{ "swagger": "2.0", "info": { "description": "用户身份认证与管理服务，提供注册、登录、用户管理、RBAC等功能", "title": "身份服务 API", "contact": {}, "version": "1.0.0" }, "basePath": "/bff/identity/api/v1", "paths": { "/admin/abac-policies": { "get": { "security": [ { "bearerAuth": [] } ], "description": "查询租户的ABAC条件策略列表，支持分页", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "RBAC - 角色" ], "summary": "查询ABAC策略列表", "parameters": [ { "type": "integer", "default": 1, "description": "页码", "name": "page", "in": "query" }, { "type": "integer", "default": 20, "description": "每页数量", "name": "page_size", "in": "query" } ], "responses": { "200": { "description": "策略列表", "schema": { "$ref": "#/definitions/dto.ListResponse-gitee_com_autional_service-identity_internal_handler_dto_ABACPolicyResponse" } } } }, "post": { "security": [ { "bearerAuth": [] } ], "description": "创建新的ABAC条件策略", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "RBAC - 角色" ], "summary": "创建ABAC策略", "parameters": [ { "description": "创建策略请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CreateABACPolicyRequest" } } ], "responses": { "201": { "description": "创建成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_ABACPolicyResponse" } } } } }, "/admin/abac-policies/{policy_id}": { "get": { "security": [ { "bearerAuth": [] } ], "description": "根据策略ID获取ABAC策略详情", "tags": [ "RBAC - 角色" ], "summary": "获取ABAC策略详情", "parameters": [ { "type": "string", "description": "策略ID", "name": "policy_id", "in": "path", "required": true } ], "responses": { "200": { "description": "策略详情", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_ABACPolicyResponse" } } } }, "put": { "security": [ { "bearerAuth": [] } ], "description": "更新指定ABAC策略的配置", "tags": [ "RBAC - 角色" ], "summary": "更新ABAC策略", "parameters": [ { "type": "string", "description": "策略ID", "name": "policy_id", "in": "path", "required": true }, { "description": "更新策略请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UpdateABACPolicyRequest" } } ], "responses": { "200": { "description": "更新成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_ABACPolicyResponse" } } } }, "delete": { "security": [ { "bearerAuth": [] } ], "description": "删除指定的ABAC条件策略", "tags": [ "RBAC - 角色" ], "summary": "删除ABAC策略", "parameters": [ { "type": "string", "description": "策略ID", "name": "policy_id", "in": "path", "required": true } ], "responses": { "204": { "description": "删除成功" } } } }, "/admin/agents": { "get": { "security": [ { "bearerAuth": [] } ], "description": "查询 Non-Human Identity (NHI) Agent 列表，支持按状态和工作负载子类型过滤", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "Admin/Agents" ], "summary": "List Agents", "parameters": [ { "type": "string", "description": "租户ID", "name": "tenant_id", "in": "query", "required": true }, { "type": "string", "description": "状态过滤", "name": "status", "in": "query" }, { "type": "string", "description": "工作负载子类型", "name": "workload_subtype", "in": "query" }, { "type": "integer", "default": 1, "description": "页码", "name": "page", "in": "query" }, { "type": "integer", "default": 20, "description": "每页数量", "name": "page_size", "in": "query" } ], "responses": { "200": { "description": "Agent 列表", "schema": { "$ref": "#/definitions/dto.ListResponse-agent_domain_AgentInfo" } } } }, "post": { "security": [ { "bearerAuth": [] } ], "description": "创建一个新的 Non-Human Identity (NHI) Agent", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "Admin/Agents" ], "summary": "Create Agent", "parameters": [ { "description": "创建 Agent 请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/agent_domain.CreateAgentRequest" } } ], "responses": { "201": { "description": "创建的 Agent", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-agent_domain_AgentInfo" } } } } }, "/admin/agents/{agent_id}": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取指定 Non-Human Identity (NHI) Agent 的详细信息", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "Admin/Agents" ], "summary": "Get Agent", "parameters": [ { "type": "string", "description": "Agent ID", "name": "agent_id", "in": "path", "required": true } ], "responses": { "200": { "description": "Agent 详情", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-agent_domain_AgentInfo" } } } }, "put": { "security": [ { "bearerAuth": [] } ], "description": "更新指定 Non-Human Identity (NHI) Agent 的配置", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "Admin/Agents" ], "summary": "Update Agent", "parameters": [ { "type": "string", "description": "Agent ID", "name": "agent_id", "in": "path", "required": true }, { "description": "更新 Agent 请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/agent_domain.UpdateAgentRequest" } } ], "responses": { "200": { "description": "更新后的 Agent", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-agent_domain_AgentInfo" } } } }, "delete": { "security": [ { "bearerAuth": [] } ], "description": "撤销指定的 Non-Human Identity (NHI) Agent（软删除，状态变为 revoked）", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "Admin/Agents" ], "summary": "Revoke Agent", "parameters": [ { "type": "string", "description": "Agent ID", "name": "agent_id", "in": "path", "required": true } ], "responses": { "200": { "description": "撤销成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/agents/{agent_id}/activity": { "get": { "security": [ { "bearerAuth": [] } ], "description": "查询指定 NHI Agent 的近期操作活动列表。数据源为 agent 操作审计记录；", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "Admin/Agents" ], "summary": "Get Agent Activity", "parameters": [ { "type": "string", "description": "Agent ID", "name": "agent_id", "in": "path", "required": true } ], "responses": { "200": { "description": "活动列表", "schema": { "$ref": "#/definitions/dto.ListResponse-agent_domain_AgentActivityInfo" } } } } }, "/admin/agents/{agent_id}/credentials": { "get": { "security": [ { "bearerAuth": [] } ], "description": "查询指定 Agent 的所有 API 密钥凭证", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "NHI Agents" ], "summary": "List Agent Credentials", "parameters": [ { "type": "string", "description": "Agent ID", "name": "agent_id", "in": "path", "required": true } ], "responses": { "200": { "description": "凭证列表", "schema": { "$ref": "#/definitions/dto.ListResponse-agent_domain_AgentCredentialInfo" } } } }, "post": { "security": [ { "bearerAuth": [] } ], "description": "为指定 Agent 生成新的 API 密钥凭证。返回的 api_key 仅展示一次，请妥善保管。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "NHI Agents" ], "summary": "Create Agent Credential", "parameters": [ { "type": "string", "description": "Agent ID", "name": "agent_id", "in": "path", "required": true }, { "description": "创建凭证请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/agent_domain.CreateAgentCredentialRequest" } } ], "responses": { "201": { "description": "创建的凭证（含一次性 API Key）", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-agent_domain_CreateAgentCredentialResult" } } } } }, "/admin/agents/{agent_id}/credentials/{cred_id}": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取指定 Agent 的单个凭证详情（不含 api_key）", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "NHI Agents" ], "summary": "Get Agent Credential", "parameters": [ { "type": "string", "description": "Agent ID", "name": "agent_id", "in": "path", "required": true }, { "type": "string", "description": "Credential ID", "name": "cred_id", "in": "path", "required": true } ], "responses": { "200": { "description": "凭证详情", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-agent_domain_AgentCredentialInfo" } } } }, "delete": { "security": [ { "bearerAuth": [] } ], "description": "撤销指定 Agent 的 API 密钥凭证", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "NHI Agents" ], "summary": "Revoke Agent Credential", "parameters": [ { "type": "string", "description": "Agent ID", "name": "agent_id", "in": "path", "required": true }, { "type": "string", "description": "Credential ID", "name": "cred_id", "in": "path", "required": true } ], "responses": { "200": { "description": "撤销成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/agents/{agent_id}/credentials/{cred_id}/rotate": { "post": { "security": [ { "bearerAuth": [] } ], "description": "轮换指定 Agent 的 API 密钥凭证：撤销旧凭证并颁发新凭证。返回的 api_key 仅展示一次。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "NHI Agents" ], "summary": "Rotate Agent Credential", "parameters": [ { "type": "string", "description": "Agent ID", "name": "agent_id", "in": "path", "required": true }, { "type": "string", "description": "Credential ID", "name": "cred_id", "in": "path", "required": true } ], "responses": { "200": { "description": "轮换后的新凭证（含一次性 API Key）", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-agent_domain_CreateAgentCredentialResult" } } } } }, "/admin/agents/{agent_id}/permissions": { "get": { "security": [ { "bearerAuth": [] } ], "description": "查询指定 NHI Agent 分配的直接权限列表（rbac user_permissions 按 agent identity 关联）", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "Admin/Agents" ], "summary": "Get Agent Permissions", "parameters": [ { "type": "string", "description": "Agent ID", "name": "agent_id", "in": "path", "required": true } ], "responses": { "200": { "description": "权限列表", "schema": { "$ref": "#/definitions/dto.ListResponse-agent_domain_AgentPermissionInfo" } } } } }, "/admin/auth/api-keys": { "get": { "security": [ { "bearerAuth": [] } ], "description": "管理员查看租户下所有 API Key（不限制所属用户）", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "API Key" ], "summary": "管理员查询 API Key 列表", "parameters": [ { "type": "integer", "default": 1, "description": "页码", "name": "page", "in": "query" }, { "type": "integer", "default": 20, "description": "每页数量", "name": "page_size", "in": "query" }, { "type": "string", "description": "状态筛选: active/inactive/revoked", "name": "status", "in": "query" }, { "type": "string", "description": "环境筛选: live/test", "name": "environment", "in": "query" }, { "type": "string", "description": "搜索名称或前缀", "name": "search", "in": "query" } ], "responses": { "200": { "description": "API Key 列表", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ApiKeyListResponse" } } } } }, "/admin/auth/api-keys/anomalies": { "get": { "security": [ { "bearerAuth": [] } ], "description": "扫描审计日志检测异常模式：高失败率、多IP调用等", "tags": [ "API Key" ], "summary": "安全异常检测", "responses": { "200": { "description": "异常列表", "schema": { "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DataResponse" }, { "type": "object", "properties": { "data": { "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ApiKeyAnomalyResponse" } } } } ] } } } } }, "/admin/auth/api-keys/batch-revoke": { "post": { "security": [ { "bearerAuth": [] } ], "description": "一次吊销多个 API Key（软删除，保留审计记录）", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "API Key" ], "summary": "批量吊销 API Key", "parameters": [ { "description": "批量吊销请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.BatchRevokeRequest" } } ], "responses": { "200": { "description": "吊销结果", "schema": { "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DataResponse" }, { "type": "object", "properties": { "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.BatchRevokeResponse" } } } ] } } } } }, "/admin/auth/api-keys/cleanup-audit-logs": { "post": { "security": [ { "bearerAuth": [] } ], "description": "删除超过指定天数的 API Key 审计日志（内部管理）", "tags": [ "API Key" ], "summary": "清理旧审计日志", "parameters": [ { "type": "integer", "default": 90, "description": "保留天数", "name": "days", "in": "query" } ], "responses": { "200": { "description": "清理结果", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DataResponse" } } } } }, "/admin/auth/api-keys/expiring": { "get": { "security": [ { "bearerAuth": [] } ], "description": "查询租户下将在 N 天内过期的活跃 API Key", "tags": [ "API Key" ], "summary": "获取即将过期的 API Key", "parameters": [ { "type": "integer", "default": 7, "description": "过期天数范围", "name": "days", "in": "query" }, { "type": "integer", "default": 1, "description": "页码", "name": "page", "in": "query" }, { "type": "integer", "default": 20, "description": "每页数量", "name": "page_size", "in": "query" } ], "responses": { "200": { "description": "即将过期的 Key 列表", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ApiKeyListResponse" } } } } }, "/admin/auth/api-keys/stats": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取租户下 API Key 的汇总统计（总量/活跃/已吊销）", "tags": [ "API Key" ], "summary": "管理员 API Key 统计", "responses": { "200": { "description": "统计结果", "schema": { "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DataResponse" }, { "type": "object", "properties": { "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.AdminStatsData" } } } ] } } } } }, "/admin/auth/api-keys/{api_key_id}/force": { "delete": { "security": [ { "bearerAuth": [] } ], "description": "管理员强制吊销任意 API Key，记录操作者信息", "tags": [ "API Key" ], "summary": "管理员强制吊销 API Key", "responses": { "204": { "description": "吊销成功" } } } }, "/admin/consents": { "get": { "security": [ { "bearerAuth": [] } ], "description": "管理员分页查询儿童同意记录（可按状态过滤）", "produces": [ "application/json" ], "tags": [ "未成年人保护" ], "summary": "儿童同意记录列表", "parameters": [ { "type": "string", "description": "状态（pending/approved/denied/expired）", "name": "status", "in": "query" }, { "type": "integer", "description": "页码", "name": "page", "in": "query" }, { "type": "integer", "description": "每页数量", "name": "page_size", "in": "query" } ], "responses": { "200": { "description": "儿童同意记录列表", "schema": { "$ref": "#/definitions/dto.ListResponse-gitee_com_autional_service-identity_internal_handler_dto_ChildrenConsentResponse" } } } } }, "/admin/identity-providers": { "get": { "security": [ { "bearerAuth": [] } ], "description": "分页查询身份提供商列表，支持按类型和状态过滤", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份提供商" ], "summary": "列出身份提供商", "parameters": [ { "type": "string", "description": "提供商类型过滤", "name": "type", "in": "query" }, { "type": "string", "description": "状态过滤: active/inactive", "name": "status", "in": "query" }, { "type": "integer", "default": 1, "description": "页码", "name": "page", "in": "query" }, { "type": "integer", "default": 20, "description": "每页条数", "name": "page_size", "in": "query" } ], "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.IDPListResponse" } }, "401": { "description": "Unauthorized", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "Internal Server Error", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } }, "post": { "security": [ { "bearerAuth": [] } ], "description": "创建新的身份提供商（OAuth/OIDC/SAML/Social）", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份提供商" ], "summary": "创建身份提供商", "parameters": [ { "description": "创建请求", "name": "body", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CreateIDPRequest" } } ], "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.IDPDetailResponse" } }, "400": { "description": "Bad Request", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "Unauthorized", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "Internal Server Error", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/identity-providers/import-oidc-discovery": { "post": { "security": [ { "bearerAuth": [] } ], "description": "从OIDC discovery URL导入身份提供商配置", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份提供商" ], "summary": "导入OIDC Discovery", "parameters": [ { "description": "OIDC discovery URL", "name": "body", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ImportOIDCDiscoveryRequest" } } ], "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.IDPDetailResponse" } }, "400": { "description": "Bad Request", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "Unauthorized", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "Internal Server Error", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/identity-providers/import-saml-metadata": { "post": { "security": [ { "bearerAuth": [] } ], "description": "从SAML metadata URL导入身份提供商配置", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份提供商" ], "summary": "导入SAML Metadata", "parameters": [ { "description": "SAML metadata URL", "name": "body", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ImportSAMLMetadataRequest" } } ], "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.IDPDetailResponse" } }, "400": { "description": "Bad Request", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "Unauthorized", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "Internal Server Error", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/identity-providers/{provider_id}": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取指定身份提供商的详细配置", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份提供商" ], "summary": "获取身份提供商详情", "parameters": [ { "type": "string", "description": "提供商ID", "name": "provider_id", "in": "path", "required": true } ], "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.IDPDetailResponse" } }, "401": { "description": "Unauthorized", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "404": { "description": "Not Found", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "Internal Server Error", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } }, "put": { "security": [ { "bearerAuth": [] } ], "description": "更新身份提供商的配置信息", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份提供商" ], "summary": "更新身份提供商", "parameters": [ { "type": "string", "description": "提供商ID", "name": "provider_id", "in": "path", "required": true }, { "description": "更新请求", "name": "body", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UpdateIDPRequest" } } ], "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.IDPDetailResponse" } }, "400": { "description": "Bad Request", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "Unauthorized", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "404": { "description": "Not Found", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "Internal Server Error", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } }, "delete": { "security": [ { "bearerAuth": [] } ], "description": "删除指定的身份提供商", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份提供商" ], "summary": "删除身份提供商", "parameters": [ { "type": "string", "description": "提供商ID", "name": "provider_id", "in": "path", "required": true } ], "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "Unauthorized", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "404": { "description": "Not Found", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "Internal Server Error", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/identity-providers/{provider_id}/activate": { "post": { "security": [ { "bearerAuth": [] } ], "description": "将指定身份提供商状态设置为 active", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份提供商" ], "summary": "启用身份提供商", "parameters": [ { "type": "string", "description": "提供商ID", "name": "provider_id", "in": "path", "required": true } ], "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.IDPDetailResponse" } }, "401": { "description": "Unauthorized", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "404": { "description": "Not Found", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "Internal Server Error", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/identity-providers/{provider_id}/attribute-mapping": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取身份提供商的属性映射配置", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份提供商" ], "summary": "获取属性映射", "parameters": [ { "type": "string", "description": "身份提供商ID", "name": "provider_id", "in": "path", "required": true } ], "responses": { "200": { "description": "OK", "schema": { "type": "object" } }, "401": { "description": "Unauthorized", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "404": { "description": "Not Found", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "Internal Server Error", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } }, "put": { "security": [ { "bearerAuth": [] } ], "description": "更新身份提供商的属性映射配置", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份提供商" ], "summary": "更新属性映射", "parameters": [ { "type": "string", "description": "身份提供商ID", "name": "provider_id", "in": "path", "required": true }, { "description": "属性映射", "name": "body", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UpdateAttributeMappingRequest" } } ], "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "400": { "description": "Bad Request", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "Unauthorized", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "404": { "description": "Not Found", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "Internal Server Error", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/identity-providers/{provider_id}/certificates": { "get": { "security": [ { "bearerAuth": [] } ], "description": "分页列出指定身份提供商的证书", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份提供商" ], "summary": "列出证书", "parameters": [ { "type": "string", "description": "提供商ID", "name": "provider_id", "in": "path", "required": true }, { "type": "integer", "default": 1, "description": "页码", "name": "page", "in": "query" }, { "type": "integer", "default": 20, "description": "每页条数", "name": "page_size", "in": "query" } ], "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CertificateListResponse" } }, "401": { "description": "Unauthorized", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "Internal