef, useState} from "react";
-import {App, Button, Divider, Form, FormInstance, Input, Spin, Tooltip} from "antd";
-import {useGlobalContext} from "@common/contexts/GlobalStateContext.tsx";
-import {useFetch} from "@common/hooks/http.ts";
-import {BasicResponse, STATUS_CODE} from "@common/const/const.tsx";
-import {useNavigate} from "react-router-dom";
+import { FC, useCallback, useEffect, useRef, useState } from 'react'
+import { App, Button, Divider, Form, FormInstance, Input, Spin, Tooltip } from 'antd'
+import { useGlobalContext } from '@common/contexts/GlobalStateContext.tsx'
+import { useFetch } from '@common/hooks/http.ts'
+import { BasicResponse, STATUS_CODE } from '@common/const/const.tsx'
+import { useLocation, useNavigate } from 'react-router-dom'
 // import {useCrypto} from "../hooks/crypto.ts";
 import Logo from '@common/assets/layout-logo.png'
-import { $t } from "@common/locales";
-import { Icon } from "@iconify/react/dist/iconify.js";
-import LanguageSetting from "@common/components/aoplatform/LanguageSetting";
-import { LoadingOutlined } from "@ant-design/icons";
+import FeishuLogo from '@common/assets/feishu.png'
+import { $t } from '@common/locales'
+import { Icon } from '@iconify/react/dist/iconify.js'
+import LanguageSetting from '@common/components/aoplatform/LanguageSetting'
+import { LoadingOutlined } from '@ant-design/icons'
 
-const Login:FC = ()=> {
-     const {state, dispatch} = useGlobalContext()
-     const {fetchData} = useFetch()
-     const { message } = App.useApp()
-    const navigate = useNavigate();
-    const formRef = useRef<FormInstance>(null);
-    const [loading,setLoading] = useState<boolean>()
-    const [allowGuest, setAllowGuest] = useState<boolean>(false)
-    const [spinning,setSpinning] = useState<boolean>(false)
+const Login: FC = () => {
+  const { state, dispatch } = useGlobalContext()
+  const { fetchData } = useFetch()
+  const { message } = App.useApp()
+  const navigate = useNavigate()
+  const formRef = useRef<FormInstance>(null)
+  const [loading, setLoading] = useState<boolean>()
+  const [allowGuest, setAllowGuest] = useState<boolean>(false)
+  const [spinning, setSpinning] = useState<boolean>(false)
+  // 是否允许飞书登录
+  const [allowFeishuLogin, setAllowFeishuLogin] = useState<boolean>(false)
+  // 飞书登录app_id
+  const [feishuAppId, setFeishuAppId] = useState<string>()
+  // 获取 url 参数
+  const query = new URLSearchParams(useLocation().search)
+  // 是否是飞书登录
+  const [isFeishuLogin, setIsFeishuLogin] = useState<boolean>(false)
 
+  useEffect(() => {
+    if (isFeishuLogin) {
+      const callbackUrl = new URLSearchParams(window.location.search).get('callbackUrl')
+      if (callbackUrl && callbackUrl !== 'null') {
+        navigate(callbackUrl)
+      } else {
+        navigate(state.mainPage)
+      }
+      setIsFeishuLogin(false)
+    }
+  }, [isFeishuLogin])
+  /**
+   * 飞书登录
+   * @param feishuCode 飞书 code
+   */
+  const feishuLogin = async (feishuCode: string) => {
+    try {
+      setLoading(true)
+      const feishuCallbackUrl = localStorage.getItem('feishuCallbackUrl')
+      const { code, msg } = await fetchData<BasicResponse<null>>('account/login/feishu', {
+        method: 'POST',
+        eoBody: {
+          code: feishuCode,
+          redirect_uri: feishuCallbackUrl
+        }
+      })
 
-    const check = useCallback(()=>{
-        state.isAuthenticated &&setSpinning(true)
-        fetchData<BasicResponse<{channel:Array<{name:string}>, status:string}>>('account/login',{method:'GET'}).then(response=>{
-            const {code,data} = response
-            if(code === STATUS_CODE.SUCCESS && data.status !== 'anonymous'){
-                dispatch({type:'LOGIN'})
-                navigate(state.mainPage,{replace:true})
-            }else{
-                dispatch({type:'LOGOUT'})
-                setAllowGuest(data.channel.filter(x=>x.name === 'guest_access').length > 0)
-                setSpinning(false)
-            }
-        })
-    },[])
+      if (code === STATUS_CODE.SUCCESS) {
+        dispatch({ type: 'LOGIN' })
+        setIsFeishuLogin(true)
+      } else {
+        dispatch({ type: 'LOGOUT' })
+        setIsFeishuLogin(false)
+        message.error(msg)
+      }
+    } catch (err) {
+      console.warn(err)
+    } finally {
+      setLoading(false)
+    }
+  }
 
+  const check = useCallback(() => {
+    state.isAuthenticated && setSpinning(true)
+    fetchData<BasicResponse<{ channel: Array<{ name: string; config: { [key: string]: any } }>; status: string }>>(
+      'account/login',
+      { method: 'GET' }
+    ).then((response) => {
+      const { code, data } = response
+      if (code === STATUS_CODE.SUCCESS && data.status !== 'anonymous') {
+        dispatch({ type: 'LOGIN' })
+        navigate(state.mainPage, { replace: true })
+      } else {
+        dispatch({ type: 'LOGOUT' })
+        setAllowGuest(data.channel.filter((x: any) => x.name === 'guest_access').length > 0)
+        const feishu = data.channel.find((x: any) => x.name === 'feishu')
+        if (feishu) {
+          setFeishuAppId(feishu.config.client_id)
+          setAllowFeishuLogin(true)
+        }
+        const code = query.get('code')
+        if (code) {
+          feishuLogin(code)
+          setSpinning(false)
+          return
+        }
+        if (isInFeishuClient() && feishu) {
+          openFeishuLogin(feishu.config.client_id)
+        }
+        setSpinning(false)
+      }
+    })
+  }, [])
+
+  const getSystemInfo = useCallback(() => {
+    fetchData<BasicResponse<{ version: string; buildTime: string }>>('common/version', {
+      method: 'GET',
+      eoTransformKeys: ['build_time']
+    }).then((response) => {
+      const { code, data } = response
+      if (code === STATUS_CODE.SUCCESS) {
+        dispatch({ type: 'UPDATE_VERSION', version: data.version })
+        dispatch({ type: 'UPDATE_DATE', updateDate: data.buildTime })
+      }
+    })
+  }, [])
+
+  const fetchLogin = async (values: any) => {
+    try {
+      setLoading(true)
+      const { username, password } = values
+      // const encryptedPassword = encryptByEnAES(username, password);
+
+      const body = {
+        name: username,
+        password: password
+        // client: 1,
+        // type: 1,
+        // app_type: 4,
+      }
+
+      const { code, msg } = await fetchData<BasicResponse<null>>('account/login/username', {
+        method: 'POST',
+        eoBody: body
+      })
+
+      if (code === STATUS_CODE.SUCCESS) {
+        dispatch({ type: 'LOGIN' })
+        // message.success($t(RESPONSE_TIPS.loginSuccess));
+        const callbackUrl = new URLSearchParams(window.location.search).get('callbackUrl')
+        if (callbackUrl && callbackUrl !== 'null') {
+          navigate(callbackUrl)
+        } else {
+          navigate(state.mainPage)
+        }
+      } else {
+        dispatch({ type: 'LOGOUT' })
+        message.error(msg)
+      }
+    } catch (err) {
+      console.warn(err)
+    } finally {
+      setLoading(false)
+    }
+  }
+  const login = async () => {
+    if (formRef.current) {
+      const values = await formRef.current.validateFields()
+      fetchLogin(values)
+    }
+  }
+
+  const loginAsGuest = () => {
+    fetchLogin({ username: 'guest', password: '12345678' })
+  }
+
+  const isInFeishuClient = () => {
+    // 方法1：检查User-Agent
+    const ua = navigator.userAgent.toLowerCase();
+    const isLark = ua.includes('lark') || ua.includes('feishu');
     
-    const getSystemInfo = useCallback(()=>{
-        fetchData<BasicResponse<{version:string, buildTime:string}>>('common/version',{method:'GET', eoTransformKeys:['build_time']}).then(response=>{
-            const {code,data} = response
-            if(code === STATUS_CODE.SUCCESS){
-                dispatch({type:'UPDATE_VERSION',version:data.version})
-                dispatch({type:'UPDATE_DATE',updateDate:data.buildTime})
-            }
-        })
-    },[])
+    // 方法2：检查全局对象
+    const hasSDK = typeof window.h5sdk !== 'undefined' || typeof window.tt !== 'undefined';
+    
+    // 方法3：检查URL参数
+    const params = new URLSearchParams(window.location.search);
+    const hasFeishuParams = params.has('from') || params.has('required_launch_ability');
+    
+    return isLark || hasSDK || hasFeishuParams;
+  }
 
+  // 打开飞书授权页面
+  const openFeishuLogin = (id?: string) => {
+    const href = window.location.origin + window.location.pathname
+    const authUrl = `https://accounts.feishu.cn/open-apis/authen/v1/authorize?client_id=${id || feishuAppId}&redirect_uri=${href}`
+    localStorage.setItem('feishuCallbackUrl', href)
+    window.location.href = authUrl
+  }
 
-    const fetchLogin = async (values:any)=>{
-        try {
-            setLoading(true);
-            const { username, password } = values;
-            // const encryptedPassword = encryptByEnAES(username, password);
+  useEffect(() => {
+    check()
+    getSystemInfo()
+  }, [])
 
-            const body = {
-                name:username,
-                password: password
-                // client: 1,
-                // type: 1,
-                // app_type: 4,
-            };
+  return spinning ? (
+    <Spin
+      indicator={<LoadingOutlined style={{ fontSize: 24 }} spin />}
+      spinning={spinning}
+      className="w-full h-full flex items-center justify-center"
+    ></Spin>
+  ) : (
+    <div className="h-full w-full flex flex-col  items-center overflow-auto min-h-[490px] bg-[#0d1117]">
+      <div id="glow-background" className="background-container">
+        <svg className="background-pattern" aria-hidden="true">
+          <defs>
+            <pattern id="pattern-bg" width="200" height="200" patternUnits="userSpaceOnUse">
+              <path d="M.5 200V.5H200" fill="none"></path>
+            </pattern>
+          </defs>
+          <rect width="100%" height="100%" fill="url(#pattern-bg)"></rect>
+        </svg>
 
-            const {code,msg } = await fetchData<BasicResponse<null>>('account/login/username',{method:'POST',eoBody:(body)})
+        <svg
+          xmlns="http://www.w3.org/2000/svg"
+          version="1.1"
+          xmlns:xlink="http://www.w3.org/1999/xlink"
+          xmlns:svgjs="http://svgjs.dev/svgjs"
+          viewBox="0 0 800 450"
+          opacity="1"
+        >
+          <defs>
+            <filter
+              id="bbblurry-filter"
+              x="-100%"
+              y="-100%"
+              width="400%"
+              height="400%"
+              filterUnits="objectBoundingBox"
+              primitiveUnits="userSpaceOnUse"
+              color-interpolation-filters="sRGB"
+            >
+              <feGaussianBlur
+                stdDeviation="99"
+                x="0%"
+                y="0%"
+                width="100%"
+                height="100%"
+                in="SourceGraphic"
+                edgeMode="none"
+                result="blur"
+              ></feGaussianBlur>
+            </filter>
+          </defs>
+          <g filter="url(#bbblurry-filter)">
+            <ellipse
+              rx="80.5"
+              ry="66.5"
+              cx="623.0285107902043"
+              cy="25.708028895006635"
+              fill="hsla(187, 67%, 50%, 1.00)"
+            >
+              <animate
+                attributeName="fill"
+                values="hsla(187, 67%, 50%, 1.00); hsla(340, 85%, 60%, 1.00); hsla(60, 90%, 55%, 1.00); hsla(187, 67%, 50%, 1.00)"
+                dur="6s"
+                repeatCount="indefinite"
+              ></animate>
+            </ellipse>
 
