fix: 修复 SSO 登录后仍停留在登录界面的问题

- sso_view.py: 修正 token 签发逻辑，添加 id/type 字段并缓存用户
  (与常规登录保持一致，确保 UserToken 验证通过)
- user_token.py: 修正 cache.touch 参数，使用 get_key(token) 而非原始 token
- SSOCallback.vue: 修正 token 提取路径 (res.data.data.token)
- sso.ts: 移除不存在的 is_superuser 字段
- vite.config: 修正 base 路径为 /admin/ (避免子路由下静态资源 404)
- docker-compose.yml: 修正 SSO_REDIRECT_URI 为 /auth/callback
- sso/urls.py: 统一 URL 路径为 sso/exchange-code
- .gitignore: 忽略构建产物 apps/static/admin/
- nginx.conf: 添加缓存控制头

.gitignore

@@ -36,6 +36,8 @@ config.yml
 # Build output
 ui/*/dist/
 ui/dist/
+apps/static/admin/assets/
+apps/static/admin/index.html
 
 # Docker data
 data/

apps/common/auth/handle/impl/user_token.py

@@ -313,7 +313,7 @@ class UserToken(AuthBaseHandle):
             raise AppAuthenticationFailed(1002, _('Login expired'))
         auth_details = get_token_details()
         timeout = CONFIG.get_session_timeout()
-        cache.touch(token, timeout=timeout, version=version)
+        cache.touch(get_key(token), timeout=timeout, version=version)
         user = QuerySet(User).get(id=auth_details['id'])
         if not user.is_active or user.password != cache_token.password:
             raise AppAuthenticationFailed(1002, _('Authentication information is incorrect'))

apps/sso/urls.py

@@ -6,5 +6,5 @@ app_name = "sso"
 
 urlpatterns = [
     path('sso/authorize', SSOView.AuthorizeUrl.as_view()),
-    path('oauth/exchange-code', SSOView.ExchangeCode.as_view()),
+    path('sso/exchange-code', SSOView.ExchangeCode.as_view()),
 ]

apps/sso/views/sso_view.py

@@ -77,11 +77,25 @@ class SSOView(APIView):
             roles = userinfo.get('roles', [])
             SSOView.ExchangeCode._sync_roles(user, roles)
 
-            # Step 5: 签发本地 JWT
-            from common.utils.common import signing
-            token = signing.dumps({'user_id': str(user.id)})
+            # Step 5: 签发本地 JWT（与常规登录保持一致：包含 id、type，并缓存用户）
+            from common.constants.authentication_type import AuthenticationType
+            from common.constants.cache_version import Cache_Version
+            from django.core import signing
+            from django.core.cache import cache
+            from maxkb.const import CONFIG
+
+            token = signing.dumps({
+                'username': user.username,
+                'id': str(user.id),
+                'email': user.email,
+                'type': AuthenticationType.SYSTEM_USER.value,
+            })
             refresh_token = signing.dumps({'user_id': str(user.id), 'type': 'refresh'})
 
+            version, get_key = Cache_Version.TOKEN.value
+            timeout = CONFIG.get_session_timeout()
+            cache.set(get_key(token), user, timeout=timeout, version=version)
+
             return result.success({
                 'token': token,
                 'refresh_token': refresh_token,
@@ -90,7 +104,6 @@ class SSOView(APIView):
                     'username': user.username,
                     'email': user.email,
                     'phone': user.phone,
-                    'is_superuser': user.is_superuser,
                     'is_active': user.is_active,
                     'roles': [user.role],
                 },

apps/static/admin/assets/404-CXXeWXro.js

@@ -1 +0,0 @@
-import{cV as s,h2 as n,fC as a,cx as r,cu as t,gH as c,af as _}from"./admin-KIlVrsVZ.js";const i=""+new URL("404--YtBe-3V.png",import.meta.url).href,l={class:"not-found-container flex-center"},d={class:"text-center"},p=s({__name:"404",setup(m){return n(),(o,e)=>(a(),r("div",l,[t("div",null,[e[0]||(e[0]=t("img",{src:i,width:"250",alt:""},null,-1)),t("h4",d,c(o.$t("common.notFound.title")),1)])]))}}),f=_(p,[["__scopeId","data-v-dfa91201"]]);export{f as default};

apps/static/admin/assets/404-DwSdLUCg.css

@@ -1 +0,0 @@
-.not-found-container[data-v-dfa91201]{height:100vh;width:100vw}

apps/static/admin/assets/500-CPkRZzc6.js

@@ -1 +0,0 @@
-const r=""+new URL("500-DwG1MjTJ.png",import.meta.url).href;export{r as _};

apps/static/admin/assets/ApplicationDialog-2VidQrWp.css

@@ -1 +0,0 @@
-.addTool-dialog{padding:0}.addTool-dialog .el-dialog__header{padding:12px 20px 4px 24px;border-bottom:1px solid var(--el-border-color-light)}.addTool-dialog .el-dialog__footer{padding:12px 24px;border-top:1px solid var(--el-border-color-light)}.addTool-dialog .el-dialog__headerbtn{top:2px;right:6px}