Server Error", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } }, "post": { "security": [ { "bearerAuth": [] } ], "description": "为身份提供商上传签名/加密证书", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份提供商" ], "summary": "上传证书", "parameters": [ { "type": "string", "description": "提供商ID", "name": "provider_id", "in": "path", "required": true }, { "description": "证书信息", "name": "body", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CreateCertificateRequest" } } ], "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CertificateDetailResponse" } }, "400": { "description": "Bad Request", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "Unauthorized", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "404": { "description": "Not Found", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "Internal Server Error", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/identity-providers/{provider_id}/certificates/{cert_id}": { "delete": { "security": [ { "bearerAuth": [] } ], "description": "吊销并删除指定证书", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份提供商" ], "summary": "删除证书", "parameters": [ { "type": "string", "description": "提供商ID", "name": "provider_id", "in": "path", "required": true }, { "type": "string", "description": "证书ID", "name": "cert_id", "in": "path", "required": true } ], "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "Unauthorized", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "404": { "description": "Not Found", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "Internal Server Error", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/identity-providers/{provider_id}/certificates/{cert_id}/rotate": { "post": { "security": [ { "bearerAuth": [] } ], "description": "吊销旧证书并上传新证书", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份提供商" ], "summary": "证书轮转", "parameters": [ { "type": "string", "description": "提供商ID", "name": "provider_id", "in": "path", "required": true }, { "type": "string", "description": "旧证书ID", "name": "cert_id", "in": "path", "required": true }, { "description": "新证书信息", "name": "body", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RotateCertificateRequest" } } ], "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CertificateDetailResponse" } }, "400": { "description": "Bad Request", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "Unauthorized", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "404": { "description": "Not Found", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "Internal Server Error", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/identity-providers/{provider_id}/deactivate": { "post": { "security": [ { "bearerAuth": [] } ], "description": "将指定身份提供商状态设置为 inactive", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份提供商" ], "summary": "停用身份提供商", "parameters": [ { "type": "string", "description": "提供商ID", "name": "provider_id", "in": "path", "required": true } ], "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.IDPDetailResponse" } }, "401": { "description": "Unauthorized", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "404": { "description": "Not Found", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "Internal Server Error", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/identity-providers/{provider_id}/jit-config": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取身份提供商的JIT（Just-In-Time）配置", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份提供商" ], "summary": "获取JIT配置", "parameters": [ { "type": "string", "description": "提供商ID", "name": "provider_id", "in": "path", "required": true } ], "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "Unauthorized", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "404": { "description": "Not Found", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "Internal Server Error", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } }, "put": { "security": [ { "bearerAuth": [] } ], "description": "更新身份提供商的JIT（Just-In-Time）配置", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份提供商" ], "summary": "更新JIT配置", "parameters": [ { "type": "string", "description": "提供商ID", "name": "provider_id", "in": "path", "required": true }, { "description": "JIT配置体", "name": "body", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UpdateJITConfigRequest" } } ], "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "400": { "description": "Bad Request", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "Unauthorized", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "404": { "description": "Not Found", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "Internal Server Error", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/identity-providers/{provider_id}/stats": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取身份提供商的使用统计数据（用户数、登录次数、最后登录时间）", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份提供商" ], "summary": "获取提供商统计", "parameters": [ { "type": "string", "description": "提供商ID", "name": "provider_id", "in": "path", "required": true } ], "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "Unauthorized", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "404": { "description": "Not Found", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "Internal Server Error", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/identity-providers/{provider_id}/test": { "post": { "security": [ { "bearerAuth": [] } ], "description": "测试指定身份提供商的连接配置是否有效", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份提供商" ], "summary": "测试身份提供商连接", "parameters": [ { "type": "string", "description": "提供商ID", "name": "provider_id", "in": "path", "required": true } ], "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "400": { "description": "Bad Request", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "Unauthorized", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "404": { "description": "Not Found", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "Internal Server Error", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/identity-providers/{provider_id}/users": { "get": { "security": [ { "bearerAuth": [] } ], "description": "分页查询通过指定身份提供商登录的用户列表", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份提供商" ], "summary": "获取提供商关联用户", "parameters": [ { "type": "string", "description": "提供商ID", "name": "provider_id", "in": "path", "required": true }, { "type": "integer", "default": 1, "description": "页码", "name": "page", "in": "query" }, { "type": "integer", "default": 20, "description": "每页条数", "name": "page_size", "in": "query" } ], "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "Unauthorized", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "404": { "description": "Not Found", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "Internal Server Error", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/impersonate": { "post": { "security": [ { "bearerAuth": [] } ], "description": "管理员直接以目标用户身份登录，返回access_token/refresh_token，需要super_admin角色", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "管理员模拟用户登录", "parameters": [ { "description": "模拟请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.AdminImpersonateRequest" } } ], "responses": { "200": { "description": "模拟成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.AdminImpersonateResponseWrapper" } } } } }, "/admin/iots": { "get": { "security": [ { "bearerAuth": [] } ], "description": "查询 Non-Human Identity (NHI) IoT Device 列表，支持按状态和工作负载子类型过滤", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "Admin/IoTs" ], "summary": "List Devices", "parameters": [ { "type": "string", "description": "状态过滤", "name": "status", "in": "query" }, { "type": "string", "description": "工作负载子类型", "name": "workload_subtype", "in": "query" }, { "type": "integer", "default": 1, "description": "页码", "name": "page", "in": "query" }, { "type": "integer", "default": 20, "description": "每页数量", "name": "page_size", "in": "query" } ], "responses": { "200": { "description": "IoT Device 列表", "schema": { "$ref": "#/definitions/dto.ListResponse-device_domain_DeviceInfo" } } } }, "post": { "security": [ { "bearerAuth": [] } ], "description": "创建一个新的 Non-Human Identity (NHI) IoT Device", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "Admin/IoTs" ], "summary": "Create Device", "parameters": [ { "description": "创建设备请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/device_domain.CreateDeviceRequest" } } ], "responses": { "201": { "description": "创建的 Device", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-device_domain_DeviceInfo" } } } } }, "/admin/iots/{iot_id}": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取指定 Non-Human Identity (NHI) IoT Device 的详细信息", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "Admin/IoTs" ], "summary": "Get Device", "parameters": [ { "type": "string", "description": "设备 ID", "name": "iot_id", "in": "path", "required": true } ], "responses": { "200": { "description": "设备详情", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-device_domain_DeviceInfo" } } } }, "delete": { "security": [ { "bearerAuth": [] } ], "description": "撤销指定的 Non-Human Identity (NHI) IoT Device（软删除，状态变为 revoked）", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "Admin/IoTs" ], "summary": "Revoke Device", "parameters": [ { "type": "string", "description": "设备 ID", "name": "iot_id", "in": "path", "required": true } ], "responses": { "200": { "description": "撤销成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/ldap/health": { "get": { "description": "Get health status of all registered LDAP directories", "produces": [ "application/json" ], "tags": [ "admin" ], "summary": "LDAP directory health check", "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-array_gitee_com_autional_service-identity_internal_handler_dto_LdapHealthResponse" } } } } }, "/admin/ldap/test-connection": { "post": { "description": "Test connection to a specific LDAP/AD directory", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "admin" ], "summary": "Test LDAP directory connection", "parameters": [ { "description": "Directory name", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LdapTestConnectionRequest" } } ], "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_LdapTestConnectionResponse" } } } } }, "/admin/ldap/{name}/group-role-mapping": { "get": { "tags": [ "admin" ], "summary": "Get LDAP group-role mapping", "parameters": [ { "type": "string", "description": "Directory name", "name": "name", "in": "path", "required": true } ], "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_LdapGroupRoleMappingResponse" } } } }, "put": { "tags": [ "admin" ], "summary": "Update LDAP group-role mapping", "parameters": [ { "type": "string", "description": "Directory name", "name": "name", "in": "path", "required": true }, { "description": "Mapping", "name": "body", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LdapGroupRoleMappingRequest" } } ], "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_LdapGroupRoleMappingResponse" } } } } }, "/admin/maker-checker": { "get": { "security": [ { "bearerAuth": [] } ], "description": "分页查询双人复核记录，支持按状态过滤", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "双人复核" ], "summary": "列出双人复核记录", "parameters": [ { "enum": [ "recorded", "approved", "rejected", "expired" ], "type": "string", "description": "状态过滤", "name": "status", "in": "query" }, { "type": "integer", "default": 1, "description": "页码", "name": "page", "in": "query" }, { "type": "integer", "default": 20, "description": "每页数量", "name": "page_size", "in": "query" } ], "responses": { "200": { "description": "记录列表", "schema": { "$ref": "#/definitions/dto.ListResponse-gitee_com_autional_service-identity_internal_handler_dto_MakerCheckerRecordResponse" } } } } }, "/admin/maker-checker/{record_id}": { "delete": { "security": [ { "bearerAuth": [] } ], "description": "根据记录ID删除指定的双人复核记录（Maker-Checker）", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "双人复核" ], "summary": "删除双人复核记录", "parameters": [ { "type": "string", "description": "记录ID", "name": "record_id", "in": "path", "required": true } ], "responses": { "200": { "description": "删除成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-string" } } } } }, "/admin/policies/nhi": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取当前租户的NHI（非人类身份）策略配置，包括Agent/Robot/Device限制和默认值", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "NHI - 管理" ], "summary": "获取NHI策略", "responses": { "200": { "description": "当前NHI策略", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.NHIPolicyResponseWrapper" } } } }, "put": { "security": [ { "bearerAuth": [] } ], "description": "更新当前租户的NHI（非人类身份）策略配置", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "NHI - 管理" ], "summary": "更新NHI策略", "parameters": [ { "description": "NHI策略更新请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.NHIPolicyRequest" } } ], "responses": { "200": { "description": "更新后的NHI策略", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.NHIPolicyResponseWrapper" } } } } }, "/admin/robots": { "get": { "security": [ { "bearerAuth": [] } ], "description": "Query Non-Human Identity (NHI) Robot list", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "Admin/Robots" ], "summary": "List Robots", "parameters": [ { "type": "string", "description": "Status filter", "name": "status", "in": "query" }, { "type": "string", "description": "Workload subtype filter", "name": "workload_subtype", "in": "query" }, { "type": "integer", "default": 1, "description": "Page number", "name": "page", "in": "query" }, { "type": "integer", "default": 20, "description": "Page size", "name": "page_size", "in": "query" } ], "responses": { "200": { "description": "Robot list", "schema": { "$ref": "#/definitions/dto.ListResponse-robot_domain_RobotInfo" } } } }, "post": { "security": [ { "bearerAuth": [] } ], "description": "Create a new Non-Human Identity (NHI) Robot", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "Admin/Robots" ], "summary": "Create Robot", "parameters": [ { "description": "Create Robot request", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/robot_domain.CreateRobotRequest" } } ], "responses": { "201": { "description": "Created Robot", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-robot_domain_RobotInfo" } } } } }, "/admin/robots/{robot_id}": { "get": { "security": [ { "bearerAuth": [] } ], "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "Admin/Robots" ], "summary": "Get Robot", "parameters": [ { "type": "string", "description": "Robot ID", "name": "robot_id", "in": "path", "required": true } ], "responses": { "200": { "description": "Robot details", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-robot_domain_RobotInfo" } } } }, "put": { "security": [ { "bearerAuth": [] } ], "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "Admin/Robots" ], "summary": "Update Robot", "parameters": [ { "type": "string", "description": "Robot ID", "name": "robot_id", "in": "path", "required": true }, { "description": "Update Robot request", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/robot_domain.UpdateRobotRequest" } } ], "responses": { "200": { "description": "Updated Robot", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-robot_domain_RobotInfo" } } } }, "delete": { "security": [ { "bearerAuth": [] } ], "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "Admin/Robots" ], "summary": "Delete Robot", "parameters": [ { "type": "string", "description": "Robot ID", "name": "robot_id", "in": "path", "required": true } ], "responses": { "200": { "description": "Deleted", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/robots/{robot_id}/commission": { "post": { "security": [ { "bearerAuth": [] } ], "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "Admin/Robots" ], "summary": "Commission Robot", "parameters": [ { "type": "string", "description": "Robot ID", "name": "robot_id", "in": "path", "required": true } ], "responses": { "200": { "description": "Commissioned Robot", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-robot_domain_RobotInfo" } } } } }, "/admin/robots/{robot_id}/decommission": { "post": { "security": [ { "bearerAuth": [] } ], "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "Admin/Robots" ], "summary": "Decommission Robot", "parameters": [ { "type": "string", "description": "Robot ID", "name": "robot_id", "in": "path", "required": true } ], "responses": { "200": { "description": "Decommissioned Robot", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-robot_domain_RobotInfo" } } } } }, "/admin/robots/{robot_id}/intent": { "post": { "security": [ { "bearerAuth": [] } ], "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "Admin/Robots" ], "summary": "Issue Intent Token", "parameters": [ { "type": "string", "description": "Robot ID", "name": "robot_id", "in": "path", "required": true }, { "description": "Intent Token request", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/robot_handler.IssueIntentTokenRequest" } } ], "responses": { "200": { "description": "Intent Token", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-robot_handler_IssueIntentTokenResponse" } } } } }, "/admin/robots/{robot_id}/intent/revoke": { "post": { "security": [ { "bearerAuth": [] } ], "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "Admin/Robots" ], "summary": "Revoke Intent Token", "parameters": [ { "type": "string", "description": "Robot ID", "name": "robot_id", "in": "path", "required": true }, { "description": "Revoke intent token request", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/robot_handler.RevokeIntentTokenRequest" } } ], "responses": { "200": { "description": "Revoked", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/role-activations": { "get": { "security": [ { "bearerAuth": [] } ], "description": "管理员分页查询所有角色激活记录，支持按状态过滤", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "RBAC - 角色" ], "summary": "查询角色激活记录", "parameters": [ { "type": "string", "description": "激活状态过滤", "name": "status", "in": "query" }, { "type": "integer", "default": 1, "description": "页码", "name": "page", "in": "query" }, { "type": "integer", "default": 20, "description": "每页数量", "name": "page_size", "in": "query" } ], "responses": { "200": { "description": "角色激活列表", "schema": { "$ref": "#/definitions/dto.ListResponse-gitee_com_autional_service-identity_internal_handler_dto_ActivationResponse" } }, "400": { "description": "请求参数无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/role-activations/{role_activation_id}/revoke": { "post": { "security": [ { "bearerAuth": [] } ], "description": "管理员撤销正在生效的角色激活，立即移除用户的提权权限", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "RBAC - 角色" ], "summary": "撤销角色激活", "parameters": [ { "type": "string", "description": "激活记录ID", "name": "role_activation_id", "in": "path", "required": true }, { "description": "撤销请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RevokeActivationRequest" } } ], "responses": { "200": { "description": "撤销成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "400": { "description": "请求参数无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/security/auth-config": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取当前认证安全配置，包含密码策略和登录安全设置", "produces": [ "application/json" ], "tags": [ "安全策略" ], "summary": "获取认证配置", "responses": { "200": { "description": "认证配置", "schema": { "type": "object" } } } }, "put": { "security": [ { "bearerAuth": [] } ], "description": "运行时更新认证安全配置，包含密码策略和登录安全设置", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "安全策略" ], "summary": "更新认证配置", "parameters": [ { "description": "认证配置更新请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UpdateAuthConfigRequest" } } ], "responses": { "200": { "description": "更新成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/security/password-policy": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取当前的密码策略配置", "produces": [ "application/json" ], "tags": [ "安全策略" ], "summary": "获取密码策略", "responses": { "200": { "description": "密码策略", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DataResponse" } } } }, "put": { "security": [ { "bearerAuth": [] } ], "description": "运行时更新密码策略配置，支持多租户差异化设置", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "安全策略" ], "summary": "更新密码策略", "parameters": [ { "description": "密码策略更新请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UpdatePasswordPolicyRequest" } } ], "responses": { "200": { "description": "更新成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/security/password-stats": { "get": { "security": [ { "bearerAuth": [] } ], "description": "返回当前租户的密码统计信息，包括总数、活跃、过期、24小时变更和重置数", "produces": [ "application/json" ], "tags": [ "安全策略" ], "summary": "获取密码统计", "responses": { "200": { "description": "密码统计", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-any" } } } } }, "/admin/security/risk-config": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取当前租户的自适应风险评分配置（阈值/信号权重/学习期）", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "安全管理" ], "summary": "获取风险配置", "responses": { "200": { "description": "风险配置", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-handler_riskConfigResponse" } } } }, "put": { "security": [ { "bearerAuth": [] } ], "description": "更新租户的自适应风险评分阈值和信号权重", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "安全管理" ], "summary": "更新风险配置", "parameters": [ { "description": "风险配置", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/handler.riskConfigRequest" } } ], "responses": { "200": { "description": "更新后的配置", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-handler_riskConfigResponse" } } } } }, "/admin/security/risk-config/reset": { "post": { "security": [ { "bearerAuth": [] } ], "description": "删除自定义配置，恢复系统默认值", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "安全管理" ], "summary": "重置风险配置", "responses": { "200": { "description": "默认配置", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-handler_riskConfigResponse" } } } } }, "/admin/security/risk-dashboard": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取租户风险全景：今日事件/评分分布/事件类型TopN/高风险用户Top5/7日趋势", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "安全管理" ], "summary": "风险仪表盘", "responses": { "200": { "description": "风险仪表盘", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-handler_riskDashboardResponse" } }, "401": { "description": "未认证", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "403": { "description": "权限不足", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/security/risk-events": { "get": { "security": [ { "bearerAuth": [] } ], "tags": [ "安全策略" ], "summary": "风险事件列表", "parameters": [ { "type": "string", "description": "事件类型", "name": "event_type", "in": "query" }, { "type": "string", "description": "用户ID", "name": "user_id", "in": "query" }, { "type": "integer", "description": "最低风险分数", "name": "min_score", "in": "query" }, { "type": "string", "description": "开始日期 (RFC3339)", "name": "start_date", "in": "query" }, { "type": "string", "description": "结束日期 (RFC3339)", "name": "end_date", "in": "query" } ], "responses": { "200": { "description": "风险事件列表", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RiskEventListResponse" } } } } }, "/admin/security/risk-events/aggregation": { "get": { "security": [ { "bearerAuth": [] } ], "tags": [ "安全策略" ], "summary": "风险事件聚合", "parameters": [ { "type": "string", "description": "开始日期 (RFC3339)", "name": "start_date", "in": "query" }, { "type": "string", "description": "结束日期 (RFC3339)", "name": "end_date", "in": "query" } ], "responses": { "200": { "description": "聚合数据", "schema": { "type": "object" } } } } }, "/admin/users": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取租户下的用户列表，支持按状态和关键字搜索", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "查询用户列表", "parameters": [ { "type": "string", "description": "用户状态", "name": "status", "in": "query" }, { "type": "string", "description": "搜索关键字", "name": "search", "in": "query" }, { "type": "integer", "default": 1, "description": "页码", "name": "page", "in": "query" }, { "type": "integer", "default": 20, "description": "每页数量", "name": "limit", "in": "query" } ], "responses": { "200": { "description": "用户列表", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UserListResponse" } } } }, "post": { "security": [ { "bearerAuth": [] } ], "description": "创建新用户账号并返回用户信息", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "创建用户", "parameters": [ { "description": "创建用户请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.HTTPUserCreateRequest" } } ], "responses": { "201": { "description": "创建成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CreateUserResponse" } } } } }, "/admin/users/batch": { "post": { "security": [ { "bearerAuth": [] } ], "description": "批量创建多个用户，单个失败不影响其他用户", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "批量创建用户", "parameters": [ { "description": "批量创建请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.BatchCreateUserRequest" } } ], "responses": { "200": { "description": "批量创建结果", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DataResponse" } } } } }, "/admin/users/batch/status": { "post": { "security": [ { "bearerAuth": [] } ], "description": "批量更新多个用户的状态", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "批量更新用户状态", "parameters": [ { "description": "批量更新请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.BatchUpdateUserStatusRequest" } } ], "responses": { "200": { "description": "更新成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/users/merge": { "post": { "security": [ { "bearerAuth": [] } ], "description": "将两个用户合并为一个，保留主账户，合并从账户的身份、角色和关联数据", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "合并用户", "parameters": [ { "description": "合并请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.MergeUsersRequest" } } ], "responses": { "200": { "description": "合并结果", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DataResponse" } } } } }, "/admin/users/{user_id}": { "get": { "security": [ { "bearerAuth": [] } ], "description": "根据用户ID获取用户详细信息和身份列表", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "获取用户详情", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true } ], "responses": { "200": { "description": "用户信息", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UserDetailResponse" } } } }, "put": { "security": [ { "bearerAuth": [] } ], "description": "更新指定用户的状态、MFA设置和元数据。变更 email 时必须提供 reason（61002205 拒绝缺失审计原因）", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "更新用户信息", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true }, { "description": "更新用户请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UserUpdateRequest" } } ], "responses": { "200": { "description": "更新成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UpdateUserResponse" } } } }, "delete": { "security": [ { "bearerAuth": [] } ], "description": "根据用户ID删除用户，支持永久删除", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "删除用户", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true }, { "type": "boolean", "description": "是否永久删除", "name": "permanent", "in": "query" } ], "responses": { "204": { "description": "删除成功" } } } }, "/admin/users/{user_id}/account-unlocks": { "post": { "security": [ { "bearerAuth": [] } ], "description": "解锁指定用户的账户", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "解锁账户", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true }, { "description": "解锁请求", "name": "request", "in": "body", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UnlockAccountRequest" } } ], "responses": { "200": { "description": "解锁成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/users/{user_id}/children-consent/deny": { "post": { "security": [ { "bearerAuth": [] } ], "description": "管理员拒绝家长/儿童同意，标记未成年人账户为拒绝状态", "produces": [ "application/json" ], "tags": [ "未成年人保护" ], "summary": "拒绝儿童同意", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true } ], "responses": { "200": { "description": "拒绝成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ChildrenConsentResponse" } } } } }, "/admin/users/{user_id}/children-consent/verify": { "post": { "security": [ { "bearerAuth": [] } ], "description": "管理员验证家长/儿童同意，完成未成年人账户的激活", "produces": [ "application/json" ], "tags": [ "未成年人保护" ], "summary": "验证儿童同意", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true } ], "responses": { "200": { "description": "验证成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ChildrenConsentResponse" } } } } }, "/admin/users/{user_id}/devices": { "get": { "security": [ { "bearerAuth": [] } ], "description": "管理员查询指定用户的所有登录设备", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "会话管理" ], "summary": "管理员查询用户设备列表", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true } ], "responses": { "200": { "description": "设备列表", "schema": { "$ref": "#/definitions/dto.ListResponse-gitee_com_autional_service-identity_internal_handler_dto_DeviceResponse" } }, "401": { "description": "未授权", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/users/{user_id}/identities": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取指定用户的所有登录身份列表", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "获取用户身份列表", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true } ], "responses": { "200": { "description": "身份列表", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.GetIdentitiesResponse" } } } }, "post": { "security": [ { "bearerAuth": [] } ], "description": "为指定用户添加新的登录身份（如邮箱、手机号、第三方账号）", "tags": [ "身份认证" ], "summary": "添加用户身份", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true }, { "description": "添加身份请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.AddIdentityRequest" } } ], "responses": { "201": { "description": "添加成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.AddIdentityResponse" } } } } }, "/admin/users/{user_id}/identities/{identity_id}": { "delete": { "security": [ { "bearerAuth": [] } ], "description": "移除指定用户的某个登录身份", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "移除用户身份", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true }, { "type": "string", "description": "身份ID", "name": "identity_id", "in": "path", "required": true } ], "responses": { "204": { "description": "移除成功" } } } }, "/admin/users/{user_id}/identities/{identity_id}/set-primary": { "put": { "security": [ { "bearerAuth": [] } ], "description": "将指定用户的某个身份设为主登录身份", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "设置主身份", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true }, { "type": "string", "description": "身份ID", "name": "identity_id", "in": "path", "required": true } ], "responses": { "200": { "description": "设置成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/users/{user_id}/identities/{identity_id}/verifications": { "post": { "security": [ { "bearerAuth": [] } ], "description": "验证指定用户的某个身份（如发送验证码到邮箱/手机）", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "验证用户身份", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true }, { "type": "string", "description": "身份ID", "name": "identity_id", "in": "path", "required": true } ], "responses": { "200": { "description": "验证成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/users/{user_id}/impersonate": { "post": { "security": [ { "bearerAuth": [] } ], "description": "管理员获取目标用户的JWT（模拟会话），需要super_admin角色", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "管理员模拟用户", "parameters": [ { "type": "string", "description": "目标用户ID", "name": "user_id", "in": "path", "required": true }, { "description": "模拟原因", "name": "request", "in": "body", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ImpersonateRequest" } } ], "responses": { "200": { "description": "模拟成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_ImpersonateResponse" } } } } }, "/admin/users/{user_id}/login-histories": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取指定用户的登录历史记录列表", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "获取登录历史", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true }, { "type": "integer", "default": 1, "description": "页码", "name": "page", "in": "query" }, { "type": "integer", "default": 20, "description": "每页数量", "name": "page_size", "in": "query" } ], "responses": { "200": { "description": "登录历史", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LoginHistoryListResponse" } } } } }, "/admin/users/{user_id}/oauth-connections": { "get": { "security": [ { "bearerAuth": [] } ], "description": "管理员查看指定用户绑定的所有第三方OAuth连接列表", "produces": [ "application/json" ], "tags": [ "RBAC - 角色", "OAuth" ], "summary": "管理员查看用户OAuth连接", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true } ], "responses": { "200": { "description": "用户OAuth连接列表", "schema": { "$ref": "#/definitions/dto.ListResponse-any" } } } } }, "/admin/users/{user_id}/passkeys": { "get": { "security": [ { "bearerAuth": [] } ], "description": "管理员查询指定用户的 Passkey 凭证列表", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "管理员查询用户Passkey凭证", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true } ], "responses": { "200": { "description": "Passkey凭证列表", "schema": { "$ref": "#/definitions/dto.ListResponse-gitee_com_autional_service-identity_internal_handler_dto_WebAuthnCredentialResponse" } } } } }, "/admin/users/{user_id}/passkeys/{credential_id}": { "delete": { "security": [ { "bearerAuth": [] } ], "description": "管理员撤销指定用户的指定 Passkey 凭证", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "管理员撤销用户Passkey凭证", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true }, { "type": "string", "description": "Passkey凭证ID", "name": "credential_id", "in": "path", "required": true } ], "responses": { "200": { "description": "撤销成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "404": { "description": "凭证不存在", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/users/{user_id}/password": { "put": { "security": [ { "bearerAuth": [] } ], "description": "管理员为指定用户修改/重置密码", "tags": [ "身份认证" ], "summary": "修改密码", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true }, { "description": "修改密码请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.HTTPChangePasswordRequest" } } ], "responses": { "200": { "description": "修改成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/users/{user_id}/password-resets": { "post": { "security": [ { "bearerAuth": [] } ], "description": "管理员触发指定用户的密码重置流程", "tags": [ "身份认证" ], "summary": "重置密码", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true }, { "description": "重置密码请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.HTTPResetPasswordRequest" } } ], "responses": { "200": { "description": "重置成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/admin/users/{user_id}/password-status": { "get": { "security": [ { "bearerAuth": [] } ], "description": "查看用户的密码生命周期状态，包括是否需强制修改、密码年龄、过期时间等", "tags": [ "身份认证" ], "summary": "获取用户密码状态", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true } ], "responses": { "200": { "description": "成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.PasswordStatusResponse" } } } } }, "/admin/users/{user_id}/security-status": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取用户安全状态信息", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "获取安全状态", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true } ], "responses": { "200": { "description": "安全状态", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.SecurityStatusResponse2" } } } } }, "/admin/users/{user_id}/status": { "put": { "security": [ { "bearerAuth": [] } ], "description": "管理员更新指定用户的状态（如启用、禁用、锁定等）", "tags": [ "身份认证" ], "summary": "更新用户状态", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true }, { "description": "状态更新请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UpdateUserStatusRequest" } } ], "responses": { "200": { "description": "更新成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DataResponse" } } } } }, "/auth/anonymous": { "post": { "description": "创建临时匿名会话并返回受限JWT令牌（anonymous角色，无刷新令牌），用于浏览公开内容或低风险操作。匿名用户ID以anon_前缀标识。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "匿名认证", "parameters": [ { "description": "匿名认证请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.AnonymousSigninRequest" } } ], "responses": { "200": { "description": "匿名会话已创建，返回受限JWT令牌", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LoginByCodeResponse" } }, "400": { "description": "请求参数无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/api-keys": { "get": { "security": [ { "bearerAuth": [] } ], "description": "查询当前用户的 API Key 列表，绝不返回原文或哈希", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "API Key" ], "summary": "查询 API Key 列表", "parameters": [ { "type": "integer", "default": 1, "description": "页码", "name": "page", "in": "query" }, { "type": "integer", "default": 20, "description": "每页数量", "name": "page_size", "in": "query" }, { "type": "string", "description": "状态筛选: active/inactive/revoked", "name": "status", "in": "query" }, { "type": "string", "description": "环境筛选: live/test", "name": "environment", "in": "query" }, { "type": "string", "description": "搜索名称或前缀", "name": "search", "in": "query" } ], "responses": { "200": { "description": "API Key 列表", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ApiKeyListResponse" } } } }, "post": { "security": [ { "bearerAuth": [] } ], "description": "创建新的 API Key，返回原始 Key 仅一次", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "API Key" ], "summary": "创建 API Key", "parameters": [ { "description": "创建 API Key 请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CreateApiKeyRequest" } } ], "responses": { "201": { "description": "创建成功，返回原始 Key（仅此一次）", "schema": { "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DataResponse" }, { "type": "object", "properties": { "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CreateApiKeyResponse" } } } ] } } } } }, "/auth/api-keys/{api_key_id}": { "get": { "security": [ { "bearerAuth": [] } ], "description": "根据 ID 获取 API Key 详情，绝不返回原文", "tags": [ "API Key" ], "summary": "获取 API Key 详情", "responses": { "200": { "description": "API Key 详情", "schema": { "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DataResponse" }, { "type": "object", "properties": { "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ApiKeyResponse" } } } ] } } } }, "delete": { "security": [ { "bearerAuth": [] } ], "description": "软删除 API Key（保留审计记录）", "tags": [ "API Key" ], "summary": "吊销 API Key", "responses": { "204": { "description": "吊销成功" } } } }, "/auth/api-keys/{api_key_id}/audit-logs": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取指定 API Key 的审计日志记录（验证成功/失败记录）", "tags": [ "API Key" ], "summary": "获取 API Key 审计日志", "parameters": [ { "type": "integer", "default": 1, "description": "页码", "name": "page", "in": "query" }, { "type": "integer", "default": 20, "description": "每页数量", "name": "page_size", "in": "query" } ], "responses": { "200": { "description": "审计日志列表", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ApiKeyAuditLogListResponse" } } } } }, "/auth/api-keys/{api_key_id}/ip-restrictions": { "post": { "security": [ { "bearerAuth": [] } ], "description": "为 API Key 添加 IP/CIDR 限制", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "API Key" ], "summary": "添加 IP 限制", "parameters": [ { "description": "IP 限制请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.AddIPRestrictionRequest" } } ], "responses": { "200": { "description": "添加成功", "schema": { "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DataResponse" }, { "type": "object", "properties": { "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ApiKeyResponse" } } } ] } } } } }, "/auth/api-keys/{api_key_id}/ip-restrictions/{restriction_id}": { "delete": { "security": [ { "bearerAuth": [] } ], "description": "从 API Key 中删除指定的 IP/CIDR 限制", "tags": [ "API Key" ], "summary": "删除 IP 限制", "responses": { "200": { "description": "删除成功", "schema": { "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DataResponse" }, { "type": "object", "properties": { "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ApiKeyResponse" } } } ] } } } } }, "/auth/api-keys/{api_key_id}/rotate": { "post": { "security": [ { "bearerAuth": [] } ], "description": "创建新 Key 并标记旧 Key 为 inactive（24h 宽限期），返回新 Key 仅一次", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "API Key" ], "summary": "轮换 API Key", "responses": { "200": { "description": "新创建的 API Key", "schema": { "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DataResponse" }, { "type": "object", "properties": { "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CreateApiKeyResponse" } } } ] } } } } }, "/auth/api-keys/{api_key_id}/scopes": { "put": { "security": [ { "bearerAuth": [] } ], "description": "更新 API Key 的 scope 列表", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "API Key" ], "summary": "更新 API Key 权限范围", "parameters": [ { "description": "Scopes 更新请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UpdateApiKeyScopesRequest" } } ], "responses": { "200": { "description": "更新成功", "schema": { "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DataResponse" }, { "type": "object", "properties": { "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ApiKeyResponse" } } } ] } } } } }, "/auth/api-keys/{api_key_id}/status": { "put": { "security": [ { "bearerAuth": [] } ], "description": "切换 API Key 状态（active ↔ inactive）", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "API Key" ], "summary": "启用/禁用 API Key", "parameters": [ { "description": "状态更新请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UpdateApiKeyStatusRequest" } } ], "responses": { "200": { "description": "更新成功", "schema": { "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DataResponse" }, { "type": "object", "properties": { "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ApiKeyResponse" } } } ] } } } } }, "/auth/api-keys/{api_key_id}/usage": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取指定 API Key 的使用统计信息", "tags": [ "API Key" ], "summary": "获取 API Key 使用统计", "responses": { "200": { "description": "使用统计", "schema": { "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DataResponse" }, { "type": "object", "properties": { "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ApiKeyUsageResponse" } } } ] } } } } }, "/auth/api-keys/{api_key_id}/usage-stats": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取指定 API Key 的 30 天每日调用统计", "tags": [ "API Key" ], "summary": "获取 API Key 使用统计", "responses": { "200": { "description": "每日使用统计", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DataResponse" } } } } }, "/auth/captcha/challenge": { "get": { "description": "获取PoW或Turnstile CAPTCHA挑战，用于登录等需要人机验证的场景。