-            if (code === STATUS_CODE.SUCCESS) {
-                dispatch({type:'LOGIN'})
-                // message.success($t(RESPONSE_TIPS.loginSuccess));
-                const callbackUrl = new URLSearchParams(window.location.search).get('callbackUrl');
-                if (callbackUrl && callbackUrl !== 'null') {
-                    navigate(callbackUrl);
-                } else {
-                    navigate(state.mainPage);
-                }
-            }else{
-                dispatch({type:'LOGOUT'})
-                message.error(msg)
-            }
+            <ellipse
+              rx="80.5"
+              ry="66.5"
+              cx="446.471435546875"
+              cy="-11.694503784179688"
+              fill="hsla(234, 78%, 61%, 1.00)"
+            >
+              <animate
+                attributeName="fill"
+                values="hsla(234, 78%, 61%, 1.00); hsla(100, 75%, 60%, 1.00); hsla(290, 80%, 70%, 1.00); hsla(234, 78%, 61%, 1.00)"
+                dur="8s"
+                repeatCount="indefinite"
+              ></animate>
+            </ellipse>
 
-        } catch (err) {
-            console.warn(err);
-        } finally {
-            setLoading(false)
-        }
-    }
-    const login = async () => {
-        if (formRef.current) {
-            const values = await formRef.current.validateFields();
-            fetchLogin(values);
-        }
-    };
+            <ellipse
+              rx="80.5"
+              ry="66.5"
+              cx="200.54574247724838"
+              cy="-19.02454901710908"
+              fill="hsla(167, 87%, 56%, 1.00)"
+            >
+              <animate
+                attributeName="fill"
+                values="hsla(167, 87%, 56%, 1.00); hsla(10, 90%, 65%, 1.00); hsla(300, 85%, 50%, 1.00); hsla(167, 87%, 56%, 1.00)"
+                dur="10s"
+                repeatCount="indefinite"
+              ></animate>
+            </ellipse>
 
-    const loginAsGuest = ()=>{
-        fetchLogin({username:'guest',password:'12345678'})
-    }
+            <ellipse rx="80.5" ry="66.5" cx="340.05827594708103" cy="-9.424536458161867" fill="hsl(25, 100%, 64%)">
+              <animate
+                attributeName="fill"
+                values="hsl(25, 100%, 64%); hsl(200, 100%, 70%); hsl(50, 95%, 55%); hsl(25, 100%, 64%)"
+                dur="8s"
+                repeatCount="indefinite"
+              ></animate>
+            </ellipse>
+          </g>
+        </svg>
+      </div>
+      {/* <div className="w-full border-box text-right pr-[40px]"></div> */}
+      <div className="mx-auto flex-1 flex flex-col items-center justify-center z-[3]">
+        <div className="mx-auto">
+          <span className="flex items-center justify-center">
+            <img className="h-[40px] mr-[8px]" src={Logo} />
+          </span>
+        </div>
 
-    useEffect(() => {
-        check()
-        getSystemInfo()
-    }, []);
+        <section className="block w-[410px] mx-auto mt-[46px] p-[30px] box-border rounded-[10px] shadow-[0_5px_20px_0_rgba(0,0,0,5%)] login-block">
+          <div className="h-full">
+            <div className="">
+              <Form onFinish={login} className="w-[350px]" ref={formRef}>
+                <Form.Item
+                  className="p-0 bg-transparent rounded border-none"
+                  name="username"
+                  rules={[{ required: true, message: $t('请输入账号'), whitespace: true }]}
+                >
+                  <Input
+                    className="w-[350px] h-[40px] login-input"
+                    placeholder={$t('账号')}
+                    autoComplete="on"
+                    autoFocus
+                  />
+                </Form.Item>
 
-     return (
-        spinning?
-        <Spin indicator={<LoadingOutlined style={{ fontSize: 24 }} spin />} spinning={spinning} className='w-full h-full flex items-center justify-center'></Spin> :
-         <div className="h-full w-full flex flex-col  items-center overflow-auto min-h-[490px] bg-[#0d1117]">
-            <div id="glow-background" className="background-container">
-                <svg className="background-pattern" aria-hidden="true">
-                    <defs>
-                        <pattern id="pattern-bg" width="200" height="200" patternUnits="userSpaceOnUse">
-                            <path d="M.5 200V.5H200" fill="none"></path>
-                        </pattern>
-                    </defs>
-                    <rect width="100%" height="100%" fill="url(#pattern-bg)"></rect>
-                </svg>
+                <Form.Item
+                  className="p-0 bg-transparent rounded border-none "
+                  name="password"
+                  rules={[{ required: true, message: $t('请输入密码') }]}
+                >
+                  <Input.Password
+                    className="w-[350px] h-[40px] login-input"
+                    placeholder={$t('密码')}
+                    autoComplete="off"
+                  />
+                </Form.Item>
 
-            <svg xmlns="http://www.w3.org/2000/svg" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:svgjs="http://svgjs.dev/svgjs" viewBox="0 0 800 450" opacity="1">
-            <defs>
-                <filter id="bbblurry-filter" x="-100%" y="-100%" width="400%" height="400%" filterUnits="objectBoundingBox" primitiveUnits="userSpaceOnUse" color-interpolation-filters="sRGB">
-                <feGaussianBlur stdDeviation="99" x="0%" y="0%" width="100%" height="100%" in="SourceGraphic" edgeMode="none" result="blur"></feGaussianBlur>
-                </filter>
-            </defs>
-            <g filter="url(#bbblurry-filter)">
-                <ellipse rx="80.5" ry="66.5" cx="623.0285107902043" cy="25.708028895006635" fill="hsla(187, 67%, 50%, 1.00)">
-                <animate attributeName="fill" values="hsla(187, 67%, 50%, 1.00); hsla(340, 85%, 60%, 1.00); hsla(60, 90%, 55%, 1.00); hsla(187, 67%, 50%, 1.00)" dur="6s" repeatCount="indefinite"></animate>
-                </ellipse>
-                
-                <ellipse rx="80.5" ry="66.5" cx="446.471435546875" cy="-11.694503784179688" fill="hsla(234, 78%, 61%, 1.00)">
-                <animate attributeName="fill" values="hsla(234, 78%, 61%, 1.00); hsla(100, 75%, 60%, 1.00); hsla(290, 80%, 70%, 1.00); hsla(234, 78%, 61%, 1.00)" dur="8s" repeatCount="indefinite"></animate>
-                </ellipse>
-                
-                <ellipse rx="80.5" ry="66.5" cx="200.54574247724838" cy="-19.02454901710908" fill="hsla(167, 87%, 56%, 1.00)">
-                <animate attributeName="fill" values="hsla(167, 87%, 56%, 1.00); hsla(10, 90%, 65%, 1.00); hsla(300, 85%, 50%, 1.00); hsla(167, 87%, 56%, 1.00)" dur="10s" repeatCount="indefinite"></animate>
-                </ellipse>
-                
-                <ellipse rx="80.5" ry="66.5" cx="340.05827594708103" cy="-9.424536458161867" fill="hsl(25, 100%, 64%)">
-                <animate attributeName="fill" values="hsl(25, 100%, 64%); hsl(200, 100%, 70%); hsl(50, 95%, 55%); hsl(25, 100%, 64%)" dur="8s" repeatCount="indefinite"></animate>
-                </ellipse>
-            </g>
-            </svg>
+                <Form.Item className="p-0 bg-transparent rounded border-none ">
+                  <Button
+                    loading={loading}
+                    className="h-[40px] mt-mbase w-full inline-flex justify-center items-center"
+                    type="primary"
+                    htmlType="submit"
+                  >
+                    {$t('登录')}
+                  </Button>
+                </Form.Item>
+                {allowFeishuLogin && (
+                  <>
+                    <Divider />
 
+                    <Form.Item className="p-0 bg-transparent rounded border-none mb-0">
+                      <Button
+                        loading={loading}
+                        className="h-[40px]  w-full inline-flex justify-center items-center"
+                        type="default"
+                        onClick={() => openFeishuLogin(feishuAppId)}
+                      >
+                        <img className="h-[30px]" src={FeishuLogo} />
+                        {$t('飞书授权登录')}
+                      </Button>
+                    </Form.Item>
+                  </>
+                )}
+                {allowGuest && (
+                  <>
+                    <Divider />
 
+                    <Form.Item className="p-0 bg-transparent rounded border-none mb-0">
+                      <Button
+                        loading={loading}
+                        className="h-[40px]  w-full inline-flex justify-center items-center"
+                        type="default"
+                        onClick={loginAsGuest}
+                      >
+                        {$t('访客模式')}{' '}
+                        <Tooltip
+                          title={$t(
+                            '您可通过访客模式查看所有页面和功能，但是无法编辑数据。访客模式仅用于了解产品功能，您可以在正式产品中关闭该功能。'
+                          )}
+                        >
+                          <Icon icon="ic:baseline-help" height={18} width={18} />
+                        </Tooltip>
+                      </Button>
+                    </Form.Item>
+                  </>
+                )}
+              </Form>
             </div>
-            {/* <div className="w-full border-box text-right pr-[40px]"></div> */}
-             <div className="mx-auto flex-1 flex flex-col items-center justify-center z-[3]" >
-                 <div className="mx-auto">
-                    <span className="flex items-center justify-center">
-                      <img
-                        className="h-[40px] mr-[8px]"
-                        src={Logo}
-                    />
-                    </span>
-                 </div>
+          </div>
+        </section>
 
-                 <section className="block w-[410px] mx-auto mt-[46px] p-[30px] box-border rounded-[10px] shadow-[0_5px_20px_0_rgba(0,0,0,5%)] login-block">
-                     <div className="h-full">
-                         <div className="">
-                             <Form onFinish={login} className="w-[350px]"
-                                   ref={formRef}>
-                                 <Form.Item
-                                     className="p-0 bg-transparent rounded border-none"
-                                     name="username"
-                                     rules={[{ required: true, message: $t('请输入账号') ,whitespace:true }]}
-                                 >
-                                     <Input
-                                         className="w-[350px] h-[40px] login-input"
-                                         placeholder={$t("账号")}
-                                         autoComplete="on"
-                                         autoFocus
-                                     />
-                                 </Form.Item>
-
-                                 <Form.Item
-                                     className="p-0 bg-transparent rounded border-none "
-                                     name="password"
-                                     rules={[{ required: true, message: $t('请输入密码')  }]}
-                                 >
-                                     <Input.Password
-                                         className="w-[350px] h-[40px] login-input"
-                                         placeholder={$t("密码")}
-                                         autoComplete="off"
-                                     />
-                                 </Form.Item>
-
-                                <Form.Item
-                                    className="p-0 bg-transparent rounded border-none "
-                                    >
-                                    <Button loading={loading} className="h-[40px] mt-mbase w-full inline-flex justify-center items-center" type="primary" htmlType="submit">
-                                    {$t('登录')}
-                                    </Button>
-                                </Form.Item>
-                                {
-                                    allowGuest && <>
-                                    <Divider />
-                                    
-                                    <Form.Item
-                                        className="p-0 bg-transparent rounded border-none mb-0"
-                                        >
-                                        <Button loading={loading} className="h-[40px]  w-full inline-flex justify-center items-center" type="default" onClick={loginAsGuest}>
-                                        {$t('访客模式')} <Tooltip title={$t('您可通过访客模式查看所有页面和功能，但是无法编辑数据。访客模式仅用于了解产品功能，您可以在正式产品中关闭该功能。')}><Icon icon="ic:baseline-help" height={18} width={18} /></Tooltip>
-                                        </Button>
-                                    </Form.Item>
-                                    </>
-                                }
-                             </Form>
-                         </div>
-                     </div>
-                 </section>
-
-                 <section className="flex flex-col items-center mt-[46px] text-SECOND_TEXT">
-                    <p className="leading-[28px]">
-                        {$t('Version (0)-(1)',[state?.version,state?.updateDate])}, {$t(state?.powered || '-')}
-                     </p>
-                        <LanguageSetting mode="light"/>
-                 </section>
-             </div>
-         </div>
-     );
+        <section className="flex flex-col items-center mt-[46px] text-SECOND_TEXT">
+          <p className="leading-[28px]">
+            {$t('Version (0)-(1)', [state?.version, state?.updateDate])}, {$t(state?.powered || '-')}
+          </p>
+          <LanguageSetting mode="light" />
+        </section>
+      </div>
+    </div>
+  )
 }
-export default Login;
+export default Login