apps/static/admin/assets/ApplicationSetting-BCgtkZYI.css

@@ -1 +0,0 @@
-.application-setting .relate-knowledge-card[data-v-614a851c]{color:var(--app-text-color)}.application-setting .dialog-bg[data-v-614a851c]{border-radius:8px;background:var(--dialog-bg-gradient-color);overflow:hidden;box-sizing:border-box}.application-setting .scrollbar-height-left[data-v-614a851c]{height:calc(var(--app-main-height) - 64px)}.application-setting .scrollbar-height[data-v-614a851c]{padding-top:16px;height:calc(var(--app-main-height) - 96px)}.prologue-md-editor[data-v-614a851c]{height:150px}

apps/static/admin/assets/ImportLarkDocument-CcbQ8KAc.css

@@ -1 +0,0 @@
-.upload-document__component{width:100%;margin:0 auto;overflow:hidden}.upload-document__footer{padding:16px 24px;position:fixed;bottom:0;left:0;background:#fff;width:100%;box-sizing:border-box}.upload-document .upload-component{width:70%;margin:0 auto 20px}

apps/static/admin/assets/KnowLedgeSharedIndex-muvQoj2h.js

@@ -1 +0,0 @@
-import{_ as i}from"./KnowledgeListContainer.vue_vue_type_script_setup_true_lang-Cz_wx8rg.js";import{cV as n,fA as c,g2 as a,fC as p,cx as l,cB as e,hb as t,cA as _,gH as s,cu as d}from"./admin-KIlVrsVZ.js";import"./icon_import-D9IDqZyN.js";import"./BaseForm.vue_vue_type_script_setup_true_lang-BZyjhnPX.js";import"./TemplateStoreDialog.vue_vue_type_style_index_0_lang-CdTFerAi.js";import"./store-CzMZXT1e.js";import"./icon_basic_template-BKMCyIAE.js";import"./template-Q176tR2j.js";import"./data-DP6rzF5_.js";import"./call-8gr0jcLy.js";import"./SyncWebDialog-COWNIyd7.js";import"./index.vue_vue_type_script_setup_true_lang-OBEUmPe_.js";import"./AuthorizedWorkspaceDialog.vue_vue_type_script_setup_true_lang-CRo97vT6.js";import"./permission-api-DW0iUuqz.js";import"./workspace-BOg5VeYz.js";import"./index.vue_vue_type_script_setup_true_lang-DWYAjNXE.js";const u={class:"tool-shared"},h={class:"ml-4 color-text-primary"},I=n({__name:"KnowLedgeSharedIndex",setup(f){return c(()=>{}),(o,b)=>{const r=a("el-breadcrumb-item"),m=a("el-breadcrumb");return p(),l("div",u,[e(i,null,{header:t(()=>[e(m,{"separator-icon":"ArrowRight"},{default:t(()=>[e(r,null,{default:t(()=>[_(s(o.$t("views.shared.shared_resources")),1)]),_:1}),e(r,null,{default:t(()=>[d("h5",h,s(o.$t("views.knowledge.title")),1)]),_:1})]),_:1})]),_:1})])}}});export{I as default};

apps/static/admin/assets/KnowledgeListContainer-CIdw2tYO.css

@@ -1 +0,0 @@
-.sample-center-form .el-form-item{display:flex!important;align-items:center!important}.sample-center-form .el-form-item__label{display:inline-block!important;width:100px!important;flex-shrink:0}.sample-center-form .el-form-item__content{flex:1!important;min-width:0!important}.sample-center-form .el-input,.sample-center-form .el-input__wrapper{width:100%!important}

apps/static/admin/assets/KnowledgeSetting-DbQKIoW-.css

@@ -1 +0,0 @@
-.knowledge-setting[data-v-97616662]{width:70%;margin:0 auto}.knowledge-setting .stat-item[data-v-97616662]{text-align:center;padding:8px 0}.knowledge-setting .stat-item .stat-value[data-v-97616662]{font-size:24px;font-weight:600;color:var(--el-text-color-primary)}.knowledge-setting .stat-item .stat-label[data-v-97616662]{font-size:12px;color:var(--el-text-color-secondary);margin-top:4px}

apps/static/admin/assets/LoginContainer-_MsTFDs9.css

@@ -1 +0,0 @@
-.login-warp[data-v-ace8c672]{height:100vh}.login-warp .login-image[data-v-ace8c672]{background-repeat:no-repeat;background-position:center;background-size:cover;width:100%;height:100%}.login-warp .right-container[data-v-ace8c672]{position:relative}.login-warp .right-container .lang[data-v-ace8c672]{position:absolute;right:20px;top:20px}.login-form-container[data-v-f2584f5f]{width:480px}.login-form-container .login-title[data-v-f2584f5f]{margin-bottom:32px}.login-form-container .login-title .sub-title[data-v-f2584f5f]{font-size:16px}.login-form-container .login-card[data-v-f2584f5f]{padding:18px}