返回挑战ID和数据，前端求解后随登录请求提交。用于防止自动化攻击和暴力破解。", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "获取CAPTCHA挑战", "parameters": [ { "enum": [ "pow", "turnstile", "captcha3d" ], "type": "string", "default": "pow", "description": "CAPTCHA提供商", "name": "provider", "in": "query" } ], "responses": { "200": { "description": "CAPTCHA挑战数据", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-any" } }, "400": { "description": "请求参数无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "CAPTCHA服务不可用或服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/check-permission": { "post": { "description": "当前认证用户对指定资源/操作的权限检查（identity-service 自身认证流程调用；RBAC 主服务见 rbac-service）。需 bearerAuth 认证。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "RBAC - 权限" ], "summary": "检查用户权限", "parameters": [ { "description": "权限检查请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CheckPermissionRequest" } } ], "responses": { "200": { "description": "权限检查结果", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_PermissionCheckResponse" } }, "400": { "description": "请求参数错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/check-role": { "post": { "description": "当前认证用户是否拥有指定角色代码（identity-service 自身认证流程调用；RBAC 主服务见 rbac-service）。需 bearerAuth 认证。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "RBAC - 权限" ], "summary": "检查用户角色", "parameters": [ { "description": "角色检查请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CheckRoleRequest" } } ], "responses": { "200": { "description": "角色检查结果", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_RoleCheckResponse" } }, "400": { "description": "请求参数错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/forgot-password": { "post": { "description": "用户忘记密码时，通过邮箱或手机号发送密码重置验证码，支持邮箱和短信两种方式。参考：NIST SP 800-63B §5.1.1.2、OWASP ASVS V2.1。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "忘记密码", "parameters": [ { "description": "忘记密码请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ForgotPasswordRequest" } } ], "responses": { "200": { "description": "验证码已发送至关联邮箱或手机", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ForgotPasswordResponse" } }, "400": { "description": "请求参数无效或用户不存在", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/generate-ticket": { "post": { "security": [ { "bearerAuth": [] } ], "description": "为指定用户生成一次性登录票据（5分钟有效，一次性使用），用于SSO跳转或管理员代登录场景。需要JWT认证，由管理员或系统调用。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "生成一次性票据", "parameters": [ { "description": "生成票据请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.GenerateTicketInput" } } ], "responses": { "200": { "description": "票据已生成，返回票据和过期时间", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.GenerateTicketResponse" } }, "400": { "description": "请求参数无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "未认证或令牌无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/id-token/signin": { "post": { "description": "使用外部OIDC Provider签发的ID Token进行跨系统SSO登录，验证id_token后返回本地JWT令牌", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "ID Token登录", "parameters": [ { "description": "ID Token登录请求", "name": "request", "in": "body", "required": true, "schema": { "type": "object", "properties": { "id_token": { "type": "string" }, "provider": { "type": "string" } } } } ], "responses": { "200": { "description": "登录成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LoginResponse" } } } } }, "/auth/ldap/login": { "post": { "description": "Authenticate user against configured LDAP/AD directory", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "auth" ], "summary": "LDAP directory authentication", "parameters": [ { "description": "LDAP login credentials", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LdapLoginRequest" } } ], "responses": { "200": { "description": "OK", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_LdapLoginResponse" } }, "401": { "description": "LDAP authentication failed", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/login": { "post": { "description": "使用用户名、邮箱或手机号加密码进行登录，支持渐进式延迟反暴力破解、CAPTCHA人机验证和风险评估。登录成功后返回JWT令牌。参考：NIST SP 800-63B §5.1.1.2、OWASP ASVS V2.1。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "用户登录", "parameters": [ { "description": "登录请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LoginRequest" } } ], "responses": { "200": { "description": "登录成功，返回访问令牌和刷新令牌", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LoginResponse" } }, "400": { "description": "请求参数无效或凭据错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/login/email-code": { "post": { "description": "使用邮箱验证码进行免密登录，支持自动注册", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "邮箱验证码登录", "parameters": [ { "description": "登录请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LoginByEmailCodeRequest" } } ], "responses": { "200": { "description": "登录成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LoginByCodeResponse" } } } } }, "/auth/login/phone-code": { "post": { "description": "使用手机验证码进行免密登录，支持自动注册", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "手机验证码登录", "parameters": [ { "description": "登录请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LoginByPhoneCodeRequest" } } ], "responses": { "200": { "description": "登录成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LoginByCodeResponse" } } } } }, "/auth/logout": { "post": { "security": [ { "bearerAuth": [] } ], "description": "使当前访问令牌失效（加入黑名单）并撤销对应会话，防止令牌继续使用。参考：RFC 6749 §2.1、OWASP ASVS V2.2。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "退出登录", "responses": { "200": { "description": "登出成功，令牌已失效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LogoutResponse" } }, "401": { "description": "未认证或令牌无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/magic-link/callback": { "get": { "description": "GET: 渲染中转HTML页面 (无泄露), POST: 验证token生成JWT", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "魔法链接回调 (GET→POST 双步跳转)", "parameters": [ { "type": "string", "description": "魔法链接令牌 (GET)", "name": "token", "in": "query" } ], "responses": { "302": { "description": "重定向到前端\" @Success 200 \"HTML中转页\" @Failure 302 \"重定向到登录页" } } }, "post": { "description": "GET: 渲染中转HTML页面 (无泄露), POST: 验证token生成JWT", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "魔法链接回调 (GET→POST 双步跳转)", "parameters": [ { "type": "string", "description": "魔法链接令牌 (GET)", "name": "token", "in": "query" } ], "responses": { "302": { "description": "重定向到前端\" @Success 200 \"HTML中转页\" @Failure 302 \"重定向到登录页" } } } }, "/auth/magic-link/request": { "post": { "description": "验证邮箱并发送包含魔法链接的邮件。无论邮箱是否注册均返回成功（防枚举）。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "请求发送魔法链接", "parameters": [ { "description": "请求参数", "name": "body", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RequestMagicLinkRequest" } } ], "responses": { "200": { "description": "请求已接收", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "400": { "description": "请求参数错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "429": { "description": "请求过于频繁", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me": { "get": { "security": [ { "bearerAuth": [] } ], "description": "返回当前认证用户的ID、用户名、邮箱、手机号及账户状态，支持从JWT直接解析用户身份。参考：RFC 7519 (JWT)、OWASP ASVS V2.1。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "获取当前登录用户信息", "responses": { "200": { "description": "当前用户的详细身份信息", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UserInfoResponseWrapper" } }, "401": { "description": "未认证或令牌无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "404": { "description": "用户不存在", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } }, "put": { "security": [ { "bearerAuth": [] } ], "description": "更新当前认证用户的基本资料，支持修改用户名和MFA启用状态。参考：GDPR Art 16 (Right to Rectification)、OWASP ASVS V2.1。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "更新当前用户信息", "parameters": [ { "description": "更新用户请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UpdateUserAuthRequest" } } ], "responses": { "200": { "description": "用户信息更新成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UpdateCurrentUserAuthResponse" } }, "400": { "description": "请求参数无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "未认证或令牌无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } }, "delete": { "security": [ { "bearerAuth": [] } ], "description": "停用当前登录用户的账户，需提供密码验证。账户将被软删除，数据保留可恢复。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "停用当前账户", "parameters": [ { "description": "停用请求参数", "name": "request", "in": "body", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DeactivateAccountRequest" } } ], "responses": { "200": { "description": "账户已停用", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DeactivateAccountResponse" } } } } }, "/auth/me/audit-logs": { "get": { "security": [ { "bearerAuth": [] } ], "description": "分页查询当前用户的操作审计日志，支持按时间范围、操作类型、关键词与状态语义筛选", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "获取我的审计日志", "parameters": [ { "type": "integer", "default": 1, "description": "页码", "name": "page", "in": "query" }, { "type": "integer", "default": 20, "description": "每页条数", "name": "page_size", "in": "query" }, { "type": "string", "description": "开始日期", "name": "start_date", "in": "query" }, { "type": "string", "description": "结束日期", "name": "end_date", "in": "query" }, { "type": "string", "description": "操作类型", "name": "action", "in": "query" }, { "type": "string", "description": "关键词（IP/设备/详情）", "name": "keyword", "in": "query" }, { "type": "string", "description": "状态语义筛选 success/failure", "name": "status_class", "in": "query" } ], "responses": { "200": { "description": "审计日志列表", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.AuditLogListResponse" } } } } }, "/auth/me/authenticator/backup": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取用户最新的认证器加密备份数据", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "会话管理" ], "responses": { "200": { "description": "最新备份数据（无备份时 data=null）", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.AuthenticatorBackupDetailResponse" } } } }, "post": { "security": [ { "bearerAuth": [] } ], "description": "上传前端PBKDF2+AES-GCM加密的认证器备份，服务端仅存储密文无法解密。每个用户最多保存3个历史版本（LRU淘汰）", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "会话管理" ], "parameters": [ { "description": "加密备份数据", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.AuthenticatorBackupUploadRequest" } } ], "responses": { "201": { "description": "备份上传成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.AuthenticatorBackupDetailResponse" } } } } }, "/auth/me/authenticator/backup/{backup_id}": { "delete": { "security": [ { "bearerAuth": [] } ], "description": "删除指定版本的认证器加密备份", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "会话管理" ], "parameters": [ { "type": "string", "description": "备份ID", "name": "backup_id", "in": "path", "required": true } ], "responses": { "200": { "description": "备份已删除", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me/authenticator/devices": { "get": { "security": [ { "bearerAuth": [] } ], "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "会话管理" ], "responses": { "200": { "description": "设备列表", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.AuthenticatorDeviceListResponse" } } } } }, "/auth/me/authenticator/devices/{device_id}": { "delete": { "security": [ { "bearerAuth": [] } ], "description": "移除指定的认证器设备（清理关联的Push订阅和TOTP设备）", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "会话管理" ], "summary": "移除认证器设备", "parameters": [ { "type": "string", "description": "设备ID", "name": "device_id", "in": "path", "required": true } ], "responses": { "200": { "description": "设备已移除", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me/children-consent": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取关联儿童账户的隐私同意状态，用于COPPA/GDPR合规", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "获取儿童隐私同意状态", "responses": { "200": { "description": "成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.GetChildrenConsentResponse" } } } } }, "/auth/me/consent": { "post": { "security": [ { "bearerAuth": [] } ], "description": "记录用户对特定隐私范围的同意授权，用于GDPR合规", "tags": [ "身份认证" ], "summary": "记录用户同意", "parameters": [ { "description": "request body", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ConsentRequest" } } ], "responses": { "200": { "description": "操作成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RecordConsentResponse" } } } }, "delete": { "security": [ { "bearerAuth": [] } ], "description": "撤销用户对特定隐私范围的同意授权，满足GDPR要求", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "撤销用户同意", "parameters": [ { "type": "string", "description": "request body", "name": "scope", "in": "query" } ], "responses": { "200": { "description": "操作成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RevokeConsentResponse" } } } } }, "/auth/me/consent-history": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取用户的同意授权历史记录，用于GDPR合规审计", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "获取同意历史记录", "responses": { "200": { "description": "成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ConsentHistoryResponse" } } } } }, "/auth/me/delete-account": { "post": { "security": [ { "bearerAuth": [] } ], "description": "依据GDPR第17条，永久删除用户账户数据，需密码验证，不可恢复", "tags": [ "身份认证" ], "summary": "永久删除账户 (GDPR 被遗忘权/账户删除)", "parameters": [ { "description": "request body", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DeleteAccountRequest" } } ], "responses": { "200": { "description": "操作成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DeleteAccountResponse" } } } } }, "/auth/me/devices": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取当前用户关联的所有设备列表", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "获取我的设备列表", "responses": { "200": { "description": "成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DeviceListResponse" } } } } }, "/auth/me/devices/{device_id}": { "delete": { "security": [ { "bearerAuth": [] } ], "description": "移除指定设备，取消该设备的信任状态", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "移除设备", "parameters": [ { "type": "string", "description": "设备ID", "name": "device_id", "in": "path", "required": true } ], "responses": { "200": { "description": "操作成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me/devices/{device_id}/trust": { "put": { "security": [ { "bearerAuth": [] } ], "description": "设置或取消设备的信任状态，信任设备可跳过重复的MFA验证", "tags": [ "身份认证" ], "summary": "信任/取消信任设备", "parameters": [ { "type": "string", "description": "设备ID", "name": "device_id", "in": "path", "required": true }, { "description": "request body", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.SelfTrustDeviceRequest" } } ], "responses": { "200": { "description": "操作成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me/email-verification-status": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取当前登录用户的邮箱验证状态", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "检查邮箱验证状态", "responses": { "200": { "description": "邮箱验证状态", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.EmailStatusResponse" } } } } }, "/auth/me/email/change": { "post": { "security": [ { "bearerAuth": [] } ], "description": "变更当前用户的邮箱地址，需验证当前密码、新邮箱以及发送验证码", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "变更邮箱地址", "parameters": [ { "description": "request body", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ChangeEmailRequest" } } ], "responses": { "200": { "description": "操作成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me/email/change/cancel": { "post": { "security": [ { "bearerAuth": [] } ], "description": "取消未完成的邮箱变更：清理 pending identity、verification_log 置 canceled、清理 Redis key；幂等（无记录→61002204，已消费/已取消→61002207）", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "取消邮箱变更", "responses": { "200": { "description": "操作成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me/email/verify": { "post": { "security": [ { "bearerAuth": [] } ], "description": "验证邮箱变更的验证码，验证成功后更新主邮箱", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "验证邮箱变更", "parameters": [ { "description": "请求参数", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.VerifyChangeRequest" } } ], "responses": { "200": { "description": "操作成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me/export-data": { "post": { "security": [ { "bearerAuth": [] } ], "description": "依据GDPR第15/20条，导出用户全部个人数据，包含身份、设备、会话、钱包、审计等跨服务数据", "tags": [ "身份认证" ], "summary": "导出我的数据 (GDPR DSAR)", "responses": { "200": { "description": "成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ExportMyDataResponse" } } } } }, "/auth/me/memberships": { "get": { "security": [ { "bearerAuth": [] } ], "description": "返回当前用户在所有租户下的成员身份状态（包括 pending/disabled）", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "获取我的租户成员状态", "responses": { "200": { "description": "成员列表", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.MembershipListResponseWrapper" } } } } }, "/auth/me/password": { "put": { "security": [ { "bearerAuth": [] } ], "description": "验证旧密码后设置新密码，修改成功后自动撤销所有会话以确保账户安全。参考：NIST SP 800-63B §5.1.1.2、OWASP ASVS V2.1。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "修改当前用户密码", "parameters": [ { "description": "修改密码请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.HTTPChangePasswordRequest" } } ], "responses": { "200": { "description": "密码修改成功，所有会话已撤销", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ChangePasswordResponse" } }, "400": { "description": "请求参数无效或旧密码验证失败", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "未认证或令牌无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me/password-strength": { "post": { "security": [ { "bearerAuth": [] } ], "description": "使用当前租户的密码策略检查密码强度", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "检查密码强度", "parameters": [ { "description": "密码检查请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/handler.SelfServicePasswordStrengthRequest" } } ], "responses": { "200": { "description": "密码强度", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.PasswordStrengthResponseWrapper" } } } } }, "/auth/me/permissions": { "get": { "security": [ { "bearerAuth": [] } ], "description": "返回当前用户在租户下的所有权限代码列表，包括角色继承权限、层级权限和直赋权限的聚合结果。参考：NIST SP 800-53 AC-6、OWASP ASVS V1.2。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "获取当前用户权限", "responses": { "200": { "description": "当前用户的权限代码列表", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.MyPermissionsResponseWrapper" } }, "401": { "description": "未认证或令牌无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me/phone-verification-status": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取当前登录用户的手机号验证状态", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "检查手机号验证状态", "responses": { "200": { "description": "手机号验证状态", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.PhoneStatusResponse" } } } } }, "/auth/me/phone/change": { "post": { "security": [ { "bearerAuth": [] } ], "description": "变更当前用户的手机号，需要验证新手机号和当前密码", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "变更手机号", "parameters": [ { "description": "请求参数", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ChangePhoneRequest" } } ], "responses": { "200": { "description": "操作成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me/phone/change/cancel": { "post": { "security": [ { "bearerAuth": [] } ], "description": "取消未完成的手机号变更：清理 pending identity、verification_log 置 canceled、清理 Redis key；幂等（无记录→61002204，已消费/已取消→61002207）", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "取消手机号变更", "responses": { "200": { "description": "操作成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me/phone/verify": { "post": { "security": [ { "bearerAuth": [] } ], "description": "验证手机号变更的验证码，验证成功后更新主手机号", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "验证手机号变更", "parameters": [ { "description": "请求参数", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.VerifyChangeRequest" } } ], "responses": { "200": { "description": "操作成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me/reauthenticate": { "post": { "security": [ { "bearerAuth": [] } ], "description": "通过当前密码进行重新认证，返回 step-up token 供敏感操作（标识变更）使用", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "重新认证（step-up）", "parameters": [ { "description": "请求参数", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ReAuthenticateRequest" } } ], "responses": { "200": { "description": "step-up token", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ReAuthenticateResponse" } } } } }, "/auth/me/recovery-contacts": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取用户设置的恢复联系方式（recovery email/phone），数据存储在用户Metadata中", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "获取恢复联系人列表", "responses": { "200": { "description": "成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RecoveryContactListResponse" } } } }, "post": { "security": [ { "bearerAuth": [] } ], "description": "添加新的recovery email/phone作为账户恢复联系方式", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "添加恢复联系人", "parameters": [ { "description": "request body", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.AddRecoveryContactRequest" } } ], "responses": { "200": { "description": "操作成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me/recovery-contacts/{contact_id}": { "delete": { "security": [ { "bearerAuth": [] } ], "description": "移除指定的恢复联系方式", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "移除恢复联系人", "parameters": [ { "type": "string", "description": "request body", "name": "contact_id", "in": "path", "required": true } ], "responses": { "200": { "description": "操作成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me/recovery-contacts/{contact_id}/verify": { "post": { "security": [ { "bearerAuth": [] } ], "description": "校验发送到该恢复联系方式的验证码，通过后该联系人方可作为账号找回凭证接收方（B1）。