frontend/packages/core/src/pages/auth/Auth.tsx

@@ -0,0 +1,171 @@
+import InsidePage from '@common/components/aoplatform/InsidePage'
+import WithPermission from '@common/components/aoplatform/WithPermission'
+import { BasicResponse, PLACEHOLDER, RESPONSE_TIPS, STATUS_CODE } from '@common/const/const'
+import { useGlobalContext } from '@common/contexts/GlobalStateContext'
+import { useFetch } from '@common/hooks/http'
+import { $t } from '@common/locales'
+import { App, Button, Form, Input, Row, Select, Switch } from 'antd'
+import { useEffect, useState } from 'react'
+
+type AuthSetting = {
+  config: {
+    clientId: string
+    clientSecret: string
+  }
+  enabled: boolean
+}
+
+type AuthFieldType = {
+  authType: string
+  clientId: string
+  clientSecret: string
+  enabled: boolean
+}
+
+const Auth = () => {
+  const { message } = App.useApp()
+  const [form] = Form.useForm()
+  const { fetchData } = useFetch()
+  const [, forceUpdate] = useState<unknown>(null)
+  const { state } = useGlobalContext()
+  const [thirdPartyDrivers, setThirdPartyDrivers] = useState<{ label: string; value: string }[]>([])
+  useEffect(() => {
+    forceUpdate({})
+  }, [state.language])
+  const onFinish = () => {
+    form.validateFields().then((value) => {
+      return fetchData<BasicResponse<null>>(`account/third/${value.authType}`, {
+        method: 'POST',
+        eoBody: {
+          enable: value.enabled,
+          config: {
+            client_id: value.clientId,
+            client_secret: value.clientSecret
+          }
+        }
+      })
+        .then((response) => {
+          const { code, msg } = response
+          if (code === STATUS_CODE.SUCCESS) {
+            message.success(msg || $t(RESPONSE_TIPS.success))
+            return Promise.resolve(true)
+          } else {
+            message.error(msg || $t(RESPONSE_TIPS.error))
+            return Promise.reject(msg || $t(RESPONSE_TIPS.error))
+          }
+        })
+        .catch((errorInfo) => {
+          return Promise.reject(errorInfo)
+        })
+    })
+  }
+
+  /**
+   * 获取第三方授权列表
+   */
+  const getThirdPartyAuthList = () => {
+    fetchData<
+      BasicResponse<{
+        drivers: {
+          name: string
+          value: string
+        }[]
+      }>
+    >('account/third', {
+      method: 'GET',
+    }).then((response) => {
+      const { code, data, msg } = response
+      if (code === STATUS_CODE.SUCCESS) {
+        setThirdPartyDrivers(data.drivers.map((item: any) => ({ label: item.name, value: item.value })))
+        if (data.drivers.length) {
+          form.setFieldValue('authType', data.drivers[0].value)
+          getThirdPartyAuthSetting()
+        }
+      } else {
+        message.error(msg || $t(RESPONSE_TIPS.error))
+      }
+    })
+  }
+
+  /**
+   * 获取第三方授权配置
+   */
+  const getThirdPartyAuthSetting = () => {
+    fetchData<BasicResponse<{ info: AuthSetting }>>(`account/third/${form.getFieldValue('authType')}`, {
+      method: 'GET',
+      eoTransformKeys: ['client_id', 'client_secret']
+    }).then((response) => {
+      const { code, data, msg } = response
+      if (code === STATUS_CODE.SUCCESS) {
+        form.setFieldsValue({
+          clientId: data.driver?.config?.clientId || '',
+          clientSecret: data.driver?.config?.clientSecret || '',
+          enabled: data.driver?.enable || false
+        })
+      } else {
+        message.error(msg || $t(RESPONSE_TIPS.error))
+      }
+    })
+  }
+
+  useEffect(() => {
+    getThirdPartyAuthList()
+  }, [])
+
+  return (
+    <InsidePage pageTitle={$t('鉴权')} showBorder={false} contentClassName="pr-PAGE_INSIDE_X" scrollPage={false} description={$t("系统用户账号登录授权配置")}>
+      <WithPermission access="">
+        <Form
+          layout="vertical"
+          labelAlign="left"
+          scrollToFirstError
+          form={form}
+          className={`mx-auto`}
+          name="authConfig"
+          onFinish={onFinish}
+          autoComplete="off"
+        >
+          <Form.Item<AuthFieldType>
+            label={$t('授权类型')}
+            name="authType"
+            rules={[{ required: true, message: $t('请选择授权类型') }]}
+          >
+            <Select className="w-INPUT_NORMAL" placeholder={$t('请选择授权类型')} onChange={getThirdPartyAuthSetting} options={thirdPartyDrivers} />
+          </Form.Item>
+
+          <Form.Item<AuthFieldType>
+            label={$t('APP ID')}
+            name="clientId"
+            rules={[{ required: true, whitespace: true, message: $t('请输入APP ID') }]}
+            extra={$t('APP ID 参数位于飞书开发人员控制台中的应用程序凭证和基础信息页面上')}
+          >
+            <Input className="w-INPUT_NORMAL" placeholder={$t(PLACEHOLDER.input)} autoComplete="off" />
+          </Form.Item>
+
+          <Form.Item<AuthFieldType>
+            label={$t('APP Secret')}
+            name="clientSecret"
+            rules={[{ required: true, whitespace: true, message: $t('请输入APP Secret') }]}
+            extra={$t('APP Secret 参数位于飞书开发人员控制台中的应用程序凭证和基础信息页面上')}
+          >
+            <Input.Password className="w-INPUT_NORMAL" placeholder={$t(PLACEHOLDER.input)} autoComplete="new-password" />
+          </Form.Item>
+
+          <Form.Item<AuthFieldType> label={$t('启用授权')} name="enabled" valuePropName="checked">
+            <Switch checkedChildren={$t('启用')} unCheckedChildren={$t('停用')} />
+          </Form.Item>
+
+          <Row className="mb-[10px]">
+            <WithPermission access="system.devops.system_setting.edit">
+              <Button type="primary" htmlType="submit">
+                {$t('保存')}
+              </Button>
+            </WithPermission>
+          </Row>
+        </Form>
+      </WithPermission>
+    </InsidePage>
+  )
+}
+
+export default Auth

frontend/packages/core/src/pages/mcpService/IntegrationAIContainer.tsx

@@ -50,17 +50,23 @@ type ServiceApiKeyList = {
     expired: number
   }>
 }
+
+type ConsumerParamsType = {
+  consumerId: string
+  teamId: string
+}
 export interface IntegrationAIContainerRef {
   getServiceKeysList: () => void;
 }
 export interface IntegrationAIContainerProps {
-  type: 'global' | 'service'
+  type: 'global' | 'service' | 'consumer'
   handleToolsChange: (value: Tool[]) => void
   customClassName?: string
   service?: ServiceDetailType
   serviceId?: string
   currentTab?: string
   openModal?: (type: 'apply') => void
+  consumerParams?: ConsumerParamsType
 }
 export const IntegrationAIContainer = forwardRef<IntegrationAIContainerRef, IntegrationAIContainerProps>(
   ({
@@ -69,8 +75,9 @@ export const IntegrationAIContainer = forwardRef<IntegrationAIContainerRef, Inte
     customClassName,
     service,
     serviceId,
-  currentTab,
-  openModal
+    currentTab,
+    openModal,
+    consumerParams
 }: IntegrationAIContainerProps, ref) => {
   /** 当前激活的标签 */
   const [activeTab, setActiveTab] = useState(type === 'service' ? 'openApi' : 'mcp')
@@ -180,7 +187,35 @@ export const IntegrationAIContainer = forwardRef<IntegrationAIContainerRef, Inte
         }
       })
       .catch((errorInfo) => {
-        message.error(errorInfo || $t(RESPONSE_TIPS.error))
+        message.error(errorInfo?.toString() || $t(RESPONSE_TIPS.error))
+      })
+  }
+
+  /**
+   * 获取消费者 MCP 配置
+   * @returns
+   */
+  const getConsumerMcpConfig = () => {
+    fetchData<BasicResponse<null>>('app/mcp/config', {
+      method: 'GET',
+      eoParams: { app: consumerParams?.consumerId, team: consumerParams?.teamId }
+    })
+      .then((response) => {
+        const { code, msg, data } = response
+        if (code === STATUS_CODE.SUCCESS) {
+          setTabContent((prevTabContent) => ({
+            ...prevTabContent,
+            mcp: {
+              ...prevTabContent.mcp,
+              configContent: data.config || ''
+            }
+          }))
+        } else {
+          message.error(msg || $t(RESPONSE_TIPS.error))
+        }
+      })
+      .catch((errorInfo) => {
+        message.error(errorInfo?.toString() || $t(RESPONSE_TIPS.error))
       })
   }
 
@@ -191,6 +226,10 @@ export const IntegrationAIContainer = forwardRef<IntegrationAIContainerRef, Inte
     navigator('/mcpKey')
   }
 
+  const dropAuthPage = () => {
+    navigator(`/consumer/${consumerParams?.teamId}/inside/${consumerParams?.consumerId}/authorization`)
+  }
+
   /**
    * 获取全局 API Key 列表
    */
@@ -217,7 +256,7 @@ export const IntegrationAIContainer = forwardRef<IntegrationAIContainerRef, Inte
         }
       })
       .catch((errorInfo) => {
-        message.error(errorInfo || $t(RESPONSE_TIPS.error))
+        message.error(errorInfo?.toString() || $t(RESPONSE_TIPS.error))
       })
   }
   
@@ -229,12 +268,12 @@ export const IntegrationAIContainer = forwardRef<IntegrationAIContainerRef, Inte
   }))
 
   /**
-   * 获取服务 API Key 列表
+   * 获取 API Key 列表
    */
-  const getServiceKeysList = () => {
+  const getServiceKeysList = (consumerId?: string) => {
     fetchData<BasicResponse<null>>(`my/app/apikeys`, {
       method: 'GET',
-      eoParams: { service: serviceId }
+      eoParams: consumerId ? { app: consumerId } : { service: serviceId }
     })
       .then((response) => {
         const { code, msg, data } = response
@@ -258,7 +297,7 @@ export const IntegrationAIContainer = forwardRef<IntegrationAIContainerRef, Inte
         }
       })
       .catch((errorInfo) => {
-        message.error(errorInfo || $t(RESPONSE_TIPS.error))
+        message.error(errorInfo?.toString() || $t(RESPONSE_TIPS.error))
       })
   }
 