apps/static/admin/assets/MainLayout-BZaYRA2e.js

@@ -1 +0,0 @@
-import{U as x}from"./UserHeader-C4oq5lCw.js";import{S as k,_ as C}from"./index.vue_vue_type_script_setup_true_lang-BIm_xtj5.js";import{_ as g}from"./index.vue_vue_type_style_index_0_lang-O3WO4B9R.js";import{cV as B,h1 as E,h4 as S,g2 as n,fC as e,cx as b,cu as c,gY as i,cv as a,cw as w,fn as l,cB as s,hb as m,ce as u,af as V}from"./admin-KIlVrsVZ.js";import"./ResetPassword.vue_vue_type_script_setup_true_lang-e3BoXlBJ.js";import"./SettingAPIKeyDrawer.vue_vue_type_script_setup_true_lang-Bzrj4KXp.js";const M={class:"app-layout"},N=B({__name:"MainLayout",setup($){const t=E(),{params:{folderId:p},query:{from:o}}=t,_=u(()=>p==="shared"||o==="systemShare"||o==="systemManage"||t.path.includes("resource-management")),{theme:d,user:r}=S(),f=u(()=>d.isDefaultTheme());return(h,D)=>{const y=n("el-alert"),v=n("layout-container");return e(),b("div",M,[c("div",{class:l(["app-header",f.value?"":"custom-header"])},[i(r).isExpire()?(e(),a(y,{key:0,title:h.$t("layout.isExpire"),type:"warning",class:"border-b","show-icon":"",closable:!1},null,8,["title"])):w("",!0),_.value?(e(),a(k,{key:1})):(e(),a(x,{key:2}))],2),c("div",{class:l(["app-main",i(r).isExpire()?"isExpire":""])},[s(v,null,{left:m(()=>[s(g)]),default:m(()=>[s(C)]),_:1})],2)])}}}),z=V(N,[["__scopeId","data-v-09e45a2e"]]);export{z as default};

apps/static/admin/assets/MainLayout-BidErp2w.css

@@ -1 +0,0 @@
-.app-layout[data-v-09e45a2e]{background-color:var(--app-layout-bg-color);height:100%}.app-header[data-v-09e45a2e]{background:var(--app-header-bg-color);position:fixed;width:100%;left:0;top:0;z-index:100}.app-main[data-v-09e45a2e]{position:relative;height:100%;padding:var(--app-header-height) 0 0!important;box-sizing:border-box;overflow:auto}.app-main.isExpire[data-v-09e45a2e]{padding-top:calc(var(--app-header-height) + 40px)!important}

apps/static/admin/assets/McpServersDialog-CTLNnGge.css

@@ -1 +0,0 @@
-.generate-prompt-dialog-bg[data-v-25adbca1]{background:var(--dialog-bg-gradient-color);overflow:hidden;box-sizing:border-box}.generate-prompt-operate[data-v-25adbca1]{position:relative;width:100%;box-sizing:border-box;z-index:10}.generate-prompt-operate[data-v-25adbca1] .operate-textarea{box-shadow:0 6px 24px rgba(var(--el-text-color-primary-rgb),.08);background-color:#fff;border-radius:var(--app-border-radius-large);border:1px solid #ffffff;box-sizing:border-box}.generate-prompt-operate[data-v-25adbca1] .operate-textarea:has(.el-textarea__inner:focus){border:1px solid var(--el-color-primary)}.generate-prompt-operate[data-v-25adbca1] .operate-textarea .el-textarea__inner{border-radius:var(--app-border-radius-large)!important;box-shadow:none;resize:none;padding:13px 16px;box-sizing:border-box;min-height:47px!important;height:0}.generate-prompt-operate[data-v-25adbca1] .operate-textarea .operate{padding:6px 10px}.generate-prompt-operate[data-v-25adbca1] .operate-textarea .operate .el-icon{font-size:20px}.generate-prompt-operate[data-v-25adbca1] .operate-textarea .operate .sent-button{max-height:none}.generate-prompt-operate[data-v-25adbca1] .operate-textarea .operate .sent-button .el-icon{font-size:24px}.generate-prompt-operate[data-v-25adbca1] .operate-textarea .operate .el-loading-spinner{margin-top:-15px}.generate-prompt-operate[data-v-25adbca1] .operate-textarea .operate .el-loading-spinner .circular{width:31px;height:31px}.generate-prompt-operate .video-stop-button[data-v-25adbca1]{box-shadow:0 6px 24px rgba(var(--el-text-color-primary-rgb),.08)}.generate-prompt-operate .video-stop-button[data-v-25adbca1]:hover{background:#fff}