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "验证恢复联系人", "parameters": [ { "type": "string", "description": "恢复联系人ID", "name": "contact_id", "in": "path", "required": true }, { "description": "验证码", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.VerifyRecoveryContactRequest" } } ], "responses": { "200": { "description": "验证成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "400": { "description": "验证码错误或已过期", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "403": { "description": "失败次数过多", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me/role-activations": { "get": { "security": [ { "bearerAuth": [] } ], "description": "返回当前用户的所有角色激活记录", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "RBAC - 角色" ], "summary": "查询我的角色激活", "responses": { "200": { "description": "角色激活列表", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-array_gitee_com_autional_service-identity_internal_handler_dto_ActivationResponse" } } } }, "post": { "security": [ { "bearerAuth": [] } ], "description": "用户提交角色激活请求（即时提权JIT），提供角色ID、理由和有效时长", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "RBAC - 角色" ], "summary": "请求角色激活", "parameters": [ { "description": "激活请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RequestActivationRequest" } } ], "responses": { "201": { "description": "角色激活成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_ActivationResponse" } }, "400": { "description": "请求参数无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me/role-activations/available-roles": { "get": { "security": [ { "bearerAuth": [] } ], "description": "返回当前租户的角色目录，供用户在选择申请临时激活（JIT 提权）时使用。需 bearerAuth 认证。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "RBAC - 角色" ], "summary": "查询可申请的角色", "responses": { "200": { "description": "角色列表", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-array_gitee_com_autional_service-identity_internal_handler_dto_AvailableRoleResponse" } }, "400": { "description": "请求参数无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me/saml-links": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取当前用户绑定的所有SAML/SSO身份提供商账户", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "获取SAML关联账户列表", "responses": { "200": { "description": "成功", "schema": { "$ref": "#/definitions/dto.ListResponse-handler_SamlLinkedAccountInfo" } } } } }, "/auth/me/saml-links/{link_id}": { "delete": { "security": [ { "bearerAuth": [] } ], "description": "解绑指定的SAML/SSO身份提供商账户关联", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "解绑SAML关联账户", "parameters": [ { "type": "string", "description": "SAML关联账户ID", "name": "link_id", "in": "path", "required": true } ], "responses": { "200": { "description": "操作成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me/security-events": { "get": { "security": [ { "bearerAuth": [] } ], "description": "分页获取用户的安全相关事件（异常登录、密码变更、MFA变更等）\n自动过滤已dismiss的事件", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "获取安全事件列表", "parameters": [ { "type": "integer", "default": 1, "description": "页码", "name": "page", "in": "query" }, { "type": "integer", "default": 20, "description": "每页条数", "name": "page_size", "in": "query" } ], "responses": { "200": { "description": "成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.SecurityEventListResponse" } } } } }, "/auth/me/security-events/{event_id}/dismiss": { "post": { "security": [ { "bearerAuth": [] } ], "description": "标记安全事件为已关闭（dismissed=true），事件将从列表中消失", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "关闭安全事件提醒", "parameters": [ { "type": "string", "description": "事件ID", "name": "event_id", "in": "path", "required": true }, { "description": "request body", "name": "request", "in": "body", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.SecurityEventDismissRequest" } } ], "responses": { "200": { "description": "操作成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me/sessions": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取当前用户的所有活跃会话，优先从 session-service 获取，包含AMR/IP/GeoIP等安全上下文信息\n若sessionClient不可用则降级到deviceService设备记录查询", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "获取我的会话列表", "parameters": [ { "type": "integer", "description": "页码", "name": "page", "in": "query" }, { "type": "integer", "description": "每页数量", "name": "page_size", "in": "query" } ], "responses": { "200": { "description": "成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.GetMySessionsResponse" } } } }, "delete": { "security": [ { "bearerAuth": [] } ], "description": "登出当前用户的所有会话，调用 deviceService.RemoveAllDevices 清除所有设备记录", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "登出所有会话", "responses": { "200": { "description": "操作成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LogoutAllSessionsResponse" } } } } }, "/auth/me/sessions/{session_id}": { "delete": { "security": [ { "bearerAuth": [] } ], "description": "登出指定会话ID，如果设备记录存在则同时清除", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "登出指定会话", "parameters": [ { "type": "string", "description": "会话ID", "name": "session_id", "in": "path", "required": true } ], "responses": { "200": { "description": "操作成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LogoutSessionResponse" } } } } }, "/auth/me/stop-impersonation": { "post": { "security": [ { "bearerAuth": [] } ], "description": "当前模拟会话中，停止模拟并返回管理员的JWT", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "结束模拟会话", "responses": { "200": { "description": "结束成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_StopImpersonationResponse" } } } } }, "/auth/me/switch-tenant": { "post": { "security": [ { "bearerAuth": [] } ], "description": "验证用户在新租户下的成员资格，检查跨租户切换策略，验证通过后签发新JWT令牌（含新租户的角色和权限）。参考：NIST SP 800-53 AC-2、OWASP ASVS V1.2。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "切换当前租户", "parameters": [ { "description": "切换租户请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.SwitchTenantRequest" } } ], "responses": { "200": { "description": "租户切换成功，返回新JWT令牌", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.SwitchTenantResponseWrapper" } }, "400": { "description": "请求参数无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "未认证或令牌无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "403": { "description": "无目标租户成员资格或跨租户切换被禁用", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me/tenants": { "get": { "security": [ { "bearerAuth": [] } ], "description": "返回当前用户有权限访问的所有租户列表，包含租户ID、名称、显示名称和用户在各租户的角色。支持通过租户服务获取租户显示名称。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "获取当前用户租户", "responses": { "200": { "description": "当前用户的租户列表及角色", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.MyTenantsResponseWrapper" } }, "401": { "description": "未认证或令牌无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me/verification/{tracking_id}": { "get": { "security": [ { "bearerAuth": [] } ], "description": "查询当前用户的验证记录（邮箱/手机号验证）跟踪状态与进度", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "查询验证跟踪状态", "parameters": [ { "type": "string", "description": "验证跟踪ID", "name": "tracking_id", "in": "path", "required": true } ], "responses": { "200": { "description": "验证跟踪信息", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_VerificationTrackingQueryResponse" } }, "404": { "description": "跟踪记录不存在", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me/webauthn-credentials": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取当前用户已注册的所有WebAuthn凭证", "produces": [ "application/json" ], "tags": [ "WebAuthn" ], "summary": "获取已注册的Passkey列表", "responses": { "200": { "description": "凭证列表", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "未授权", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/me/webauthn-credentials/{credential_id}": { "delete": { "security": [ { "bearerAuth": [] } ], "description": "删除指定的WebAuthn凭证", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "WebAuthn" ], "summary": "删除Passkey", "parameters": [ { "type": "string", "description": "凭证ID", "name": "credential_id", "in": "path", "required": true } ], "responses": { "200": { "description": "删除成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "未授权", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "404": { "description": "凭证不存在", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/mfa/verify-challenge": { "post": { "description": "使用challenge_token和MFA验证码（TOTP/SMS/Email）完成多因素认证，验证成功后返回真实JWT令牌，替换临时的挑战令牌。参考：RFC 6238 (TOTP)、RFC 4226 (HOTP)、NIST SP 800-63B §5.1、OWASP ASVS V2.8。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "多因素认证" ], "summary": "验证MFA挑战", "parameters": [ { "description": "MFA验证请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.VerifyMFAChallengeRequest" } } ], "responses": { "200": { "description": "MFA验证成功，返回真实JWT令牌", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LoginResponse" } }, "400": { "description": "挑战令牌无效或验证码错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "MFA服务不可用或服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/oauth/accounts": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取当前用户绑定的所有第三方OAuth账号", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "获取用户OAuth账号列表", "responses": { "200": { "description": "账号列表", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DataResponse" } } } } }, "/auth/oauth/bind": { "post": { "security": [ { "bearerAuth": [] } ], "description": "为当前用户绑定第三方OAuth账号", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "绑定OAuth账号", "parameters": [ { "description": "绑定OAuth请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.BindOAuthRequest" } } ], "responses": { "200": { "description": "绑定成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DataResponse" } } } } }, "/auth/oauth/providers": { "get": { "description": "获取系统支持的所有OAuth登录提供者列表", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "获取OAuth提供商列表", "responses": { "200": { "description": "提供商列表", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DataResponse" } } } } }, "/auth/oauth/providers/health": { "get": { "description": "获取所有已注册OAuth提供者的健康状态", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "获取OAuth提供者健康状态", "responses": { "200": { "description": "提供者健康状态", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.OAuthProviderHealthResponse" } } } } }, "/auth/oauth/stats": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取当前租户下 OAuth 绑定数量（按 provider 分组统计）", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "获取OAuth绑定统计", "responses": { "200": { "description": "绑定统计", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.OAuthBindingStatsResponse" } } } } }, "/auth/oauth/unbind": { "post": { "security": [ { "bearerAuth": [] } ], "description": "解绑当前用户绑定的第三方OAuth账号", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "解绑OAuth账号", "parameters": [ { "description": "解绑OAuth请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UnbindOAuthRequest" } } ], "responses": { "200": { "description": "解绑成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DataResponse" } } } } }, "/auth/oauth/{provider}": { "get": { "description": "发起OAuth授权流程，重定向到第三方授权页面", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "发起OAuth登录", "parameters": [ { "type": "string", "description": "OAuth鎻愪緵鑰?", "name": "provider", "in": "path", "required": true } ], "responses": { "302": { "description": "閲嶅畾鍚戝埌OAuth鎺堟潈椤?" } } } }, "/auth/oauth/{provider}/callback": { "get": { "description": "处理OAuth授权回调，获取用户信息并创建会话", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "OAuth回调", "parameters": [ { "type": "string", "description": "OAuth鎻愪緵鑰?", "name": "provider", "in": "path", "required": true }, { "type": "string", "description": "鎺堟潈鐮?", "name": "code", "in": "query", "required": true }, { "type": "string", "description": "状态参数", "name": "state", "in": "query", "required": true } ], "responses": { "200": { "description": "登录成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.OAuthCallbackResponse" } } } } }, "/auth/oidc/backchannel-logout": { "post": { "description": "处理OpenID Connect Backchannel Logout 1.0规范的后通道登出请求。接收OP发送的logout_token，验证后撤销对应用户的所有会话。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "OAuth" ], "summary": "OIDC后通道登出", "parameters": [ { "description": "登出令牌请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/handler.BackchannelLogoutRequest" } } ], "responses": { "200": { "description": "登出成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "400": { "description": "请求参数无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/oidc/logout": { "post": { "description": "处理OpenID Connect RP-Initiated Logout 1.0规范的登出请求。根据id_token_hint重定向到OP的end_session_endpoint或post_logout_redirect_uri，同时撤销当前用户的会话。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "OAuth" ], "summary": "RP发起登出", "parameters": [ { "type": "string", "description": "ID Token提示", "name": "id_token_hint", "in": "query" }, { "type": "string", "description": "登出后重定向URI", "name": "post_logout_redirect_uri", "in": "query" }, { "type": "string", "description": "状态参数", "name": "state", "in": "query" } ], "responses": { "200": { "description": "登出成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "302": { "description": "重定向到登出页面", "schema": { "type": "string" } } } } }, "/auth/oidc/session-iframe": { "get": { "description": "返回OpenID Connect Session Management 1.0规范的不可见iframe，用于第三方cookie的会话状态追踪。", "produces": [ "text/html" ], "tags": [ "OAuth" ], "summary": "OIDC会话状态iframe", "responses": { "200": { "description": "包含session state管理脚本的HTML iframe页面", "schema": { "type": "string" } } } } }, "/auth/qr-login/cancel": { "post": { "security": [ { "bearerAuth": [] } ], "description": "取消正在进行的二维码登录会话", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "会话管理" ], "summary": "取消二维码登录", "parameters": [ { "description": "取消请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.QrLoginCancelRequest" } } ], "responses": { "200": { "description": "取消成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "400": { "description": "请求参数无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/qr-login/confirm": { "post": { "security": [ { "bearerAuth": [] } ], "description": "已登录用户在移动端确认登录请求，完成二维码登录流程", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "会话管理" ], "summary": "确认二维码登录", "parameters": [ { "description": "确认请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.QrLoginConfirmRequest" } } ], "responses": { "200": { "description": "确认成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "400": { "description": "请求参数无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/qr-login/initiate": { "post": { "description": "生成一个新的二维码登录会话，返回会话令牌和数字匹配码供用户扫描", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "会话管理" ], "summary": "发起二维码登录", "responses": { "200": { "description": "二维码登录会话已创建", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_QrLoginInitiateResponse" } }, "429": { "description": "请求频率过高", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/qr-login/scan": { "post": { "security": [ { "bearerAuth": [] } ], "description": "已登录用户扫描二维码，将会话状态更新为已扫描，同时可附件设备信息", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "会话管理" ], "summary": "扫描二维码登录", "parameters": [ { "description": "扫描请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.QrLoginScanRequest" } } ], "responses": { "200": { "description": "扫描成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "400": { "description": "请求参数无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/qr-login/status": { "get": { "description": "轮询二维码登录会话的当前状态，确认完成后返回access_token和refresh_token", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "会话管理" ], "summary": "查询二维码登录状态", "parameters": [ { "type": "string", "description": "会话令牌", "name": "token", "in": "query", "required": true } ], "responses": { "200": { "description": "会话状态", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_QrLoginStatusResponse" } }, "400": { "description": "参数无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/re-authenticate": { "post": { "security": [ { "bearerAuth": [] } ], "description": "通过当前密码进行重新认证，返回 step-up token 供敏感操作（标识变更）使用", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "重新认证（step-up）", "parameters": [ { "description": "请求参数", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ReAuthenticateRequest" } } ], "responses": { "200": { "description": "step-up token", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ReAuthenticateResponse" } } } } }, "/auth/recover-account": { "post": { "description": "当用户无法访问主身份（邮箱或手机）时，通过预先设置的恢复联系人来验证身份并发起密码重置流程。参考：NIST SP 800-63B §5.1.1.2、OWASP ASVS V2.3。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "通过恢复联系人初始化账户恢复", "parameters": [ { "description": "账户恢复请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RecoverAccountRequest" } } ], "responses": { "200": { "description": "恢复码已发送至受信任联系人", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RecoverAccountResponse" } }, "400": { "description": "请求参数无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/recover-account/reset": { "post": { "description": "使用账户恢复验证码验证通过后，设置新密码，完成账户恢复和密码重置。参考：NIST SP 800-63B §5.1.1.2。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "通过恢复码重置密码", "parameters": [ { "description": "恢复重置请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RecoverAccountResetRequest" } } ], "responses": { "200": { "description": "密码重置成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RecoverAccountResetResponse" } }, "400": { "description": "请求参数无效或验证码已过期", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/recovery/complete": { "post": { "description": "验证恢复码和恢复令牌后设置新密码，自动撤销所有会话以确保账户安全，并发送密码变更通知。参考：NIST SP 800-63B §5.1.1.2、OWASP ASVS V2.1。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "完成账户恢复", "parameters": [ { "description": "完成恢复请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CompleteAccountRecoveryRequest" } } ], "responses": { "200": { "description": "账户恢复完成，密码已重置", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CompleteAccountRecoveryResponse" } }, "400": { "description": "请求参数无效或恢复令牌已过期", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/recovery/request": { "post": { "description": "通过邮箱或手机号发起账户恢复流程，生成恢复令牌并向受信任联系人发送验证码，支持将恢复码发送至备用邮箱或手机。参考：NIST SP 800-63B §5.1.1.2、OWASP ASVS V2.3。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "发起账户恢复", "parameters": [ { "description": "账户恢复请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RequestAccountRecoveryRequest" } } ], "responses": { "200": { "description": "恢复流程已发起，恢复令牌和掩码联系方式已返回", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RequestAccountRecoveryResponseWrapper" } }, "400": { "description": "请求参数无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/recovery/verify": { "post": { "description": "验证从受信任联系人收到的恢复码，验证成功后返回确认，允许用户进入密码重置步骤。参考：NIST SP 800-63B §5.1.1.2、OWASP ASVS V2.3。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "验证账户恢复码", "parameters": [ { "description": "验证请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.VerifyAccountRecoveryRequest" } } ], "responses": { "200": { "description": "恢复验证码校验成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "400": { "description": "请求参数无效或恢复码已过期", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/refresh": { "post": { "description": "使用刷新令牌获取新的访问令牌和刷新令牌对，支持复用攻击检测与自动撤销。参考：RFC 6749 §1.5、RFC 7519 (JWT)。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "刷新访问令牌", "parameters": [ { "description": "刷新请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RefreshTokenRequest" } } ], "responses": { "200": { "description": "令牌刷新成功，返回新的访问令牌和刷新令牌", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LoginResponse" } }, "400": { "description": "请求参数无效或令牌格式错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/register": { "post": { "description": "使用用户名、邮箱、手机号和密码创建账户，支持开放注册、邀请注册和审批三种成员加入方式。创建成功后自动发送欢迎通知。参考：OWASP ASVS V2.2。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "用户注册", "parameters": [ { "description": "注册请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RegisterRequest" } } ], "responses": { "201": { "description": "注册成功，返回用户ID和状态", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RegisterResponse" } }, "400": { "description": "请求参数无效或用户名已存在", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/register/check-email": { "get": { "description": "在用户注册前校验邮箱是否已被注册，防止重复注册与临时邮箱滥用。支持GET和POST两种请求方式。参考：OWASP ASVS V2.2。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "检查邮箱是否可用", "parameters": [ { "type": "string", "description": "邮箱地址（GET方式）", "name": "email", "in": "query" }, { "description": "邮箱地址（POST方式）", "name": "request", "in": "body", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CheckEmailRequest" } } ], "responses": { "200": { "description": "邮箱可用性检查结果", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CheckEmailResponse" } }, "400": { "description": "请求参数无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } }, "post": { "description": "在用户注册前校验邮箱是否已被注册，防止重复注册与临时邮箱滥用。支持GET和POST两种请求方式。参考：OWASP ASVS V2.2。