@@ -345,6 +384,10 @@ export const IntegrationAIContainer = forwardRef<IntegrationAIContainerRef, Inte
       getGlobalMcpConfig()
       setMcpServerUrl('mcp/global/sse')
       getGlobalKeysList()
+    } else if (type === 'consumer'){
+      getConsumerMcpConfig()
+      setMcpServerUrl(`mcp/app/${consumerParams?.consumerId}/sse`)
+      getServiceKeysList(consumerParams?.consumerId)
     } else {
       service?.basic.enableMcp && setMcpServerUrl(`mcp/service/${serviceId}/sse`)
       getServiceKeysList()
@@ -362,6 +405,7 @@ export const IntegrationAIContainer = forwardRef<IntegrationAIContainerRef, Inte
   useEffect(() => {
     initTabsData()
     type === 'global' && getGlobalMcpConfig()
+    type === 'consumer' && getConsumerMcpConfig()
   }, [state.language])
   /**
    * 切换标签
@@ -408,7 +452,7 @@ export const IntegrationAIContainer = forwardRef<IntegrationAIContainerRef, Inte
       }
       connectMcpServer()
     }
-  }, [mcpServerUrl, ...(type === 'global' ? [state.language] : [])])
+  }, [mcpServerUrl, ...(type === 'global' || type === 'consumer' ? [state.language] : [])])
   /**
    * 获取 MCP tools
    */
@@ -452,7 +496,7 @@ export const IntegrationAIContainer = forwardRef<IntegrationAIContainerRef, Inte
             </div>
           </div>
         )}
-        {type === 'service' && !apiKeyList.length ? (
+        {(type === 'service' || type === 'consumer') && !apiKeyList.length ? (
           <>
             <Card
               style={{ borderRadius: '10px' }}
@@ -461,12 +505,23 @@ export const IntegrationAIContainer = forwardRef<IntegrationAIContainerRef, Inte
                 body: 'p-[10px]'
               }}
             >
-              <div className="flex flex-col items-center justify-center py-3">
-                <span className="text-[14px] mb-5">{$t('请先订阅该服务')}</span>
-                <Button type="primary" onClick={() => openModal?.('apply')}>
-                  {$t('申请')}
-                </Button>
-              </div>
+              {
+                type === 'service' ? (
+                  <div className="flex flex-col items-center justify-center py-3">
+                    <span className="text-[14px] mb-5">{$t('请先订阅该服务')}</span>
+                    <Button type="primary" onClick={() => openModal?.('apply')}>
+                      {$t('申请')}
+                    </Button>
+                  </div>
+                ) : (
+                  <div className="flex flex-col items-center justify-center py-3">
+                    <span className="text-[14px] mb-5">{$t('未配置 API Key')}</span>
+                    <Button type="primary" onClick={() => dropAuthPage()}>
+                      {$t('配置')}
+                    </Button>
+                  </div>
+                )
+              }
             </Card>
           </>
         ) : (

frontend/packages/core/src/pages/member/MemberDropdownModal.tsx

@@ -14,7 +14,7 @@ export const MemberDropdownModal = forwardRef<MemberDropdownModalHandle,MemberDr
     const {fetchData} = useFetch()
     const [departmentList, setDepartmentList] = useState<DepartmentListItem[]>([])
     const { state } = useGlobalContext()
-
+    const [disableEditMemberData] = useState<boolean>(entity?.from === 'feishu')
     const save:()=>Promise<boolean | string> =  ()=>{
         let url:string
         let method:string
@@ -182,27 +182,28 @@ export const MemberDropdownModal = forwardRef<MemberDropdownModalHandle,MemberDr
                     name="name"
                     rules={[{required: true,whitespace:true }]}
                 >
-                    <Input className="w-INPUT_NORMAL" disabled={type ==='editMember'} placeholder={$t(PLACEHOLDER.input)}/>
+                    <Input className="w-INPUT_NORMAL" disabled={disableEditMemberData || type ==='editMember'} placeholder={$t(PLACEHOLDER.input)}/>
                 </Form.Item>
                 <Form.Item<MemberDropdownModalFieldType>
                     label={$t("邮箱")}
                     name="email"
                     rules={[{required: true,whitespace:true },{type:"email",message: $t(VALIDATE_MESSAGE.email)}]}
                 >
-                    <Input className="w-INPUT_NORMAL" placeholder={$t(PLACEHOLDER.input)}/>
+                    <Input className="w-INPUT_NORMAL" disabled={disableEditMemberData} placeholder={$t(PLACEHOLDER.input)}/>
                 </Form.Item>
                 <Form.Item<MemberDropdownModalFieldType>
                     label={$t("密码")}
                     name="password"
                     rules={[{required: type === 'addMember',whitespace:true }]}
                 >
-                    <Input className="w-INPUT_NORMAL" placeholder={$t(PLACEHOLDER.input)}/>
+                    <Input disabled={disableEditMemberData} className="w-INPUT_NORMAL" placeholder={$t(PLACEHOLDER.input)}/>
                 </Form.Item>
                 <Form.Item<MemberDropdownModalFieldType>
                     label={$t("部门")}
                     name="departmentIds"
                 >
                     <TreeSelect
+                            disabled={disableEditMemberData}
                             className="w-INPUT_NORMAL"
                             fieldNames={{label:'name',value:'id',children:'children'}}
                             showSearch

frontend/packages/core/src/pages/member/MemberList.tsx

@@ -95,14 +95,15 @@ const AddToDepartment = forwardRef<AddToDepartmentHandle, AddToDepartmentProps>(
       treeData?.map((x: DataNode) => ({
         ...x,
         name: $t((x as unknown as { name: string }).name),
-        checkable: false,
-        children: x.children?.map(y => ({ ...y, checkable: false }))
+        checkable: false, // 根节点不可选中
+        children: x.children?.map(y => ({ ...y, checkable: true })) // 子节点可以选中
       })),
     [state.language, treeData]
   )
 
-  const onCheck: TreeProps['onCheck'] = (checkedKeys: string[]) => {
-    setSelectedKeys(checkedKeys.checked)
+  const onCheck: TreeProps['onCheck'] = (checkedKeys, info) => {
+    const selectedIds = Array.isArray(checkedKeys) ? checkedKeys : checkedKeys.checked || []
+    setSelectedKeys(selectedIds)
   }
 
   useEffect(() => {
@@ -153,11 +154,12 @@ const MemberList = () => {
   const [tableHttpReload, setTableHttpReload] = useState(true)
   const [tableListDataSource, setTableListDataSource] = useState<MemberTableListItem[]>([])
   const pageListRef = useRef<ActionType>(null)
-  const { topGroupId, selectedDepartmentIds, refreshGroup } = useOutletContext<{
+  const { topGroupId, selectedDepartmentIds, refreshGroup, refreshTableCount } = useOutletContext<{
     topGroupId: string
     departmentList: DepartmentListItem[]
     selectedDepartmentIds: string[]
     refreshGroup: () => void
+    refreshTableCount: number
   }>()
   const AddMemberRef = useRef<MemberDropdownModalHandle>(null)
   const EditMemberRef = useRef<MemberDropdownModalHandle>(null)
@@ -396,7 +398,7 @@ const MemberList = () => {
       width: 600,
       okText: $t('确认'),
       okButtonProps: {
-        disabled: isActionAllowed(type)
+        disabled: isActionAllowed(type) || (type === 'editMember' && entity?.from === 'feishu')
       },
       cancelText: $t('取消'),
       closable: true,
@@ -415,6 +417,13 @@ const MemberList = () => {
     getDepartmentList()
   }, [])
 
+  // 监听外部刷新触发器
+  useEffect(() => {
+    if (refreshTableCount > 0) {
+      manualReloadTable()
+    }
+  }, [refreshTableCount])
+
   const getDepartmentList = async () => {
     setDepartmentValueEnum([])
     const { code, data, msg } = await fetchData<BasicResponse<{ department: DepartmentListItem }>>(

frontend/packages/core/src/pages/member/MemberPage.tsx

@@ -36,6 +36,11 @@ const MemberPage = ()=>{
         const [selectedDepartmentId, setSelectedDepartmentId] = useState<string>('-1')
         const {accessData,state} = useGlobalContext()
         const [refreshMemberCount, setRefreshMemberCount] = useState<number>(0)
+        const [refreshTableCount, setRefreshTableCount] = useState<number>(0)
+        
+        const refreshMemberTable = () => {
+            setRefreshTableCount(prev => prev + 1)
+        }
     const onSearchWordChange = (e:string)=>{
             setSearchWord(e || '')
         }
@@ -90,7 +95,7 @@ const MemberPage = ()=>{
                         case 'addChild':
                             return AddChildRef.current?.save().then((res)=>{if(res === true)getDepartmentList()})
                         case 'addMember':
-                            return AddMemberRef.current?.save().then((res)=>{if(res === true){getDepartmentList();setRefreshMemberCount(pre=>pre+1)}})
+                            return AddMemberRef.current?.save().then((res)=>{if(res === true){getDepartmentList();setRefreshMemberCount(pre=>pre+1);refreshMemberTable()}})
                         case 'rename':
                             return RenameRef.current?.save().then((res)=>{if(res === true)getDepartmentList()})
                         case 'delete':
@@ -262,7 +267,7 @@ const MemberPage = ()=>{
                         </div>
                     </div>
                     <div className="flex-1 p-btnbase pr-PAGE_INSIDE_X overflow-x-hidden">
-                        <Outlet context={{refreshMemberCount, selectedDepartmentIds,refreshGroup:()=>getDepartmentList()}}/>
+                        <Outlet context={{refreshMemberCount, selectedDepartmentIds,refreshGroup:()=>getDepartmentList(), refreshTableCount}}/>
                     </div>
                 </div>
             </InsidePage>);

frontend/packages/core/src/pages/serviceOverview/rankingList/RankingList.tsx

@@ -20,6 +20,10 @@ interface PageListRef {
   [key: string]: any;
 }
 
+/**
+ * 排名列表
+ * @returns 
+ */
 const RankingList = ({ topRankingList, serviceType }: { topRankingList: RankingListData; serviceType: 'aiService' | 'restService' }) => {
   /** 全局状态 */
   const { state } = useGlobalContext()

frontend/packages/market/src/pages/serviceHub/management/ManagementInsidePage.tsx

@@ -20,7 +20,7 @@ export default function ManagementInsidePage() {
   const { message } = App.useApp()
   const { fetchData } = useFetch()
   const { setBreadcrumb } = useBreadcrumb()
-  const [activeMenu, setActiveMenu] = useState<string>('service')
+  const [activeMenu, setActiveMenu] = useState<string>('authorization')
   const { appId, teamId } = useParams<RouterParams>()
   const navigateTo = useNavigate()
   const currentUrl = useLocation().pathname
@@ -31,8 +31,9 @@ export default function ManagementInsidePage() {
 
   const TENANT_MANAGEMENT_APP_MENU: MenuProps['items'] = useMemo(
     () => [
-      getItem($t('订阅的服务'), 'service', undefined, undefined, undefined, 'team.application.subscription.view'),
       getItem($t('访问授权'), 'authorization', undefined, undefined, undefined, 'team.consumer.authorization.view'),
+      getItem($t('MCP 服务'), 'mcp', undefined, undefined, undefined, 'team.consumer.mcp.view'),
+      getItem($t('订阅的服务'), 'service', undefined, undefined, undefined, 'team.application.subscription.view'),
       getItem($t('消费者管理'), 'setting', undefined, undefined, undefined, 'team.application.application.view')
     ],
     [state.language]
@@ -55,7 +56,7 @@ export default function ManagementInsidePage() {
   }, [accessData, accessInit, TENANT_MANAGEMENT_APP_MENU])
 
   useEffect(() => {
-    setActiveMenu(currentUrl.split('/').pop() || 'service')
+    setActiveMenu(currentUrl.split('/').pop() || 'authorization')
   }, [currentUrl])
 
   const onMenuClick: MenuProps['onClick'] = (node) => {

frontend/packages/market/src/pages/serviceHub/management/ServiceHubManagement.tsx