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "检查邮箱是否可用", "parameters": [ { "type": "string", "description": "邮箱地址（GET方式）", "name": "email", "in": "query" }, { "description": "邮箱地址（POST方式）", "name": "request", "in": "body", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CheckEmailRequest" } } ], "responses": { "200": { "description": "邮箱可用性检查结果", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CheckEmailResponse" } }, "400": { "description": "请求参数无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/register/check-username": { "get": { "description": "在用户注册前校验用户名是否已被占用，防止批量注册和冲突。支持GET和POST两种请求方式。参考：OWASP ASVS V2.2。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "检查用户名是否可用", "parameters": [ { "type": "string", "description": "用户名（GET方式）", "name": "username", "in": "query" }, { "description": "用户名（POST方式）", "name": "request", "in": "body", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CheckUsernameRequest" } } ], "responses": { "200": { "description": "用户名可用性检查结果", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CheckUsernameResponse" } }, "400": { "description": "请求参数无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } }, "post": { "description": "在用户注册前校验用户名是否已被占用，防止批量注册和冲突。支持GET和POST两种请求方式。参考：OWASP ASVS V2.2。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "检查用户名是否可用", "parameters": [ { "type": "string", "description": "用户名（GET方式）", "name": "username", "in": "query" }, { "description": "用户名（POST方式）", "name": "request", "in": "body", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CheckUsernameRequest" } } ], "responses": { "200": { "description": "用户名可用性检查结果", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CheckUsernameResponse" } }, "400": { "description": "请求参数无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/register/email-code": { "post": { "description": "使用邮箱验证码完成无密码注册并自动登录，创建密码豁免用户。注册前需先调用发送验证码接口获取验证码。参考：OWASP ASVS V2.2。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "邮箱验证码注册", "parameters": [ { "description": "邮箱验证码注册请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RegisterByEmailCodeRequest" } } ], "responses": { "200": { "description": "注册成功并自动登录，返回JWT令牌", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LoginByCodeResponse" } }, "400": { "description": "请求参数无效或验证码错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/register/invitation": { "post": { "description": "通过有效的租户邀请码完成注册，邀请码由租户管理员生成。注册成功后自动接受邀请并加入租户，返回JWT令牌。参考：OWASP ASVS V2.2。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "邀请注册", "parameters": [ { "description": "邀请注册请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RegisterByInvitationRequest" } } ], "responses": { "200": { "description": "注册成功并自动登录", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LoginResponse" } }, "400": { "description": "请求参数无效或邀请码已失效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/register/oauth": { "post": { "description": "使用OAuth回调生成的pending_token完成注册，创建用户并自动绑定OAuth连接和提供商信息，返回JWT令牌。注册后的审批流程由租户的成员资格策略控制。参考：RFC 6749 §4.1、OWASP ASVS V2.2。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "OAuth补充注册", "parameters": [ { "description": "OAuth补充注册请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RegisterByOAuthRequest" } } ], "responses": { "200": { "description": "注册成功并自动登录", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RegisterByOAuthResponse" } }, "400": { "description": "请求参数无效或pending_token已过期", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/register/phone-code": { "post": { "description": "使用手机短信验证码完成无密码注册并自动登录，创建密码豁免用户。注册前需先调用发送短信验证码接口获取验证码。参考：OWASP ASVS V2.2。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "手机验证码注册", "parameters": [ { "description": "手机验证码注册请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RegisterByPhoneCodeRequest" } } ], "responses": { "200": { "description": "注册成功并自动登录，返回JWT令牌", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LoginByCodeResponse" } }, "400": { "description": "请求参数无效或验证码错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/register/reapply": { "post": { "description": "被拒绝注册后重新提交申请，将disabled成员重新置为pending状态供管理员再次审批。参考：OWASP ASVS V2.2。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "重新申请注册", "parameters": [ { "description": "重新申请请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ReapplyRegistrationRequest" } } ], "responses": { "200": { "description": "重新申请已提交成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ReapplyRegistrationResponseWrapper" } }, "400": { "description": "请求参数无效或用户不存在", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/resend-sms-code": { "post": { "description": "重新向用户手机发送短信验证码", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "重新发送短信验证码", "parameters": [ { "description": "重新发送短信验证码请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ResendSMSCodeRequest" } } ], "responses": { "200": { "description": "发送成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.PhoneVerificationResponse" } } } } }, "/auth/resend-verification-email": { "post": { "description": "重新向用户邮箱发送验证链接或验证码", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "重新发送邮箱验证邮件", "parameters": [ { "description": "重新发送验证邮件请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ResendVerificationEmailRequest" } } ], "responses": { "200": { "description": "发送成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.EmailVerificationResponse" } } } } }, "/auth/reset-password": { "post": { "description": "使用验证码验证通过后设置新密码，支持邮箱和短信两种验证方式。参考：NIST SP 800-63B §5.1.1.2、OWASP ASVS V2.1。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "重置密码", "parameters": [ { "description": "重置密码请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ResetPasswordRequest" } } ], "responses": { "200": { "description": "密码重置成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ResetPasswordResponse" } }, "400": { "description": "请求参数无效或验证码已过期", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/send-sms-code": { "post": { "description": "向用户手机发送短信验证码，用于手机验证或登录", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "发送短信验证码", "parameters": [ { "description": "发送短信验证码请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.SendSMSCodeRequest" } } ], "responses": { "200": { "description": "发送成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.PhoneVerificationResponse" } } } } }, "/auth/send-verification-email": { "post": { "description": "向指定邮箱发送验证码邮件", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "发送邮箱验证邮件", "parameters": [ { "description": "发送验证邮件请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.SendVerificationEmailRequest" } } ], "responses": { "200": { "description": "发送成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.EmailVerificationResponse" } } } } }, "/auth/ticket/signin": { "post": { "description": "使用后台生成的一次性票据完成登录，票据验证成功后立即失效（一次性使用），返回JWT令牌。适用于跨系统SSO和管理员代登录场景。参考：RFC 6749 §1.5。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "票据签名登录", "parameters": [ { "description": "票据登录请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.TicketSigninRequest" } } ], "responses": { "200": { "description": "登录成功，返回JWT令牌", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LoginResponse" } }, "400": { "description": "票据无效或已过期", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/verify-email": { "post": { "description": "验证用户提交的邮箱验证码", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "验证邮箱地址", "parameters": [ { "description": "验证邮箱请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.VerifyEmailRequest" } } ], "responses": { "200": { "description": "验证成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.EmailVerifiedResponse" } } } } }, "/auth/verify-phone": { "post": { "description": "验证用户提交的手机号验证码", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "验证手机号", "parameters": [ { "description": "验证手机号请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.VerifyPhoneRequest" } } ], "responses": { "200": { "description": "验证成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.PhoneVerifiedResponse" } } } } }, "/auth/verify-reset-code": { "post": { "description": "验证用户提交的重置密码验证码是否有效，验证通过后允许进入密码重置步骤。参考：OWASP ASVS V2.3。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "验证重置验证码", "parameters": [ { "description": "验证重置码请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.VerifyResetCodeRequest" } } ], "responses": { "200": { "description": "验证码有效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "400": { "description": "请求参数无效或验证码已过期", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/web3/verify": { "post": { "description": "验证Ethereum/Solana等Web3钱包的数字签名，无需认证", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "验证Web3钱包签名", "parameters": [ { "description": "钱包验证请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.Web3VerifyRequest" } } ], "responses": { "200": { "description": "验证结果", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_Web3VerifyResponse" } } } } }, "/auth/webauthn/authenticate/begin": { "post": { "description": "根据邮箱查找用户，生成Passkey登录挑战（无需JWT）", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "WebAuthn" ], "summary": "开始Passkey公开认证", "parameters": [ { "description": "认证请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.PasskeyAuthBeginRequest" } } ], "responses": { "200": { "description": "登录选项", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.WebAuthnLoginResponseWrapper" } }, "400": { "description": "请求参数错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "404": { "description": "用户不存在", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/webauthn/authenticate/complete": { "post": { "description": "验证Passkey认证响应并返回JWT令牌（无需JWT）", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "WebAuthn" ], "summary": "完成Passkey公开认证", "parameters": [ { "description": "认证完成请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.PasskeyAuthenticateCompleteRequest" } } ], "responses": { "200": { "description": "登录成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DataResponse" } }, "400": { "description": "请求参数错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "认证失败", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/webauthn/login/begin": { "post": { "security": [ { "bearerAuth": [] } ], "description": "生成登录挑战，返回给前端调用 navigator.credentials.get()", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "WebAuthn" ], "summary": "开始Passkey登录", "parameters": [ { "description": "登录请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/handler.beginLoginRequest" } } ], "responses": { "200": { "description": "登录选项", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.WebAuthnLoginResponseWrapper" } }, "401": { "description": "未授权", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/webauthn/login/complete": { "post": { "security": [ { "bearerAuth": [] } ], "description": "验证客户端返回的认证签名", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "WebAuthn" ], "summary": "完成Passkey登录", "parameters": [ { "description": "认证响应", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/handler.completeLoginRequest" } } ], "responses": { "200": { "description": "验证结果", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "400": { "description": "请求参数错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "未授权", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/webauthn/register/begin": { "post": { "security": [ { "bearerAuth": [] } ], "description": "生成注册挑战和凭证创建选项，返回给前端调用 navigator.credentials.create()", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "WebAuthn" ], "summary": "开始Passkey注册", "parameters": [ { "description": "注册请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/handler.beginRegistrationRequest" } } ], "responses": { "200": { "description": "注册选项", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.WebAuthnRegistrationResponseWrapper" } }, "400": { "description": "请求参数错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "未授权", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/auth/webauthn/register/complete": { "post": { "security": [ { "bearerAuth": [] } ], "description": "验证客户端创建的凭证并保存公钥, 返回恢复码", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "WebAuthn" ], "summary": "完成Passkey注册", "parameters": [ { "description": "凭证创建结果", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/handler.completeRegistrationRequest" } } ], "responses": { "200": { "description": "注册成功, 含恢复码", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "400": { "description": "请求参数错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "未授权", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/devices": { "get": { "security": [ { "bearerAuth": [] } ], "description": "获取当前用户的所有登录设备列表", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "会话管理" ], "summary": "获取用户设备列表", "responses": { "200": { "description": "设备列表", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DeviceListResponse" } }, "401": { "description": "未授权", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } }, "delete": { "security": [ { "bearerAuth": [] } ], "description": "移除用户的所有设备（当前设备可选保留）", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "会话管理" ], "summary": "移除所有设备", "parameters": [ { "type": "boolean", "description": "是否排除当前设备", "name": "except_current", "in": "query" } ], "responses": { "204": { "description": "成功移除" }, "401": { "description": "未授权", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/devices/{device_id}": { "delete": { "security": [ { "bearerAuth": [] } ], "description": "移除指定的登录设备", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "会话管理" ], "summary": "移除设备", "parameters": [ { "type": "string", "description": "设备ID", "name": "device_id", "in": "path", "required": true } ], "responses": { "204": { "description": "成功移除" }, "401": { "description": "未授权", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "404": { "description": "设备不存在", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/devices/{device_id}/trust": { "put": { "security": [ { "bearerAuth": [] } ], "description": "设置设备的信任状态", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "会话管理" ], "summary": "信任/取消信任设备", "parameters": [ { "type": "string", "description": "设备ID", "name": "device_id", "in": "path", "required": true }, { "description": "信任设置", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.TrustDeviceRequest" } } ], "responses": { "200": { "description": "设置成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "400": { "description": "请求错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "401": { "description": "未授权", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "404": { "description": "设备不存在", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/internal/identity/bootstrap-admin": { "post": { "description": "内部API：为指定用户分配或创建 admin 角色，仅限 development 环境（生产禁用）。需InternalAPIKeyAuth认证。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "RBAC - 权限" ], "summary": "初始化管理员角色（内部服务调用）", "parameters": [ { "description": "初始化管理员请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.BootstrapAdminRequest" } } ], "responses": { "200": { "description": "初始化结果", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_BootstrapAdminResponse" } }, "403": { "description": "生产环境禁用", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/internal/identity/check-permission": { "post": { "description": "供其他微服务内部调用的权限检查接口（identity-service HTTP fallback，RBAC 主服务见 rbac-service /internal/rbac/check-permission）。通过X-Tenant-ID请求头传入租户信息，支持直接指定user_id。需InternalAPIKeyAuth认证。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "RBAC - 权限" ], "summary": "检查用户权限（内部服务调用）", "parameters": [ { "description": "内部权限检查请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CheckPermissionInternalRequest" } } ], "responses": { "200": { "description": "权限检查结果", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_PermissionCheckDetailResponse" } }, "400": { "description": "请求参数错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/internal/identity/erase-user/{user_id}": { "delete": { "description": "内部API：硬删除指定用户的所有认证数据，通过 X-Tenant-ID 请求头传递租户 ID，无需认证", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "内部硬删除用户", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true } ], "responses": { "200": { "description": "删除成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/internal/identity/link-saml-user": { "post": { "description": "内部API：根据 SAML assertion 关联已存在用户或创建新用户，供 saml-service 调用。需InternalAPIKeyAuth认证。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "关联或创建SAML用户（内部服务调用）", "parameters": [ { "description": "SAML用户关联请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LinkSAMLUserRequest" } } ], "responses": { "200": { "description": "关联结果", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_LinkSAMLUserResponse" } } } } }, "/internal/identity/maker-checker/record": { "post": { "description": "记录关键操作的双人复核（Maker-Checker）信息", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "记录双人复核", "parameters": [ { "description": "记录请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.MakerCheckerRecordRequest" } } ], "responses": { "201": { "description": "记录成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.MakerCheckerRecordResponse" } } } } }, "/internal/identity/pim/cleanup-expired": { "post": { "description": "内部API：清理指定租户或当前租户的过期角色激活记录。生产环境禁止外部调用。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "RBAC - 角色" ], "summary": "清理过期角色激活", "parameters": [ { "description": "清理请求 { tenant_id: string }", "name": "request", "in": "body", "required": true, "schema": { "type": "object" } } ], "responses": { "200": { "description": "清理成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_CleanupExpiredResponse" } }, "400": { "description": "请求参数无效或禁止访问", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/internal/identity/record-login-failure": { "post": { "description": "内部API：记录用户登录失败事件", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "记录登录失败", "parameters": [ { "description": "记录请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RecordLoginFailureRequest" } } ], "responses": { "200": { "description": "记录结果", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DataResponse" } } } } }, "/internal/identity/record-login-success": { "post": { "description": "内部API：记录用户登录成功事件", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "记录登录成功", "parameters": [ { "description": "记录请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RecordLoginSuccessRequest" } } ], "responses": { "200": { "description": "记录成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/internal/identity/session-policy/{tenant_id}": { "get": { "description": "内部API：获取指定租户的会话策略（TTL/并发限制/刷新令牌轮换等），未配置时返回默认策略。需InternalAPIKeyAuth认证。", "produces": [ "application/json" ], "tags": [ "会话管理" ], "summary": "获取会话策略（内部服务调用）", "parameters": [ { "type": "string", "description": "租户ID", "name": "tenant_id", "in": "path", "required": true } ], "responses": { "200": { "description": "会话策略", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_SessionPolicyResponse" } } } } }, "/internal/identity/users/{user_id}": { "get": { "description": "内部API：验证用户是否存在于指定租户，供其他服务内部调用。需InternalAPIKeyAuth认证。", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "获取用户（内部服务调用）", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true } ], "responses": { "200": { "description": "用户信息", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_AuthUserResponse" } } } } }, "/internal/identity/users/{user_id}/age-classification": { "put": { "description": "内部API：根据出生日期更新用户的年龄分类与未成年标记，供 verification-service 调用。需InternalAPIKeyAuth认证。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "未成年人保护" ], "summary": "更新用户年龄分类（内部服务调用）", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true }, { "description": "年龄分类更新请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UpdateAgeClassificationRequest" } } ], "responses": { "200": { "description": "更新后的用户信息", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_AuthUserResponse" } } } } }, "/internal/identity/users/{user_id}/status": { "put": { "description": "内部API：更新指定用户在租户下的状态（如 active/disabled），供 tenant-service 审批流程调用。需InternalAPIKeyAuth认证。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "更新用户状态（内部服务调用）", "parameters": [ { "type": "string", "description": "用户ID", "name": "user_id", "in": "path", "required": true }, { "description": "更新状态请求（status 字段）", "name": "request", "in": "body", "required": true, "schema": { "type": "object" } } ], "responses": { "200": { "description": "更新成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/internal/identity/validate-key": { "post": { "description": "Gateway/其他服务调用此接口验证 API Key 的有效性", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "API Key" ], "summary": "验证 API Key（内部）", "parameters": [ { "description": "验证请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ValidateKeyRequest" } } ], "responses": { "200": { "description": "验证成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ValidateKeyResult" } }, "401": { "description": "Key 无效" } } } }, "/internal/identity/verify-password": { "post": { "description": "验证用户密码是否正确，返回验证结果及用户ID", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "验证密码", "parameters": [ { "description": "验证密码请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.VerifyPasswordRequest" } } ], "responses": { "200": { "description": "验证成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.VerifyPasswordResponse" } } } } }, "/iots": { "get": { "description": "查询当前租户下的 Non-Human Identity (NHI) IoT Device 列表", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "IoTs" ], "summary": "List User Devices", "parameters": [ { "type": "string", "description": "状态过滤", "name": "status", "in": "query" }, { "type": "string", "description": "工作负载子类型", "name": "workload_subtype", "in": "query" }, { "type": "integer", "default": 1, "description": "页码", "name": "page", "in": "query" }, { "type": "integer", "default": 20, "description": "每页数量", "name": "page_size", "in": "query" } ], "responses": { "200": { "description": "IoT Device 列表", "schema": { "$ref": "#/definitions/dto.ListResponse-device_domain_DeviceInfo" } } } } }, "/iots/pair": { "post": { "description": "通过 user_code 配对 Non-Human Identity (NHI) IoT Device", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "IoTs" ], "summary": "Pair Device", "parameters": [ { "description": "配对设备请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/device_domain.PairDeviceRequest" } } ], "responses": { "200": { "description": "配对后的 Device", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-device_domain_DeviceInfo" } } } } }, "/iots/{iot_id}": { "delete": { "description": "取消配对指定的 Non-Human Identity (NHI) IoT Device", "tags": [ "IoTs" ], "summary": "Unpair Device", "parameters": [ { "type": "string", "description": "设备 ID", "name": "iot_id", "in": "path", "required": true } ], "responses": { "200": { "description": "取消配对成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/iots/{iot_id}/family-access": { "get": { "security": [ { "bearerAuth": [] } ], "description": "列出指定 IoT Device 的家庭共享成员（经 rbac-service relationships 元组 + identity 补查 email/username）。无成员返回 200 + 空列表（非 404）。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "IoTs" ], "summary": "List Family Members", "parameters": [ { "type": "string", "description": "设备 ID", "name": "iot_id", "in": "path", "required": true } ], "responses": { "200": { "description": "家庭成员列表", "schema": { "$ref": "#/definitions/dto.ListResponse-device_domain_FamilyMemberInfo" } }, "404": { "description": "设备不存在", "schema": { "$ref": "#/definitions/dto.Problem" } } } }, "post": { "security": [ { "bearerAuth": [] } ], "description": "添加家庭共享成员（经 rbac-service upsert 元组）。role 枚举: parent_admin/child_limited/guest_viewer。重复添加幂等 200。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "IoTs" ], "summary": "Add Family Member", "parameters": [ { "type": "string", "description": "设备 ID", "name": "iot_id", "in": "path", "required": true }, { "description": "添加成员请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/device_domain.AddFamilyMemberRequest" } } ], "responses": { "200": { "description": "新增成员", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-device_domain_FamilyMemberInfo" } }, "400": { "description": "非法角色", "schema": { "$ref": "#/definitions/dto.Problem" } }, "404": { "description": "设备不存在或成员邮箱不存在", "schema": { "$ref": "#/definitions/dto.Problem" } } } } }, "/iots/{iot_id}/family-access/{member_id}": { "delete": { "security": [ { "bearerAuth": [] } ], "description": "移除指定家庭成员（删除该成员在设备下的全部 role 元组）。无元组 → 404 family_member_not_found。", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "IoTs" ], "summary": "Remove Family Member", "parameters": [ { "type": "string", "description": "设备 ID", "name": "iot_id", "in": "path", "required": true }, { "type": "string", "description": "成员用户 ID", "name": "member_id", "in": "path", "required": true } ], "responses": { "200": { "description": "移除成功", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "404": { "description": "设备不存在或成员元组不存在", "schema": { "$ref": "#/definitions/dto.Problem" } } } } }, "/iots/{iot_id}/transfer": { "post": { "description": "将指定的 Non-Human Identity (NHI) IoT Device 转移给新的所有者", "tags": [ "IoTs" ], "summary": "Transfer Device", "parameters": [ { "type": "string", "description": "设备 ID", "name": "iot_id", "in": "path", "required": true }, { "description": "转移设备请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/device_domain.TransferDeviceRequest" } } ], "responses": { "200": { "description": "转移后的 Device", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-device_domain_DeviceInfo" } } } } }, "/public/auth-config/by-domain/{domain}": { "get": { "description": "根据域名（如example.com）查询对应租户的公开认证配置，包括密码策略、可用的OAuth和SSO提供商、登录方式等。无需认证。", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "根据域名获取租户认证配置（公开）", "parameters": [ { "type": "string", "description": "域名", "name": "domain", "in": "path", "required": true } ], "responses": { "200": { "description": "租户认证配置信息", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_PublicAuthConfigResponse" } }, "400": { "description": "域名参数无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "404": { "description": "未找到对应租户", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } }, "/public/auth-config/by-slug/{slug}": { "get": { "description": "根据租户名称/slug获取公开的认证配置，无需认证", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "根据租户标识获取认证配置（公开）", "parameters": [ { "type": "string", "description": "租户名称或slug", "name": "slug", "in": "path", "required": true } ], "responses": { "200": { "description": "认证配置", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_PublicAuthConfigResponse" } } } } }, "/public/auth-config/{tenant_id}": { "get": { "description": "根据租户ID获取公开的认证配置（密码策略、租户信息），无需认证", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "获取租户认证配置（公开）", "parameters": [ { "type": "string", "description": "租户ID", "name": "tenant_id", "in": "path", "required": true } ], "responses": { "200": { "description": "认证配置", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_PublicAuthConfigResponse" } } } } }, "/public/key-exchange": { "get": { "description": "生成临时 ECDH P-256 密钥对，返回服务端公钥和交换 ID。客户端用此公钥完成 ECDH → 派生 AES-256-GCM 会话密钥加密密码。", "produces": [ "application/json" ], "tags": [ "身份认证 - 内部接口" ], "summary": "ECDH 密钥交换", "responses": { "200": { "description": "密钥交换参数", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_KeyExchangeResponse" } } } } }, "/public/password-strength": { "post": { "description": "使用系统默认密码策略检查密码强度，无需认证", "consumes": [ "application/json" ], "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "检查密码强度（公开）", "parameters": [ { "description": "密码检查请求", "name": "request", "in": "body", "required": true, "schema": { "$ref": "#/definitions/handler.CheckPublicPasswordStrengthRequest" } } ], "responses": { "200": { "description": "密码强度", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_PasswordStrengthResponse" } } } } }, "/public/tenants/discover": { "get": { "description": "列出可公开发现和加入的租户列表，包含租户ID、名称、显示名称和成员加入方式。用于注册页面展示可选租户。无需认证。", "produces": [ "application/json" ], "tags": [ "身份认证" ], "summary": "发现公开可加入的租户", "responses": { "200": { "description": "可发现的租户列表", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.DataResponse-array_gitee_com_autional_service-identity_internal_handler_dto_DiscoverTenantInfo" } }, "400": { "description": "请求参数无效", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } }, "500": { "description": "服务器内部错误", "schema": { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.SimpleResponse" } } } } } }, "definitions": { "agent_domain.AgentActivityInfo": { "type": "object", "properties": { "action": { "type": "string" }, "created_at": { "type": "string" }, "detail": { "type": "string" }, "operator_id": { "type": "string" } } }, "agent_domain.AgentCredentialInfo": { "type": "object", "properties": { "agent_id": { "type": "string" }, "created_at": { "type": "string" }, "cred_type": { "type": "string" }, "id": { "type": "string" }, "key_prefix": { "type": "string" }, "name": { "type": "string" }, "status": { "type": "string" } } }, "agent_domain.AgentInfo": { "type": "object", "properties": { "callback_url": { "type": "string" }, "created_at": { "type": "string" }, "description": { "type": "string" }, "identity_id": { "type": "string" }, "jit_ttl": { "type": "integer" }, "last_rotated_at": { "type": "string" }, "name": { "type": "string" }, "owner_id": { "type": "string" }, "owner_principal_id": { "description": "OwnerPrincipalID additive（json omitempty）；保留 OwnerID 字段与值以向后兼容（C-4）。", "type": "string" }, "rotation_days": { "type": "integer" }, "status": { "type": "string" }, "updated_at": { "type": "string" }, "workload_subtype": { "type": "string" } } }, "agent_domain.AgentPermissionInfo": { "type": "object", "properties": { "action": { "type": "string" }, "code": { "type": "string" }, "effect": { "type": "string" }, "name": { "type": "string" }, "resource": { "type": "string" } } }, "agent_domain.CreateAgentCredentialRequest": { "type": "object", "required": [ "name" ], "properties": { "cred_type": { "type": "string" }, "name": { "type": "string" } } }, "agent_domain.CreateAgentCredentialResult": { "type": "object", "properties": { "credential": { "$ref": "#/definitions/agent_domain.AgentCredentialInfo" }, "raw_key": { "type": "string" } } }, "agent_domain.CreateAgentRequest": { "type": "object", "required": [ "name" ], "properties": { "description": { "type": "string" }, "jit_ttl": { "type": "integer", "maximum": 2147483647, "minimum": 60 }, "name": { "type": "string" }, "role_code": { "description": "default: agent_executor", "type": "string" }, "rotation_days": { "type": "integer", "maximum": 3650, "minimum": 1 }, "workload_subtype": { "description": "default: agent", "type": "string" } } }, "agent_domain.UpdateAgentRequest": { "type": "object", "properties": { "callback_url": { "type": "string" }, "description": { "type": "string" }, "name": { "type": "string" } } }, "device_domain.AddFamilyMemberRequest": { "type": "object", "required": [ "email", "role" ], "properties": { "email": { "description": "成员邮箱（必须为租户内已存在用户）", "type": "string", "example": "child@example.com" }, "role": { "description": "成员角色（枚举）", "type": "string", "example": "child_limited" } } }, "device_domain.CreateDeviceRequest": { "type": "object", "required": [ "name" ], "properties": { "firmware_ver": { "type": "string" }, "hardware_id": { "type": "string" }, "manufacturer": { "type": "string" }, "name": { "type": "string" }, "workload_subtype": { "type": "string" } } }, "device_domain.DeviceInfo": { "type": "object", "properties": { "created_at": { "type": "string" }, "firmware_ver": { "type": "string" }, "hardware_id": { "type": "string" }, "identity_id": { "type": "string" }, "manufacturer": { "type": "string" }, "name": { "type": "string" }, "owner_id": { "type": "string" }, "owner_principal_id": { "description": "OwnerPrincipalID additive（json omitempty）；保留 OwnerID 以向后兼容（C-4）。", "type": "string" }, "pairing_code": { "type": "string" }, "status": { "type": "string" }, "updated_at": { "type": "string" }, "workload_subtype": { "type": "string" } } }, "device_domain.FamilyMemberInfo": { "type": "object", "properties": { "assigned_at": { "description": "加入时间（RFC3339）", "type": "string", "example": "2026-08-07T10:00:00Z" }, "device_id": { "description": "设备ID", "type": "string", "example": "dev_abc123" }, "email": { "description": "成员邮箱（补查，缺失置空）", "type": "string", "example": "child@example.com" }, "id": { "description": "成员ID（= user_id = 元组 subject_id）", "type": "string", "example": "usr_xyz789" }, "role": { "description": "成员角色（枚举）", "type": "string", "example": "child_limited" }, "status": { "description": "状态（固定 active）", "type": "string", "example": "active" }, "user_id": { "description": "用户ID（= id）", "type": "string", "example": "usr_xyz789" }, "username": { "description": "成员用户名（补查，缺失置空）", "type": "string", "example": "child01" } } }, "device_domain.PairDeviceRequest": { "type": "object", "properties": { "user_code": { "type": "string" } } }, "device_domain.TransferDeviceRequest": { "type": "object", "properties": { "new_owner_id": { "type": "string" } } }, "domain.RiskEventDayCount": { "type": "object", "properties": { "count": { "type": "integer" }, "date": { "type": "string" } } }, "domain.RiskEventTypeCount": { "type": "object", "properties": { "count": { "type": "integer" }, "event_type": { "type": "string" } } }, "domain.RiskScoreRange": { "type": "object", "properties": { "count": { "type": "integer" }, "range": { "description": "low, medium, high, critical", "type": "string" } } }, "domain.SCIMAttribute": { "type": "object", "properties": { "caseExact": { "type": "boolean" }, "description": { "type": "string" }, "multiValued": { "type": "boolean" }, "mutability": { "type": "string" }, "name": { "type": "string" }, "required": { "type": "boolean" }, "returned": { "type": "string" }, "subAttributes": { "type": "array", "items": { "$ref": "#/definitions/domain.SCIMAttribute" } }, "type": { "type": "string" }, "uniqueness": { "type": "string" } } }, "domain.SCIMAuthScheme": { "type": "object", "properties": { "description": { "type": "string" }, "name": { "type": "string" }, "primary": { "type": "boolean" }, "type": { "type": "string" } } }, "domain.SCIMBulkSupported": { "type": "object", "properties": { "maxOperations": { "type": "integer" }, "maxPayloadSize": { "type": "integer" }, "supported": { "type": "boolean" } } }, "domain.SCIMEmail": { "type": "object", "properties": { "primary": { "type": "boolean" }, "type": { "type": "string" }, "value": { "type": "string" } } }, "domain.SCIMFilterSupported": { "type": "object", "properties": { "maxResults": { "type": "integer" }, "supported": { "type": "boolean" } } }, "domain.SCIMGroup": { "type": "object", "properties": { "displayName": { "type": "string" }, "externalId": { "type": "string" }, "id": { "type": "string" }, "members": { "type": "array", "items": { "$ref": "#/definitions/domain.SCIMMember" } }, "meta": { "$ref": "#/definitions/domain.SCIMMeta" }, "schemas": { "type": "array", "items": { "type": "string" } } } }, "domain.SCIMGroupRef": { "type": "object", "properties": { "$ref": { "type": "string" }, "display": { "type": "string" }, "value": { "type": "string" } } }, "domain.SCIMListResponse": { "type": "object", "properties": { "Resources": {}, "itemsPerPage": { "type": "integer" }, "schemas": { "type": "array", "items": { "type": "string" } }, "startIndex": { "type": "integer" }, "totalResults": { "type": "integer" } } }, "domain.SCIMMember": { "type": "object", "properties": { "$ref": { "type": "string" }, "display": { "type": "string" }, "value": { "type": "string" } } }, "domain.SCIMMeta": { "type": "object", "properties": { "created": { "type": "string" }, "lastModified": { "type": "string" }, "location": { "type": "string" }, "resourceType": { "type": "string" } } }, "domain.SCIMName": { "type": "object", "properties": { "familyName": { "type": "string" }, "formatted": { "type": "string" }, "givenName": { "type": "string" } } }, "domain.SCIMPatchOperation": { "type": "object", "properties": { "op": { "type": "string" }, "path": { "type": "string" }, "value": {} } }, "domain.SCIMPhoneNumber": { "type": "object", "properties": { "type": { "type": "string" }, "value": { "type": "string" } } }, "domain.SCIMResourceType": { "type": "object", "properties": { "description": { "type": "string" }, "endpoint": { "type": "string" }, "id": { "type": "string" }, "meta": { "$ref": "#/definitions/domain.SCIMMeta" }, "name": { "type": "string" }, "schema": { "type": "string" }, "schemaExtensions": { "type": "array", "items": { "type": "string" } }, "schemas": { "type": "array", "items": { "type": "string" } } } }, "domain.SCIMSchemaDefinition": { "type": "object", "properties": { "attributes": { "type": "array", "items": { "$ref": "#/definitions/domain.SCIMAttribute" } }, "description": { "type": "string" }, "id": { "type": "string" }, "meta": { "$ref": "#/definitions/domain.SCIMMeta" }, "name": { "type": "string" }, "schemas": { "type": "array", "items": { "type": "string" } } } }, "domain.SCIMServiceProviderConfig": { "type": "object", "properties": { "authenticationSchemes": { "type": "array", "items": { "$ref": "#/definitions/domain.SCIMAuthScheme" } }, "bulk": { "$ref": "#/definitions/domain.SCIMBulkSupported" }, "changePassword": { "$ref": "#/definitions/domain.SCIMSupported" }, "etag": { "$ref": "#/definitions/domain.SCIMSupported" }, "filter": { "$ref": "#/definitions/domain.SCIMFilterSupported" }, "meta": { "$ref": "#/definitions/domain.SCIMMeta" }, "patch": { "$ref": "#/definitions/domain.SCIMSupported" }, "schemas": { "type": "array", "items": { "type": "string" } }, "sort": { "$ref": "#/definitions/domain.SCIMSupported" } } }, "domain.SCIMSupported": { "type": "object", "properties": { "supported": { "type": "boolean" } } }, "domain.SCIMUser": { "type": "object", "properties": { "active": { "type": "boolean" }, "displayName": { "type": "string" }, "emails": { "type": "array", "items": { "$ref": "#/definitions/domain.SCIMEmail" } }, "externalId": { "type": "string" }, "groups": { "type": "array", "items": { "$ref": "#/definitions/domain.SCIMGroupRef" } }, "id": { "type": "string" }, "meta": { "$ref": "#/definitions/domain.SCIMMeta" }, "name": { "$ref": "#/definitions/domain.SCIMName" }, "phoneNumbers": { "type": "array", "items": { "$ref": "#/definitions/domain.SCIMPhoneNumber" } }, "schemas": { "type": "array", "items": { "type": "string" } }, "userName": { "type": "string" } } }, "domain.SignalWeights": { "type": "object", "properties": { "credential_leaked": { "type": "integer" }, "ip_bad_reputation": { "type": "integer" }, "ip_unknown": { "type": "integer" }, "ip_vpn": { "type": "integer" }, "login_failure_high": { "type": "integer" }, "login_failure_moderate": { "type": "integer" }, "mfa_method_changed": { "type": "integer" }, "new_country": { "type": "integer" }, "new_device_or_ip": { "type": "integer" }, "session_hijack": { "type": "integer" }, "unknown_device": { "type": "integer" }, "unusual_location": { "type": "integer" }, "unusual_time": { "type": "integer" }, "velocity_anomaly": { "type": "integer" } } }, "domain.TopRiskUser": { "type": "object", "properties": { "avg_score": { "type": "number" }, "count": { "type": "integer" }, "max_score": { "type": "number" }, "user_id": { "type": "string" } } }, "domain.UserConsent": { "type": "object", "properties": { "granted": { "type": "boolean" }, "id": { "type": "string" }, "ip_address": { "type": "string" }, "recorded_at": { "type": "string" }, "revoked_at": { "type": "string" }, "scope": { "description": "marketing, analytics, third_party, terms, privacy", "type": "string" }, "tenant_id": { "type": "string" }, "user_agent": { "type": "string" }, "user_id": { "type": "string" }, "version": { "description": "政策版本号（R4.3 语义分流：DB 列 policy_version，JSON 契约保持 version）", "type": "string" } } }, "dto.FieldViolation": { "type": "object", "properties": { "code": { "description": "Code 是错误代码（可选）\n用于程序识别错误类型，如 \"required\", \"format\", \"range\"", "type": "string" }, "description": { "description": "Description 是人类可读的错误描述\n应该说明违反了什么规则，如 \"必须是一个有效的邮箱地址\"", "type": "string" }, "field": { "description": "Field 是错误字段的路径\n使用点号表示嵌套字段，如 \"user.email\" 或 \"addresses[0].city\"", "type": "string" }, "standard": { "description": "Standard 是指向权威规范文档的 URI 引用\n用于告知 API 消费者具体违反哪个标准\n示例：\"https://www.rfc-editor.org/info/rfc5322\"", "type": "string" }, "value": { "description": "Value 是导致错误的值（可选，开发模式下使用）\n生产环境可能不返回此字段以避免泄露敏感信息" } } }, "dto.ListResponse-agent_domain_AgentActivityInfo": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/agent_domain.AgentActivityInfo" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "dto.ListResponse-agent_domain_AgentCredentialInfo": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/agent_domain.AgentCredentialInfo" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "dto.ListResponse-agent_domain_AgentInfo": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/agent_domain.AgentInfo" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "dto.ListResponse-agent_domain_AgentPermissionInfo": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/agent_domain.AgentPermissionInfo" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "dto.ListResponse-any": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": {} }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "dto.ListResponse-device_domain_DeviceInfo": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/device_domain.DeviceInfo" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "dto.ListResponse-device_domain_FamilyMemberInfo": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/device_domain.FamilyMemberInfo" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "dto.ListResponse-gitee_com_autional_service-identity_internal_handler_dto_ABACPolicyResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ABACPolicyResponse" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "dto.ListResponse-gitee_com_autional_service-identity_internal_handler_dto_ActivationResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ActivationResponse" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "dto.ListResponse-gitee_com_autional_service-identity_internal_handler_dto_ChildrenConsentResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ChildrenConsentResponse" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "dto.ListResponse-gitee_com_autional_service-identity_internal_handler_dto_DeviceResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DeviceResponse" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "dto.ListResponse-gitee_com_autional_service-identity_internal_handler_dto_MakerCheckerRecordResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.MakerCheckerRecordResponse" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "dto.ListResponse-gitee_com_autional_service-identity_internal_handler_dto_WebAuthnCredentialResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.WebAuthnCredentialResponse" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "dto.ListResponse-handler_SamlLinkedAccountInfo": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/handler.SamlLinkedAccountInfo" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "dto.ListResponse-robot_domain_RobotInfo": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/robot_domain.RobotInfo" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "dto.Problem": { "type": "object", "properties": { "code": { "description": "Code 