@@ -336,7 +336,7 @@ export default function ServiceHubManagement() {
               setTableSearchWord={setTableSearchWord}
               editApp={(row: ServiceHubAppListItem) => {
                 setAppName(row.name)
-                navigateTo(`/consumer/${row.team.id}/inside/${row.id}/service`)
+                navigateTo(`/consumer/${row.team.id}/inside/${row.id}/authorization`)
               }}
             />
           )}

frontend/packages/market/src/pages/serviceHub/management/mcpContent.tsx

@@ -0,0 +1,40 @@
+import { $t } from '@common/locales'
+import { IntegrationAIContainer } from '@core/pages/mcpService/IntegrationAIContainer'
+import { Tool } from '@modelcontextprotocol/sdk/types.js'
+import { useEffect, useState } from 'react'
+import { useGlobalContext } from '@common/contexts/GlobalStateContext'
+import McpToolsContainer from '@core/pages/mcpService/McpToolsContainer'
+import { useParams } from 'react-router-dom'
+import { RouterParams } from '@common/const/type'
+
+const mcpContent = () => {
+  const [tools, setTools] = useState<Tool[]>([])
+  const [, forceUpdate] = useState<unknown>(null)
+  const { teamId, appId } = useParams<RouterParams>()
+  const { state } = useGlobalContext()
+  const handleToolsChange = (value: Tool[]) => {
+    setTools(value)
+  }
+  useEffect(() => {
+    forceUpdate({})
+  }, [state.language])
+  return (
+    <div className=" h-full pt-[32px]">
+      <div className="flex items-center justify-between w-full ml-[10px] text-[18px] leading-[25px] pb-[16px]">
+        <span className="font-bold">{$t('MCP 服务')}</span>
+      </div>
+      <div className="h-[calc(100%-41px)] flex flex-col ">
+        <div className="flex mt-[10px] pr-[40px]">
+          <McpToolsContainer tools={tools} />
+          <IntegrationAIContainer
+            consumerParams={{ consumerId: appId!, teamId: teamId! }}
+            type={'consumer'}
+            handleToolsChange={handleToolsChange}
+          ></IntegrationAIContainer>
+        </div>
+      </div>
+    </div>
+  )
+}
+
+export default mcpContent

go.mod

@@ -5,7 +5,7 @@ go 1.23.4
 toolchain go1.23.6
 
 require (
-	github.com/eolinker/ap-account v1.0.15
+	github.com/eolinker/ap-account v1.0.18
 	github.com/eolinker/eosc v0.18.3
 	github.com/eolinker/go-common v1.1.7
 	github.com/gabriel-vasile/mimetype v1.4.4

go.sum

@@ -28,8 +28,8 @@ github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f h1:lO4WD4F/r
 github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f/go.mod h1:cuUVRXasLTGF7a8hSLbxyZXjz+1KgoB3wDUb6vlszIc=
 github.com/dustin/go-humanize v1.0.0 h1:VSnTsYCnlFHaM2/igO1h6X3HA71jcobQuxemgkq4zYo=
 github.com/dustin/go-humanize v1.0.0/go.mod h1:HtrtbFcZ19U5GC7JDqmcUSB87Iq5E25KnS6fMYU6eOk=
-github.com/eolinker/ap-account v1.0.15 h1:n6DJeL6RHZ8eLlZUcY2U3H4d/GPaA5oelAx3R0E6yL8=
-github.com/eolinker/ap-account v1.0.15/go.mod h1:zm/Ivs6waJ/M/nEszhpPmM6g50y/MKO+5eABFAdeD0g=
+github.com/eolinker/ap-account v1.0.18 h1:YgDHoUmAdofPmaGhOQx+vj3+uhsv486kD3KLU/JKmBs=
+github.com/eolinker/ap-account v1.0.18/go.mod h1:zm/Ivs6waJ/M/nEszhpPmM6g50y/MKO+5eABFAdeD0g=
 github.com/eolinker/eosc v0.18.3 h1:3IK5HkAPnJRfLbQ0FR7kWsZr6Y/OiqqGazvN1q2BL5A=
 github.com/eolinker/eosc v0.18.3/go.mod h1:O9PQQXFCpB6fjHf+oFt/LN6EOAv779ItbMixMKCfTfk=
 github.com/eolinker/go-common v1.1.7 h1:bi7wDmlCYQGjS3k8Bz/o+Mo9aMJAzmPsBLXWurxPfwk=

init.go

@@ -4,6 +4,7 @@ package main
 import (
 	_ "github.com/APIParkLab/APIPark/frontend"
 	_ "github.com/APIParkLab/APIPark/gateway/apinto"
+	_ "github.com/APIParkLab/APIPark/login_driver/feishu"
 	_ "github.com/APIParkLab/APIPark/plugins/core"
 	_ "github.com/APIParkLab/APIPark/plugins/openapi"
 	_ "github.com/APIParkLab/APIPark/plugins/permit"

login_driver/feishu/client.go

@@ -0,0 +1,56 @@
+package feishu
+
+import (
+	"bytes"
+	"encoding/json"
+	"fmt"
+	"io"
+	"net/http"
+	"net/url"
+	"time"
+)
+
+var (
+	client = http.Client{
+		Timeout: 10 * time.Second,
+	}
+)
+
+func SendRequest[T any](uri string, method string, header http.Header, query url.Values, body []byte) (*T, error) {
+	if uri == "" {
+		return nil, fmt.Errorf("invalid URL")
+	}
+
+	req, err := http.NewRequest(method, uri, bytes.NewReader(body))
+	if err != nil {
+		return nil, err
+	}
+
+	if query != nil {
+		req.URL.RawQuery = query.Encode()
+	}
+
+	if header != nil {
+		req.Header = header
+	}
+
+	resp, err := client.Do(req)
+	if err != nil {
+		return nil, err
+	}
+	defer resp.Body.Close()
+	respBody, err := io.ReadAll(resp.Body)
+	if err != nil {
+		return nil, err
+	}
+	result := new(T)
+	err = json.Unmarshal(respBody, result)
+	if err != nil {
+		return nil, err
+	}
+	if resp.StatusCode != http.StatusOK {
+		return nil, fmt.Errorf("status code error: %d, response: %s", resp.StatusCode, respBody)
+	}
+
+	return result, nil
+}

login_driver/feishu/entity.go

@@ -0,0 +1,27 @@
+package feishu
+
+type UserTokenResponse struct {
+	Code                  int    `json:"code"`
+	AccessToken           string `json:"access_token"`
+	ExpiresIn             int    `json:"expires_in"`
+	RefreshToken          string `json:"refresh_token"`
+	RefreshTokenExpiresIn int    `json:"refresh_token_expires_in"`
+	TokenType             string `json:"token_type"`
+	Scope                 string `json:"scope"`
+	Error                 string `json:"error"`
+	ErrorDescription      string `json:"error_description"`
+}
+
+type UserInfoResponse struct {
+	Code int      `json:"code"`
+	Msg  string   `json:"msg"`
+	Data UserInfo `json:"data"`
+}
+
+type UserInfo struct {
+	Name    string `json:"name"`
+	OpenID  string `json:"open_id"`
+	UnionId string `json:"union_id"`
+	Email   string `json:"email"`
+	Mobile  string `json:"mobile"`
+}

login_driver/feishu/feishu.go

@@ -0,0 +1,195 @@
+package feishu
+
+import (
+	"context"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"net/http"
+	"net/url"
+
+	"github.com/eolinker/go-common/autowire"
+
+	"github.com/eolinker/ap-account/service/role"
+	"github.com/eolinker/ap-account/service/user"
+
+	"github.com/eolinker/go-common/utils"
+
+	"github.com/google/uuid"
+
+	"gorm.io/gorm"
+
+	"github.com/eolinker/ap-account/service/account"
+
+	"github.com/eolinker/ap-account/auth_driver"
+)
+
+const (
+	name           = "feishu"
+	title          = "飞书"
+	getTokenUri    = "https://open.feishu.cn/open-apis/authen/v2/oauth/token"
+	getUserInfoUri = "https://open.feishu.cn/open-apis/authen/v1/user_info"
+)
+
+var _ auth_driver.IDriver = (*Driver)(nil)
+
+func init() {
+	d := &Driver{}
+
+	auth_driver.Register(name, d)
+}
+
+type Driver struct {
+	isInit            bool
+	accountService    account.IAccountService `autowired:""`
+	userService       user.IUserService       `autowired:""`
+	roleService       role.IRoleService       `autowired:""`
+	roleMemberService role.IRoleMemberService `autowired:""`
+}
+
+func (d *Driver) Init() {
+	if d.isInit {
+		return
+	}
+	autowire.Autowired(&d.accountService)
+	autowire.Autowired(&d.userService)
+	autowire.Autowired(&d.roleService)
+	autowire.Autowired(&d.roleMemberService)
+	d.isInit = true
+}
+
+func (d *Driver) FilterConfig(config map[string]string) {
+	delete(config, "client_secret")
+}
+
+func (d *Driver) Name() string {
+	return name
+}
+
+func (d *Driver) Title() string {
+	return title
+}
+
+func (d *Driver) ThirdLogin(ctx context.Context, args map[string]string) (string, error) {
+	code, ok := args["code"]
+	if !ok {
+		return "", fmt.Errorf("missing code parameter")
+	}
+	clientId, ok := args["client_id"]
+	if !ok {
+		return "", fmt.Errorf("missing client_id parameter")
+	}
+	clientSecret, ok := args["client_secret"]
+	if !ok {
+		return "", fmt.Errorf("missing client_secret parameter")
+	}
+	redirectUri, ok := args["redirect_uri"]
+	if !ok {
+		return "", fmt.Errorf("missing redirect_uri parameter")
+	}
+	u, err := url.Parse(redirectUri)
+	if err != nil {
+		return "", fmt.Errorf("invalid redirect_uri parameter")
+	}
+	query := u.Query()
+	query.Del("code")
+	redirectUri = fmt.Sprintf("%s://%s%s", u.Scheme, u.Host, u.Path)
+	if len(query) > 0 {
+		redirectUri = fmt.Sprintf("%s?%s", redirectUri, query.Encode())
+	}
+	tokenResp, err := getUserToken(code, redirectUri, clientId, clientSecret)
+	if err != nil {
+		return "", err
+	}
+	userInfoResp, err := getUserInfo(tokenResp.TokenType, tokenResp.AccessToken)
+	if err != nil {
+		return "", err
+	}
+	userId := userInfoResp.Data.UnionId
+	username := userInfoResp.Data.Name
+	email := userInfoResp.Data.Email
+	mobile := userInfoResp.Data.Mobile
+	info, err := d.accountService.GetIdentifier(ctx, name, userId)
+	if err != nil {
+		if !errors.Is(err, gorm.ErrRecordNotFound) {
+			return "", err
+		}
+		uId := uuid.NewString()
+
+		err = d.accountService.Save(ctx, name, uId, userId, utils.Md5(fmt.Sprintf("%s%s", uId, userId)))
+		if err != nil {
+			return "", err
+		}
+		_, err = d.userService.Create(ctx, uId, username, email, mobile, name)
+		if err != nil {
+			return "", err
+		}
+		r, err := d.roleService.GetDefaultRole(ctx, role.SystemTarget())
+		if err != nil {
+			return "", err
+		}
+		err = d.roleMemberService.Add(ctx, &role.AddMember{
+			Role:   r.Id,
+			User:   uId,
+			Target: role.SystemTarget(),
+		})
+		if err != nil {
+			return "", err
+		}
+		return uId, nil
+	}
+	_, err = d.userService.Update(ctx, info.Uid, &username, &email, &mobile)
+	if err != nil {
+		return "", err
+	}
+
+	return info.Uid, nil
+}
+
+func getUserToken(code string, redirectUri, clientId string, clientSecret string) (*UserTokenResponse, error) {
+	headers := http.Header{}
+	headers.Set("Content-Type", "application/json")
+	//body := url.Values{}
+	//body.Set("grant_type", "authorization_code")
+	//body.Set("code", code)
+	//body.Set("client_id", clientId)
+	//body.Set("client_secret", clientSecret)
+	//body.Set("redirect_uri", redirectUri)
+	body := map[string]string{
+		"grant_type":    "authorization_code",
+		"code":          code,
+		"client_id":     clientId,
+		"client_secret": clientSecret,
+		"redirect_uri":  redirectUri,
+	}
+	bodyByte, _ := json.Marshal(body)
+	resp, err := SendRequest[UserTokenResponse](getTokenUri, http.MethodPost, headers, nil, bodyByte)
+	if err != nil {
+		return nil, fmt.Errorf("failed to get user token: %w", err)
+	}
+	if resp.Code != 0 {
+		return nil, fmt.Errorf("failed to get user token: %s", resp.ErrorDescription)
+	}
+	return resp, nil
+}
+
+func getUserInfo(tokenType string, token string) (*UserInfoResponse, error) {
+	headers := http.Header{}
+	headers.Set("Content-Type", "application/json")
+	switch tokenType {
+	case "Bearer":
+		headers.Set("Authorization", fmt.Sprintf("Bearer %s", token))
+	}
+	resp, err := SendRequest[UserInfoResponse](getUserInfoUri, http.MethodGet, headers, nil, nil)
+	if err != nil {
+		return nil, fmt.Errorf("failed to get user info: %w", err)
+	}
+	if resp.Code != 0 {
+		return nil, fmt.Errorf("failed to get user info: %s", resp.Msg)
+	}
+	return resp, nil
+}
+
+func (d *Driver) Delete(ctx context.Context, ids ...string) error {
+	return d.accountService.OnRemoveUsers(ctx, ids...)
+}

mcp-server/server.go

@@ -16,6 +16,7 @@ var (
 	mcpServer       = NewServer()
 	ServiceBasePath = "mcp/service"
 	GlobalBasePath  = "mcp/global"
+	AppBasePath     = "mcp/app"
 )
 
 func NewServer() *Server {

module/ai-model/iml.go

@@ -128,17 +128,19 @@ func (i *imlProviderModelModule) DeleteProviderModel(ctx *gin.Context, provider
 		if err := i.providerModelService.Delete(ctx, id); err != nil {
 			return err
 		}
-		err = i.syncGateway(ctx, cluster.DefaultClusterID, []*gateway.DynamicRelease{
-			{
-				BasicItem: &gateway.BasicItem{
-					ID:       fmt.Sprintf("%s#%s", provider, modelInfo.Name),
-					Resource: "ai-model",
+		if p.GetModelConfig().AccessConfigurationStatus {
+			err = i.syncGateway(ctx, cluster.DefaultClusterID, []*gateway.DynamicRelease{
+				{
+					BasicItem: &gateway.BasicItem{
+						ID:       fmt.Sprintf("%s$%s", provider, modelInfo.Name),
+						Resource: "ai-model",
+					},
+					Attr: nil,
 				},
-				Attr: nil,
-			},
-		}, false)
-		if err != nil {
-			return err
+			}, false)
+			if err != nil {
+				return err
+			}
 		}
 
 		p.RemoveModel(id)
@@ -200,7 +202,9 @@ func (i *imlProviderModelModule) AddProviderModel(ctx *gin.Context, provider str
 }
 
 func newModel(provider string, model string, config string) *gateway.DynamicRelease {
-
+	if config == "" {
+		config = "{}"
+	}
 	return &gateway.DynamicRelease{
 		BasicItem: &gateway.BasicItem{
 			ID:          fmt.Sprintf("%s$%s", provider, model),

module/application-authorization/authorization.go

@@ -33,7 +33,8 @@ type IAuthorizationModule interface {
 	// Info 获取项目鉴权详情
 	Info(ctx context.Context, appId string, aid string) (*application_authorization_dto.Authorization, error)
 
-	CheckAPIKeyAuthorization(ctx context.Context, serviceId string, apikey string) (bool, error)
+	CheckAPIKeyAuthorizationByService(ctx context.Context, serviceId string, apikey string) (bool, error)
+	CheckAPIKeyAuthorizationByApp(ctx context.Context, appId string, apikey string) (bool, error)
 
 	//ExportAll(ctx context.Context) ([]*application_authorization_dto.ExportAuthorization, error)
 }

module/application-authorization/iml.go

@@ -44,7 +44,27 @@ type imlAuthorizationModule struct {
 	transaction          store.ITransaction                              `autowired:""`
 }
 
-func (i *imlAuthorizationModule) CheckAPIKeyAuthorization(ctx context.Context, serviceId string, apikey string) (bool, error) {
+func (i *imlAuthorizationModule) CheckAPIKeyAuthorizationByApp(ctx context.Context, appId string, apikey string) (bool, error) {
+	authorizations, err := i.authorizationService.ListByApp(ctx, appId)
+	if err != nil {
+		return false, err
+	}
+	for _, a := range authorizations {
+		if a.Type != "apikey" {
+			continue
+		}
+		cfg := make(map[string]interface{})
+		if a.Config != "" {
+			json.Unmarshal([]byte(a.Config), &cfg)
+		}
+		if cfg["apikey"] == apikey {
+			return true, nil
+		}
+	}
+	return false, nil
+}
+
+func (i *imlAuthorizationModule) CheckAPIKeyAuthorizationByService(ctx context.Context, serviceId string, apikey string) (bool, error) {
 	list, err := i.subscribeService.ListBySubscribeStatus(ctx, serviceId, subscribe.ApplyStatusSubscribe)
 	if err != nil {
 		return false, err

module/mcp/iml.go

@@ -46,18 +46,43 @@ type imlMcpModule struct {
 	releaseService          release.IReleaseService                         `autowired:""`
 }
 
+func (i *imlMcpModule) subscribeServiceIds(ctx context.Context, appId string) ([]string, error) {
+	subscribes, err := i.subscriberService.SubscriptionsByApplication(ctx, appId)
+	if err != nil {
+		return nil, fmt.Errorf("get subscriber error: %w,app id is %s", err, appId)
+	}
+	serviceIds := utils.SliceToSlice(subscribes, func(s *subscribe.Subscribe) string {
+		return s.Service
+	}, func(s *subscribe.Subscribe) bool {
+		return s.ApplyStatus == subscribe.ApplyStatusSubscribe
+	})
+	if len(serviceIds) == 0 {
+		return nil, fmt.Errorf("no subscriber found,app id is %s", appId)
+	}
+	return serviceIds, nil
+}
+
 func (i *imlMcpModule) Services(ctx context.Context, req mcp.CallToolRequest) (*mcp.CallToolResult, error) {
+
 	keyword, _ := req.GetArguments()["keyword"].(string)
-	list, err := i.serviceService.Search(ctx, keyword, map[string]interface{}{
+	appId := utils.Label(ctx, "app")
+	condition := map[string]interface{}{
 		"as_server": true,
-	}, "update_at desc")
+	}
+	if appId != "" {
+		serviceIds, err := i.subscribeServiceIds(ctx, appId)
+		if err != nil {
+			return nil, fmt.Errorf("get subscriber service ids error: %w,app id is %s", err, appId)
+		}
+		condition["uuid"] = serviceIds
+	}
+
+	list, err := i.serviceService.Search(ctx, keyword, condition, "update_at desc")
 	if err != nil {
 		return nil, fmt.Errorf("search service error: %w", err)
 	}
 	if len(list) == 0 {
-		list, err = i.serviceService.Search(ctx, "", map[string]interface{}{
-			"as_server": true,
-		}, "update_at desc")
+		list, err = i.serviceService.Search(ctx, "", condition, "update_at desc")
 		if err != nil {
 			return nil, fmt.Errorf("search service error: %w", err)
 		}
@@ -115,120 +140,61 @@ func (i *imlMcpModule) Services(ctx context.Context, req mcp.CallToolRequest) (*
 
 }
 
-//func (i *imlMcpModule) Apps(ctx context.Context, req mcp.CallToolRequest) (*mcp.CallToolResult, error) {
-//	keyword := req.GetArguments()["keyword"].(string)
-//	condition := make(map[string]interface{})
-//	condition["as_app"] = true
-//	list, err := i.serviceService.Search(ctx, keyword, condition, "update_at desc")
-//	if err != nil {
-//		return nil, fmt.Errorf("search service error: %w", err)
-//	}
-//	if len(list) == 0 {
-//		list, err = i.serviceService.Search(ctx, "", condition, "update_at desc")
-//		if err != nil {
-//			return nil, fmt.Errorf("search service error: %w", err)
-//		}
-//	}
-//	data, _ := json.Marshal(utils.SliceToSlice(list, func(s *service.Service) *mcp_dto.App {
-//		return &mcp_dto.App{
-//			Id:          s.Id,
-//			Name:        s.Name,
-//			Description: s.Name,
-//			CreateTime:  s.CreateTime,
-//			UpdateTime:  s.UpdateTime,
-//		}
-//	}))
-//	return mcp.NewToolResultText(string(data)), nil
-//}
-
 func (i *imlMcpModule) APIs(ctx context.Context, req mcp.CallToolRequest) (*mcp.CallToolResult, error) {
 	serviceId, _ := req.GetArguments()["service"].(string)
-	serviceIds := make([]string, 0, 1)
 	if serviceId == "" {
-		serviceIds = append(serviceIds, serviceId)
+		return nil, fmt.Errorf("service id is empty")
 	}
-	serviceList, err := i.serviceService.ServiceList(ctx)
+	s, err := i.serviceService.Get(ctx, serviceId)
 	if err != nil {
-		return nil, fmt.Errorf("get service list error: %w", err)
+		return nil, fmt.Errorf("get service error: %w,service id is %s", err, serviceId)
+	}
+	appId := utils.Label(ctx, "app")
+	if appId != "" {
+		subscribers, err := i.subscriberService.ListByApplication(ctx, serviceId, appId)
+		if err != nil {
+			return nil, fmt.Errorf("get subscriber error: %w,app id is %s", err, appId)
+		}
+		if len(subscribers) < 1 || subscribers[0].ApplyStatus != subscribe.ApplyStatusSubscribe {
+			return nil, fmt.Errorf("no subscriber found,app id is %s", appId)
+		}
 	}
-	result := make([]*mcp_dto.ServiceAPI, 0, len(serviceList))
 
-	for _, s := range serviceList {
-		serviceRelease, err := i.releaseService.GetRunning(ctx, s.Id)
-		if err != nil {
-			if !errors.Is(err, gorm.ErrRecordNotFound) {
-				return nil, fmt.Errorf("get service release error: %w,service id is %s", err, s.Id)
-			}
-			continue
+	serviceRelease, err := i.releaseService.GetRunning(ctx, serviceId)
+	if err != nil {
+		if !errors.Is(err, gorm.ErrRecordNotFound) {
+			return nil, fmt.Errorf("get service release error: %w,service id is %s", err, s.Id)
 		}
-		_, _, apiDocRelease, _, _, err := i.releaseService.GetReleaseInfos(ctx, serviceRelease.UUID)
-		if err != nil {
-			if !errors.Is(err, gorm.ErrRecordNotFound) {
-				return nil, fmt.Errorf("get service release info error: %w,service id is %s", err, s.Id)
-			}
-			continue
+		return nil, fmt.Errorf("no service found,service id is %s", serviceId)
+	}
+	_, _, apiDocRelease, _, _, err := i.releaseService.GetReleaseInfos(ctx, serviceRelease.UUID)
+	if err != nil {
+		if !errors.Is(err, gorm.ErrRecordNotFound) {
+			return nil, fmt.Errorf("get service release info error: %w,service id is %s", err, s.Id)
 		}
-		commit, err := i.apiDocService.GetDocCommit(ctx, apiDocRelease.Commit)
-		if err != nil {
-			if !errors.Is(err, gorm.ErrRecordNotFound) {
-				return nil, fmt.Errorf("get api doc release error: %w,service id is %s", err, s.Id)
-			}
-			continue
+		return nil, fmt.Errorf("no service found,service id is %s", serviceId)
+	}
+	commit, err := i.apiDocService.GetDocCommit(ctx, apiDocRelease.Commit)
+	if err != nil {
+		if !errors.Is(err, gorm.ErrRecordNotFound) {
+			return nil, fmt.Errorf("get api doc release error: %w,service id is %s", err, s.Id)
 		}
-		T, err := openapi3Loader.LoadFromData([]byte(commit.Data.Content))
-		if err != nil {
-			return nil, fmt.Errorf("load openapi3 error: %w,service id is %s", err, s.Id)
-		}
-		result = append(result, &mcp_dto.ServiceAPI{
-			ServiceID:   s.Id,
-			ServiceName: s.Name,
-			APIDoc:      T,
-		})
+		return nil, fmt.Errorf("no service found,service id is %s", serviceId)
+	}
+	T, err := openapi3Loader.LoadFromData([]byte(commit.Data.Content))
+	if err != nil {
+		return nil, fmt.Errorf("load openapi3 error: %w,service id is %s", err, s.Id)
+	}
+
+	result := &mcp_dto.ServiceAPI{
+		ServiceID:   serviceId,
+		ServiceName: s.Name,
+		APIDoc:      T,
 	}
 	data, _ := json.Marshal(result)
 	return mcp.NewToolResultText(string(data)), nil
 }
 
-//func (i *imlMcpModule) SubscriberAuthorizations(ctx context.Context, req mcp.CallToolRequest) (*mcp.CallToolResult, error) {
-//	serviceId, ok := req.GetArguments()["service"].(string)
-//	if !ok {
-//		return nil, fmt.Errorf("service id is required")
-//	}
-//	subscribes, err := i.subscriberService.Subscribers(ctx, serviceId, subscribe.ApplyStatusSubscribe)
-//	if err != nil {
-//		return nil, fmt.Errorf("get subscriber error: %w,service id is %s", err, serviceId)
-//	}
-//	appIds := utils.SliceToSlice(subscribes, func(s *subscribe.Subscribe) string {
-//		return s.Application
-//	})
-//	if len(appIds) == 0 {
-//		return nil, fmt.Errorf("no subscriber found,service id is %s", serviceId)
-//	}
-//	list, err := i.appAuthorizationService.ListByApp(ctx, appIds...)
-//	if err != nil {
-//		return nil, fmt.Errorf("get app authorization error: %w,app ids is %s", err, appIds)
-//	}
-//	result := utils.SliceToSlice(list, func(a *application_authorization.Authorization) *mcp_dto.AppAuthorization {
-//		return &mcp_dto.AppAuthorization{
-//			Id:        a.UUID,
-//			Name:      a.Name,
-//			position:  a.position,
-//			TokenName: a.TokenName,
-//			Config:    a.Config,
-//		}
-//	}, func(a *application_authorization.Authorization) bool {
-//		if a.Type != "apikey" {
-//			return false
-//		}
-//		if a.ExpireTime != 0 && a.ExpireTime < time.Now().Unix() {
-//			return false
-//		}
-//		return true
-//	})
-//	data, _ := json.Marshal(result)
-//	return mcp.NewToolResultText(string(data)), nil
-//}
-
 var (
 	client = &http.Client{}
 )
@@ -309,8 +275,14 @@ func (i *imlMcpModule) Invoke(ctx context.Context, req mcp.CallToolRequest) (*mc
 	request.Header = headerParam
 	request.Header.Set("Content-Type", contentType)
 	apikey := utils.Label(ctx, "apikey")
+
 	if apikey != "" {
-		request.Header.Set("Authorization", utils.Md5(apikey))
+		appId := utils.Label(ctx, "app")
+		if appId == "" {
+			request.Header.Set("Authorization", utils.Md5(apikey))
+		} else {
+			request.Header.Set("Authorization", apikey)
+		}
 	}
 
 	resp, err := client.Do(request)

module/mcp/module.go

@@ -12,13 +12,7 @@ import (
 type IMcpModule interface {
 	// Services 获取服务列表
 	Services(ctx context.Context, req mcp.CallToolRequest) (*mcp.CallToolResult, error)
-	// Apps 获取应用列表
-	//Apps(ctx context.Context, req mcp.CallToolRequest) (*mcp.CallToolResult, error)
-	// APIs 获取API列表
 	APIs(ctx context.Context, req mcp.CallToolRequest) (*mcp.CallToolResult, error)
-
-	// SubscriberAuthorizations 获取订阅者授权
-	//SubscriberAuthorizations(ctx context.Context, req mcp.CallToolRequest) (*mcp.CallToolResult, error)
 	Invoke(ctx context.Context, req mcp.CallToolRequest) (*mcp.CallToolResult, error)
 }
 

module/publish/iml.go

@@ -185,6 +185,41 @@ func (i *imlPublishModule) getProjectRelease(ctx context.Context, projectID stri
 		Id:      projectID,
 		Version: version,
 	}
+	upstreamProxyHeaders := make([]*gateway.ProxyHeader, 0)
+	var upstreamRelease *gateway.UpstreamRelease
+	if len(upstreamCommitIds) > 0 {
+		upstreamCommits, err := i.upstreamService.ListCommit(ctx, upstreamCommitIds...)
+		if err != nil {
+			return nil, err
+		}
+		for _, c := range upstreamCommits {
+			upstreamRelease = &gateway.UpstreamRelease{
+				BasicItem: &gateway.BasicItem{
+					ID:      c.Target,
+					Version: version,
+					MatchLabels: map[string]string{
+						"serviceId": projectID,
+					},
+				},
+				PassHost: c.Data.PassHost,
+				Scheme:   c.Data.Scheme,
+				Balance:  c.Data.Balance,
+				Timeout:  c.Data.Timeout,
+				Nodes: utils.SliceToSlice(c.Data.Nodes, func(n *upstream.NodeConfig) string {
+					return fmt.Sprintf("%s weight=%d", n.Address, n.Weight)
+				}),
+			}
+
+			upstreamProxyHeaders = utils.SliceToSlice(c.Data.ProxyHeaders, func(n *upstream.ProxyHeader) *gateway.ProxyHeader {
+				return &gateway.ProxyHeader{
+					Key:   n.Key,
+					Value: n.Value,
+					Opt:   n.OptType,
+				}
+			})
+		}
+		r.Upstream = upstreamRelease
+	}
 	apis := make([]*gateway.ApiRelease, 0, len(apiInfos))
 	hasUpstream := len(upstreamCommitIds) > 0
 	for _, a := range apiInfos {
@@ -221,38 +256,15 @@ func (i *imlPublishModule) getProjectRelease(ctx context.Context, projectID stri
 					Opt:   h.OptType,
 				}
 			})
+			apiInfo.ProxyHeaders = append(apiInfo.ProxyHeaders, upstreamProxyHeaders...)
+
 			apiInfo.Retry = proxy.Retry
 			apiInfo.Timeout = proxy.Timeout
 		}
 		apis = append(apis, apiInfo)
 	}
 	r.Apis = apis
-	var upstreamRelease *gateway.UpstreamRelease
-	if len(upstreamCommitIds) > 0 {
-		upstreamCommits, err := i.upstreamService.ListCommit(ctx, upstreamCommitIds...)
-		if err != nil {
-			return nil, err
-		}
-		for _, c := range upstreamCommits {
-			upstreamRelease = &gateway.UpstreamRelease{
-				BasicItem: &gateway.BasicItem{
-					ID:      c.Target,
-					Version: version,
-					MatchLabels: map[string]string{
-						"serviceId": projectID,
-					},
-				},
-				PassHost: c.Data.PassHost,
-				Scheme:   c.Data.Scheme,
-				Balance:  c.Data.Balance,
-				Timeout:  c.Data.Timeout,
-				Nodes: utils.SliceToSlice(c.Data.Nodes, func(n *upstream.NodeConfig) string {
-					return fmt.Sprintf("%s weight=%d", n.Address, n.Weight)
-				}),
-			}
-		}
-		r.Upstream = upstreamRelease
-	}
+
 	if len(strategyCommitIds) > 0 {
 		strategyCommits, err := i.strategyService.ListStrategyCommit(ctx, strategyCommitIds...)
 		if err != nil {
@@ -603,21 +615,22 @@ func (i *imlPublishModule) Publish(ctx context.Context, serviceId string, id str
 			if err != nil {
 				return err
 			}
-			if info.EnableMCP {
-				err = i.updateMCPServer(ctx, serviceId, info.Name, flow.Version)
-				if err != nil {
-					return err
-				}
-			}
-			apidocCommit, err := i.apiDocService.LatestDocCommit(ctx, serviceId)
+
+			apiDocCommit, err := i.apiDocService.LatestDocCommit(ctx, serviceId)
 			if err != nil {
 				return err
 			}
 			isReleased := true
 			i.serviceOverviewService.Update(ctx, serviceId, &service_overview.Update{
-				ReleaseApiCount: &apidocCommit.Data.APICount,
+				ReleaseApiCount: &apiDocCommit.Data.APICount,
 				IsReleased:      &isReleased,
 			})
+			if info.EnableMCP {
+				err = mcp_server.SetServerByOpenapi(serviceId, info.Name, flow.Version, apiDocCommit.Data.Content)
+				if err != nil {
+					return err
+				}
+			}
 		}
 		return i.publishService.SetStatus(ctx, serviceId, id, status)
 	})

module/system-apikey/iml.go

@@ -41,6 +41,46 @@ type imlAPIKeyModule struct {
 	transaction                     store.ITransaction                              `autowired:""`
 }
 
+func (i *imlAPIKeyModule) MyAPIKeysByApp(ctx context.Context, appId string) ([]*system_apikey_dto.AuthorizationItem, error) {
+	appInfo, err := i.serviceService.Get(ctx, appId)
+	if err != nil {
+		return nil, err
+	}
+	auths, err := i.applicationAuthorizationService.ListByApp(ctx, appId)
+	if err != nil {
+		return nil, err
+	}
+	result := make(map[string]*system_apikey_dto.AuthorizationItem)
+	for _, a := range auths {
+		if a.Type != "apikey" {
+			continue
+		}
+
+		m := make(map[string]string)
+		json.Unmarshal([]byte(a.Config), &m)
+		if m["apikey"] == "" {
+			continue
+		}
+		if _, ok := result[appInfo.Id]; !ok {
+			result[appInfo.Id] = &system_apikey_dto.AuthorizationItem{
+				Id:      appInfo.Id,
+				Name:    appInfo.Name,
+				Apikeys: []system_apikey_dto.SimpleItem{},
+			}
+		}
+		result[appInfo.Id].Apikeys = append(result[appInfo.Id].Apikeys, system_apikey_dto.SimpleItem{
+			Id:      a.UUID,
+			Name:    a.Name,
+			Value:   m["apikey"],
+			Expired: a.ExpireTime,
+		})
+
+	}
+	return utils.MapToSlice(result, func(k string, t *system_apikey_dto.AuthorizationItem) *system_apikey_dto.AuthorizationItem {
+		return t
+	}), nil
+}
+
 func (i *imlAPIKeyModule) MyAPIKeysByService(ctx context.Context, serviceId string) ([]*system_apikey_dto.AuthorizationItem, error) {
 	list, err := i.subscribeService.ListBySubscribeStatus(ctx, serviceId, subscribe.ApplyStatusSubscribe)
 	if err != nil {

module/system-apikey/module.go

@@ -19,6 +19,7 @@ type IAPIKeyModule interface {
 	SimpleList(ctx context.Context) ([]*system_apikey_dto.SimpleItem, error)
 	MyAPIKeys(ctx context.Context) ([]*system_apikey_dto.SimpleItem, error)
 	MyAPIKeysByService(ctx context.Context, serviceId string) ([]*system_apikey_dto.AuthorizationItem, error)
+	MyAPIKeysByApp(ctx context.Context, appId string) ([]*system_apikey_dto.AuthorizationItem, error)
 }
 
 func init() {

plugins/core/mcp.go

@@ -15,15 +15,22 @@ func (p *plugin) mcpAPIs() []pm3.Api {
 	serviceMessagePath := fmt.Sprintf("/api/v1/%s/:serviceId/message", mcp_server.ServiceBasePath)
 	globalSSEPath := fmt.Sprintf("/api/v1/%s/sse", mcp_server.GlobalBasePath)
 	globalMessagePath := fmt.Sprintf("/api/v1/%s/message", mcp_server.GlobalBasePath)
+	appSSEPath := fmt.Sprintf("/api/v1/%s/sse", mcp_server.AppBasePath)
+	appMessagePath := fmt.Sprintf("/api/v1/%s/message", mcp_server.AppBasePath)
 	ignore.IgnorePath("login", http.MethodGet, serviceSSEPath)
 	ignore.IgnorePath("login", http.MethodPost, serviceMessagePath)
 	ignore.IgnorePath("login", http.MethodGet, globalSSEPath)
 	ignore.IgnorePath("login", http.MethodPost, globalMessagePath)
+	ignore.IgnorePath("login", http.MethodGet, appSSEPath)
+	ignore.IgnorePath("login", http.MethodPost, appMessagePath)
 	return []pm3.Api{
 		pm3.CreateApiSimple(http.MethodGet, serviceSSEPath, p.mcpController.MCPHandle),
 		pm3.CreateApiSimple(http.MethodPost, serviceMessagePath, p.mcpController.MCPHandle),
 		pm3.CreateApiSimple(http.MethodGet, globalSSEPath, p.mcpController.GlobalMCPHandle),
 		pm3.CreateApiSimple(http.MethodPost, globalMessagePath, p.mcpController.GlobalMCPHandle),
 		pm3.CreateApiWidthDoc(http.MethodGet, "/api/v1/global/mcp/config", []string{"context"}, []string{"config"}, p.mcpController.GlobalMCPConfig),
+		pm3.CreateApiWidthDoc(http.MethodGet, "/api/v1/app/mcp/config", []string{"context", "query:app"}, []string{"config"}, p.mcpController.AppMCPConfig),
+		pm3.CreateApiSimple(http.MethodGet, fmt.Sprintf("/api/v1/%s/:app/sse", mcp_server.AppBasePath), p.mcpController.AppMCPHandle),
+		pm3.CreateApiSimple(http.MethodPost, fmt.Sprintf("/api/v1/%s/:app/message", mcp_server.AppBasePath), p.mcpController.AppMCPHandle),
 	}
 }

plugins/core/system.go

@@ -24,7 +24,7 @@ func (p *plugin) systemApikeyApis() []pm3.Api {
 		pm3.CreateApiWidthDoc(http.MethodDelete, "/api/v1/system/apikey", []string{"context", "query:apikey"}, nil, p.systemAPIKeyController.Delete),
 		pm3.CreateApiWidthDoc(http.MethodGet, "/api/v1/system/apikeys", []string{"context", "query:keyword"}, []string{"apikeys"}, p.systemAPIKeyController.Search),
 		pm3.CreateApiWidthDoc(http.MethodGet, "/api/v1/my/apikeys", []string{"context"}, []string{"apikeys"}, p.systemAPIKeyController.MyAPIKeys),
-		pm3.CreateApiWidthDoc(http.MethodGet, "/api/v1/my/app/apikeys", []string{"context", "query:service"}, []string{"apps"}, p.systemAPIKeyController.MyAPIKeysByService),
+		pm3.CreateApiWidthDoc(http.MethodGet, "/api/v1/my/app/apikeys", []string{"context", "query:service", "query:app"}, []string{"apps"}, p.systemAPIKeyController.MyAPIKeysByService),
 		pm3.CreateApiWidthDoc(http.MethodGet, "/api/v1/simple/system/apikeys", []string{"context"}, []string{"apikeys"}, p.systemAPIKeyController.SimpleList),
 	}
 }

plugins/openapi/mcp.go

@@ -5,18 +5,26 @@ import (
 	"net/http"
 	"strings"
 
-	"github.com/eolinker/go-common/ignore"
-
 	mcp_server "github.com/APIParkLab/APIPark/mcp-server"
+	"github.com/eolinker/go-common/ignore"
 	"github.com/eolinker/go-common/pm3"
 )
 
 func (p *plugin) mcpAPIs() []pm3.Api {
+	globalSSEPath := fmt.Sprintf("/openapi/v1/%s/sse", strings.Trim(mcp_server.GlobalBasePath, "/"))
 	globalMessagePath := fmt.Sprintf("/openapi/v1/%s/message", strings.Trim(mcp_server.GlobalBasePath, "/"))
-	serviceMessagePath := fmt.Sprintf("/openapi/v1/%s/:serviceId/message", strings.Trim(mcp_server.ServiceBasePath, "/"))
+
+	appSSEPath := fmt.Sprintf("/openapi/v1/%s/:app/sse", strings.Trim(mcp_server.AppBasePath, "/"))
+	appMessagePath := fmt.Sprintf("/openapi/v1/%s/:app/message", strings.Trim(mcp_server.AppBasePath, "/"))
+
 	serviceSSEPath := fmt.Sprintf("/openapi/v1/%s/:serviceId/sse", strings.Trim(mcp_server.ServiceBasePath, "/"))
+	serviceMessagePath := fmt.Sprintf("/openapi/v1/%s/:serviceId/message", strings.Trim(mcp_server.ServiceBasePath, "/"))
 	serviceStreamablePath := fmt.Sprintf("/openapi/v1/%s/:serviceId/mcp", strings.Trim(mcp_server.ServiceBasePath, "/"))
+
 	ignore.IgnorePath("openapi", http.MethodPost, globalMessagePath)
+	ignore.IgnorePath("openapi", http.MethodGet, globalSSEPath)
+	ignore.IgnorePath("openapi", http.MethodPost, appMessagePath)
+	ignore.IgnorePath("openapi", http.MethodGet, appSSEPath)
 	ignore.IgnorePath("openapi", http.MethodGet, serviceSSEPath)
 	ignore.IgnorePath("openapi", http.MethodPost, serviceMessagePath)
 	ignore.IgnorePath("openapi", http.MethodGet, serviceStreamablePath)
@@ -24,8 +32,12 @@ func (p *plugin) mcpAPIs() []pm3.Api {
 	ignore.IgnorePath("openapi", http.MethodDelete, serviceStreamablePath)
 
 	return []pm3.Api{
-		pm3.CreateApiSimple(http.MethodGet, fmt.Sprintf("/openapi/v1/%s/sse", strings.Trim(mcp_server.GlobalBasePath, "/")), p.mcpController.GlobalHandleSSE),
+		pm3.CreateApiSimple(http.MethodGet, globalSSEPath, p.mcpController.GlobalHandleSSE),
 		pm3.CreateApiSimple(http.MethodPost, globalMessagePath, p.mcpController.GlobalHandleMessage),
+
+		pm3.CreateApiSimple(http.MethodGet, appSSEPath, p.mcpController.AppHandleSSE),
+		pm3.CreateApiSimple(http.MethodPost, appMessagePath, p.mcpController.AppHandleMessage),
+
 		pm3.CreateApiSimple(http.MethodGet, serviceSSEPath, p.mcpController.ServiceHandleSSE),
 		pm3.CreateApiSimple(http.MethodPost, serviceMessagePath, p.mcpController.ServiceHandleMessage),
 

readme/readme-zh-cn.md

@@ -202,6 +202,16 @@ curl -sSO https://download.apipark.com/install/quick-start.sh; bash quick-start.
 
 # 📕文档
 访问 [APIPark文档](https://docs.apipark.com/docs/deploy) 获取详细的安装指南、API 参考和使用说明。
+<br>
+
+
+
+友情链接
+<a href="https://xroute.ai/">
+
+  <img width="1248" height="158" alt="新建 PPTX 演示文稿 (2)_02(1)" src="https://github.com/user-attachments/assets/3e1cd0c1-c4c3-4f0c-8649-810d76f3166b" />
+
+</a>
 
 <br>
 

resources/access/access.yaml

@@ -131,6 +131,16 @@ system:
             value: 'manager'
             dependents:
               - system.settings.ai_api.view
+      - name: login
+        value: 'login'
+        children:
+          - name: view
+            value: 'view'
+            guest_allow: true
+          - name: manager
+            value: 'manager'
+            dependents:
+              - system.settings.login.view
       - name: ai log
         value: 'ai_log'
         children:
@@ -294,6 +304,17 @@ team:
             value: 'manager_subscribed_services'
             dependents:
               - team.consumer.subscription.manager_subscribed_services
+      - name: mcp
+        cname: MCP
+        value: 'mcp'
+        children:
+          - name: view
+            value: 'view'
+            guest_allow: true
+          - name: manager
+            value: 'manager'
+            dependents:
+            - team.consumer.mcp.view
       - name: authorization
         value: 'authorization'
         children:

resources/access/role.yaml

@@ -26,6 +26,8 @@ system:
       - system.settings.general.view
       - system.settings.log_configuration.manager
       - system.settings.log_configuration.view
+      - system.settings.login.manager
+      - system.settings.login.view
       - system.settings.mcp.view
       - system.settings.mcp.manager
       - system.settings.role.view
@@ -69,6 +71,8 @@ system:
       - system.settings.general.view
       - system.settings.log_configuration.manager
       - system.settings.log_configuration.view
+      - system.settings.login.manager
+      - system.settings.login.view
       - system.settings.ssl_certificate.manager
       - system.settings.ssl_certificate.view
       - system.settings.strategy.view
@@ -88,6 +92,8 @@ team:
     permits:
       - team.consumer.authorization.manager
       - team.consumer.authorization.view
+      - team.consumer.mcp.manager
+      - team.consumer.mcp.view
       - team.consumer.subscription.manager_subscribed_services
       - team.consumer.subscription.subscribe
       - team.consumer.subscription.view_subscribed_service
@@ -161,6 +167,8 @@ team:
     permits:
       - team.consumer.authorization.manager
       - team.consumer.authorization.view
+      - team.consumer.mcp.manager
+      - team.consumer.mcp.view
       - team.consumer.subscription.manager_subscribed_services
       - team.consumer.subscription.subscribe
       - team.consumer.subscription.view_subscribed_service
@@ -172,9 +180,10 @@ team:
   - name: consumer developer
     value: consumer_developer
     permits:
-      - team.consumer.application.manager
       - team.consumer.authorization.manager
       - team.consumer.authorization.view
+      - team.consumer.mcp.manager
+      - team.consumer.mcp.view
       - team.consumer.subscription.subscribe
       - team.consumer.subscription.view_subscribed_service
       - team.team.consumer.view

scripts/qiniu_publish.sh

@@ -22,7 +22,7 @@ echo "login qiniu..."
 qshell account ${AccessKey} ${SecretKey} ${QINIU_NAME}
 
 echo "qshell rput ${QINIU_BUCKET} \"${APP}/images/${Tar}\" ${Tar}"
-qshell rput ${QINIU_BUCKET} "${APP}/images/${Tar}" ${Tar}
+qshell rput --overwrite ${QINIU_BUCKET} "${APP}/images/${Tar}" ${Tar}
 
 rm -f ${Tar}
 docker rmi -f ${ImageName}:${Version}

service/universally/get-softdelete.go

@@ -58,11 +58,12 @@ func (s *imlServiceGetSoftDelete[T, E]) List(ctx context.Context, uuids ...strin
 	return utils.SliceToSlice(list, s.toModelHandler), nil
 }
 func (s *imlServiceGetSoftDelete[T, E]) Search(ctx context.Context, keyword string, condition map[string]interface{}, sortRule ...string) ([]*T, error) {
-	if condition == nil {
-		condition = make(map[string]interface{})
+	w := make(map[string]interface{})
+	for k, v := range condition {
+		w[k] = v
 	}
-	condition[SoftDeleteField] = false
-	ps, err := s.store.Search(ctx, keyword, condition, sortRule...)
+	w[SoftDeleteField] = false
+	ps, err := s.store.Search(ctx, keyword, w, sortRule...)
 	if err != nil {
 		return nil, err
 	}
@@ -70,11 +71,12 @@ func (s *imlServiceGetSoftDelete[T, E]) Search(ctx context.Context, keyword stri
 }
 
 func (s *imlServiceGetSoftDelete[T, E]) SearchByPage(ctx context.Context, keyword string, condition map[string]interface{}, page int, pageSize int, sortRule ...string) ([]*T, int64, error) {
-	if condition == nil {
-		condition = make(map[string]interface{})
+	w := make(map[string]interface{})
+	for k, v := range condition {
+		w[k] = v
 	}
-	condition[SoftDeleteField] = false
-	ps, total, err := s.store.SearchByPage(ctx, keyword, condition, page, pageSize, sortRule...)
+	w[SoftDeleteField] = false
+	ps, total, err := s.store.SearchByPage(ctx, keyword, w, page, pageSize, sortRule...)
 	if err != nil {
 		return nil, 0, err
 	}

service/universally/get.go

@@ -71,7 +71,11 @@ func (s *imlServiceGet[T, E]) List(ctx context.Context, uuids ...string) ([]*T,
 	return utils.SliceToSlice(list, s.toModelHandler), nil
 }
 func (s *imlServiceGet[T, E]) Search(ctx context.Context, keyword string, condition map[string]interface{}, sortRule ...string) ([]*T, error) {
-	ps, err := s.store.Search(ctx, keyword, condition, sortRule...)
+	w := make(map[string]interface{})
+	for k, v := range condition {
+		w[k] = v
+	}
+	ps, err := s.store.Search(ctx, keyword, w, sortRule...)
 	if err != nil {
 		return nil, err
 	}
@@ -79,7 +83,11 @@ func (s *imlServiceGet[T, E]) Search(ctx context.Context, keyword string, condit
 }
 
 func (s *imlServiceGet[T, E]) SearchByPage(ctx context.Context, keyword string, condition map[string]interface{}, page int, pageSize int, sortRule ...string) ([]*T, int64, error) {
-	ps, total, err := s.store.SearchByPage(ctx, keyword, condition, page, pageSize, sortRule...)
+	w := make(map[string]interface{})
+	for k, v := range condition {
+		w[k] = v
+	}
+	ps, total, err := s.store.SearchByPage(ctx, keyword, w, page, pageSize, sortRule...)
 	if err != nil {
 		return nil, 0, err
 	}