是业务错误码\n用于程序处理特定错误场景\n示例：30101001", "type": "integer" }, "detail": { "description": "Detail 是针对此具体错误实例的人类可读解释\n可以包含具体的错误细节，如\"Field 'email' is required\"", "type": "string" }, "errors": { "description": "Errors 是字段级验证错误列表（扩展字段）\n遵循 Web API 标准实践，每个错误包含字段名和错误信息", "type": "array", "items": { "$ref": "#/definitions/dto.FieldViolation" } }, "i18n_args": { "description": "I18nArgs 是国际化参数\n用于动态填充翻译模板", "type": "object", "additionalProperties": {} }, "i18n_key": { "description": "I18nKey 是国际化键\n用于客户端本地化错误消息\n示例：\"error.user_not_found\"", "type": "string" }, "instance": { "description": "Instance 是发生问题的具体URI引用\n通常是请求的URL，可能包含查询参数\n示例：\"/api/v1/users?limit=invalid\"", "type": "string" }, "request_id": { "description": "RequestID 是请求唯一标识\n用于日志关联和问题追踪\n示例：\"req_550e8400-e29b-41d4-a716-446655440000\"", "type": "string" }, "retry_after": { "description": "RetryAfter 用于 429 Too Many Requests 响应\n指示客户端应在多少秒后重试请求（RFC 6585）", "type": "integer" }, "service": { "description": "Service 是服务名\n用于微服务架构中定位错误来源\n示例：\"auth-service\"", "type": "string" }, "span_id": { "description": "SpanID 是当前 span 标识\n用于精确定位分布式链路中的当前节点", "type": "string" }, "status": { "description": "Status 是产生的HTTP状态码\n用于客户端区分问题类型，不随Accept-Language变化\n示例：400, 401, 403, 404, 500", "type": "integer" }, "timestamp": { "description": "Timestamp 是错误发生时间\nISO 8601 格式\n示例：\"2026-04-03T12:00:00Z\"", "type": "string" }, "title": { "description": "Title 是简短、人类可读的问题类型摘要\n相同的 Type 应该始终有相同的 Title（不随实例变化）\n示例：\"Invalid Request Parameters\"", "type": "string" }, "trace_id": { "description": "TraceID 是分布式追踪标识\n遵循 W3C Trace Context 标准\n示例：\"00-0af7651916cd43dd8448eb211c80319c-b7ad6b7169203331-01\"", "type": "string" }, "type": { "description": "Type 是标识问题类型的URI引用\n当该URI被解引用时，应提供人类可读的文档\n示例：\"https://api.example.com/errors/invalid-request\"", "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-agent_domain_AgentCredentialInfo": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/agent_domain.AgentCredentialInfo" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-agent_domain_AgentInfo": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/agent_domain.AgentInfo" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-agent_domain_CreateAgentCredentialResult": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/agent_domain.CreateAgentCredentialResult" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-any": { "type": "object", "properties": { "code": { "type": "integer" }, "data": {}, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-array_gitee_com_autional_service-identity_internal_handler_dto_ActivationResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ActivationResponse" } }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-array_gitee_com_autional_service-identity_internal_handler_dto_AvailableRoleResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.AvailableRoleResponse" } }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-array_gitee_com_autional_service-identity_internal_handler_dto_DiscoverTenantInfo": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DiscoverTenantInfo" } }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-array_gitee_com_autional_service-identity_internal_handler_dto_LdapHealthResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LdapHealthResponse" } }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-device_domain_DeviceInfo": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/device_domain.DeviceInfo" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-device_domain_FamilyMemberInfo": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/device_domain.FamilyMemberInfo" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_ABACPolicyResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ABACPolicyResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_ActivationResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ActivationResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_AuthUserResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.AuthUserResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_BootstrapAdminResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.BootstrapAdminResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_CleanupExpiredResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.CleanupExpiredResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_ImpersonateResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ImpersonateResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_KeyExchangeResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.KeyExchangeResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_LdapGroupRoleMappingResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LdapGroupRoleMappingResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_LdapLoginResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LdapLoginResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_LdapTestConnectionResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LdapTestConnectionResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_LinkSAMLUserResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LinkSAMLUserResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_PasswordStrengthResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.PasswordStrengthResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_PermissionCheckDetailResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.PermissionCheckDetailResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_PermissionCheckResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.PermissionCheckResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_PublicAuthConfigResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.PublicAuthConfigResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_QrLoginInitiateResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.QrLoginInitiateResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_QrLoginStatusResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.QrLoginStatusResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_RoleCheckResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RoleCheckResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_SessionPolicyResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.SessionPolicyResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_StopImpersonationResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.StopImpersonationResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_VerificationTrackingQueryResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.VerificationTrackingQueryResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-gitee_com_autional_service-identity_internal_handler_dto_Web3VerifyResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.Web3VerifyResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-handler_riskConfigResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/handler.riskConfigResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-handler_riskDashboardResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/handler.riskDashboardResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-robot_domain_RobotInfo": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/robot_domain.RobotInfo" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-robot_handler_IssueIntentTokenResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/robot_handler.IssueIntentTokenResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.DataResponse-string": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "type": "string" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-core_base_dto.PageInfo": { "type": "object", "properties": { "has_next": { "description": "HasNext indicates whether there is a next page", "type": "boolean" }, "has_prev": { "description": "HasPrev indicates whether there is a previous page", "type": "boolean" }, "page": { "description": "Page is the current page number (1-based)", "type": "integer" }, "page_size": { "description": "PageSize is the number of items per page", "type": "integer" }, "total": { "description": "Total is the total number of items across all pages", "type": "integer" }, "total_pages": { "description": "TotalPages is the total number of pages", "type": "integer" } } }, "gitee_com_autional_service-core_base_dto.SimpleResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ABACPolicyResponse": { "type": "object", "properties": { "condition": { "type": "string" }, "created_at": { "type": "string" }, "description": { "type": "string" }, "effect": { "type": "string" }, "enabled": { "type": "boolean" }, "id": { "type": "string" }, "name": { "type": "string" }, "priority": { "type": "integer" }, "tenant_id": { "type": "string" }, "updated_at": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ActivationResponse": { "type": "object", "properties": { "activated_at": { "type": "string" }, "created_at": { "type": "string" }, "expire_at": { "type": "string" }, "id": { "type": "string" }, "justification": { "type": "string" }, "revoked_at": { "type": "string" }, "role_id": { "type": "string" }, "status": { "type": "string" }, "tenant_id": { "type": "string" }, "user_id": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.AddIPRestrictionRequest": { "type": "object", "required": [ "value" ], "properties": { "label": { "type": "string" }, "value": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.AddIdentityRequest": { "description": "添加身份凭证请求参数", "type": "object", "required": [ "identifier", "type" ], "properties": { "code": { "description": "验证码", "type": "string" }, "identifier": { "description": "标识", "type": "string" }, "password": { "description": "密码", "type": "string" }, "type": { "description": "类型", "type": "string", "enum": [ "email", "phone" ] } } }, "gitee_com_autional_service-identity_internal_handler_dto.AddIdentityResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.IdentityResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.AddRecoveryContactRequest": { "description": "添加备用联系方式", "type": "object", "required": [ "type", "value" ], "properties": { "type": { "description": "类型", "type": "string", "enum": [ "email", "phone" ] }, "value": { "description": "联系方式", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.AdminImpersonateRequest": { "description": "管理员模拟其他用户登录请求", "type": "object", "required": [ "user_id" ], "properties": { "reason": { "type": "string", "example": "Troubleshooting user issue" }, "user_id": { "type": "string", "example": "01ARZ3NDEKTSV4RRFFQ69G5FAV" } } }, "gitee_com_autional_service-identity_internal_handler_dto.AdminImpersonateResponse": { "description": "管理员模拟用户登录响应", "type": "object", "properties": { "access_token": { "type": "string", "example": "eyJhbGciOi..." }, "expires_in": { "type": "integer", "example": 1800 }, "refresh_token": { "type": "string", "example": "eyJhbGciOi..." }, "token_type": { "type": "string", "example": "Bearer" }, "user": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UserInfo" } } }, "gitee_com_autional_service-identity_internal_handler_dto.AdminImpersonateResponseWrapper": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.AdminImpersonateResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.AdminStatsData": { "type": "object", "properties": { "active": { "type": "integer" }, "inactive": { "type": "integer" }, "revoked": { "type": "integer" }, "total": { "type": "integer" } } }, "gitee_com_autional_service-identity_internal_handler_dto.AnonymousSigninRequest": { "description": "匿名认证请求参数", "type": "object", "properties": { "tenant_id": { "description": "租户ID", "type": "string", "example": "tnt_xyz789" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ApiKeyAnomalyResponse": { "description": "API Key异常检测结果", "type": "object", "properties": { "description": { "type": "string", "example": "High authentication failure rate detected" }, "key_id": { "type": "string", "example": "01ARZ3NDEKTSV4RRFFQ69G5FAV" }, "severity": { "type": "string", "example": "high" }, "type": { "type": "string", "example": "high_failure_rate" }, "value": { "type": "number", "example": 0.85 } } }, "gitee_com_autional_service-identity_internal_handler_dto.ApiKeyAuditLogListResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ApiKeyAuditLogResponse" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ApiKeyAuditLogResponse": { "type": "object", "properties": { "action": { "type": "string", "example": "api_key.created" }, "api_key_id": { "type": "string", "example": "01ARZ3NDEKTSV4RRFFQ69G5FAV" }, "created_at": { "type": "string", "example": "2024-01-01T00:00:00Z" }, "detail": { "type": "string", "example": "API key created successfully" }, "id": { "type": "string", "example": "01ARZ3NDEKTSV4RRFFQ69G5FAV" }, "ip": { "type": "string", "example": "192.168.1.100" }, "success": { "type": "boolean", "example": true }, "user_agent": { "type": "string", "example": "Mozilla/5.0" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ApiKeyListResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ApiKeyResponse" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ApiKeyResponse": { "type": "object", "properties": { "created_at": { "type": "string", "example": "2024-01-01T00:00:00Z" }, "environment": { "type": "string", "example": "live" }, "expires_at": { "type": "string", "example": "2025-01-15T00:00:00Z" }, "id": { "type": "string", "example": "01ARZ3NDEKTSV4RRFFQ69G5FAV" }, "ip_restrictions": { "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ipRestrictionDTO" } }, "last_used_at": { "type": "string", "example": "2024-01-15T10:30:00Z" }, "last_used_ip": { "type": "string", "example": "192.168.1.100" }, "name": { "type": "string", "example": "my-api-key" }, "scopes": { "type": "array", "items": { "type": "string" }, "example": [ "[\"read\"", "\"write\"]" ] }, "status": { "type": "string", "example": "active" }, "tenant_id": { "type": "string", "example": "01ARZ3NDEKTSV4RRFFQ69G5FAV" }, "updated_at": { "type": "string", "example": "2024-06-15T12:00:00Z" }, "usage_count": { "type": "integer", "example": 42 }, "user_id": { "type": "string", "example": "01ARZ3NDEKTSV4RRFFQ69G5FAV" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ApiKeyUsageResponse": { "type": "object", "properties": { "id": { "type": "string", "example": "01ARZ3NDEKTSV4RRFFQ69G5FAV" }, "last_used_at": { "type": "string", "example": "2024-01-15T10:30:00Z" }, "last_used_ip": { "type": "string", "example": "192.168.1.100" }, "name": { "type": "string", "example": "my-api-key" }, "status": { "type": "string", "example": "active" }, "usage_count": { "type": "integer", "example": 42 } } }, "gitee_com_autional_service-identity_internal_handler_dto.AuditLogListResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.AuditLogResponse" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "gitee_com_autional_service-identity_internal_handler_dto.AuditLogResponse": { "description": "审计日志记录", "type": "object", "properties": { "action": { "description": "Action", "type": "string", "example": "user.login" }, "created_at": { "description": "时间", "type": "string", "example": "2026-04-15T10:30:00Z" }, "details": { "description": "Details", "type": "string", "example": "details" }, "id": { "description": "日志ID", "type": "string", "example": "audit_abc123" }, "ip": { "description": "IP", "type": "string", "example": "192.168.1.1" }, "resource": { "description": "Resource", "type": "string", "example": "session" }, "resource_id": { "description": "Resource ID", "type": "string", "example": "sess_123" }, "status": { "description": "状态：success/failed；空串=未知（ADR-06）", "type": "string", "example": "success" }, "tenant_id": { "description": "租户ID", "type": "string", "example": "tnt_xyz789" }, "user_agent": { "description": "User-Agent", "type": "string", "example": "Mozilla/5.0" }, "user_id": { "description": "用户ID", "type": "string", "example": "usr_abc123" } } }, "gitee_com_autional_service-identity_internal_handler_dto.AuthUserResponse": { "description": "认证用户信息", "type": "object", "properties": { "age_group": { "description": "年龄分组", "type": "string" }, "birth_date": { "description": "出生日期 (RFC3339)", "type": "string" }, "created_at": { "description": "创建时间", "type": "string", "example": "2026-01-01T00:00:00Z" }, "email": { "description": "邮箱", "type": "string", "example": "john@example.com" }, "email_verified_at": { "description": "邮箱验证时间", "type": "string", "example": "2026-01-10T08:00:00Z" }, "id": { "description": "用户ID", "type": "string", "example": "usr_abc123" }, "is_minor": { "description": "是否未成年人", "type": "boolean" }, "last_login_at": { "description": "最后登录", "type": "string", "example": "2026-04-14T10:30:00Z" }, "last_login_ip": { "description": "最后登录IP", "type": "string", "example": "192.168.1.1" }, "locked_until": { "description": "锁定截止", "type": "string", "example": "2026-04-15T12:00:00Z" }, "login_fail_count": { "description": "失败次数", "type": "integer", "example": 0 }, "metadata": { "description": "扩展元数据", "type": "object", "additionalProperties": true }, "mfa_enabled": { "description": "是否启用MFA", "type": "boolean", "example": false }, "mfa_type": { "description": "MFA类型", "type": "string", "example": "totp" }, "must_change_password": { "description": "需要强制修改密码", "type": "boolean", "example": false }, "password_changed_at": { "description": "密码最后修改时间", "type": "string" }, "pending_parental_consent": { "description": "是否等待家长同意", "type": "boolean" }, "phone": { "description": "手机号", "type": "string", "example": "13800138000" }, "phone_verified_at": { "description": "手机验证时间", "type": "string", "example": "2026-01-10T08:00:00Z" }, "status": { "description": "状态", "type": "string", "example": "active" }, "tenant_id": { "description": "租户ID", "type": "string", "example": "tnt_xyz789" }, "updated_at": { "description": "更新时间", "type": "string", "example": "2026-04-10T14:20:00Z" }, "username": { "description": "用户名", "type": "string", "example": "john_doe" } } }, "gitee_com_autional_service-identity_internal_handler_dto.AuthenticatorBackupDetailResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.AuthenticatorBackupResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.AuthenticatorBackupResponse": { "type": "object", "properties": { "account_count": { "type": "integer", "example": 5 }, "backup_type": { "type": "string", "example": "totp" }, "checksum": { "type": "string", "example": "sha256-hash" }, "created_at": { "type": "string", "example": "2026-05-12T12:00:00Z" }, "device_name": { "type": "string", "example": "iPhone 15" }, "encrypted_data": { "type": "string", "example": "AES-GCM-encrypted-base64..." }, "id": { "type": "string", "example": "backup-abc123" }, "version": { "type": "integer", "example": 1 } } }, "gitee_com_autional_service-identity_internal_handler_dto.AuthenticatorBackupUploadRequest": { "type": "object", "required": [ "encrypted_data" ], "properties": { "account_count": { "type": "integer", "example": 5 }, "backup_type": { "type": "string", "example": "totp" }, "checksum": { "type": "string", "example": "sha256-hash" }, "device_name": { "type": "string", "example": "iPhone 15" }, "encrypted_data": { "type": "string", "example": "AES-GCM-encrypted-base64..." } } }, "gitee_com_autional_service-identity_internal_handler_dto.AuthenticatorDeviceItem": { "type": "object", "properties": { "created_at": { "type": "string", "example": "2026-05-12T12:00:00Z" }, "device_id": { "type": "string", "example": "dev-abc123" }, "device_name": { "type": "string", "example": "iPhone 15" }, "device_type": { "type": "string", "example": "totp" }, "enabled": { "type": "boolean", "example": true }, "last_used_at": { "type": "string", "example": "2026-05-12T12:00:00Z" } } }, "gitee_com_autional_service-identity_internal_handler_dto.AuthenticatorDeviceListResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.AuthenticatorDeviceItem" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "gitee_com_autional_service-identity_internal_handler_dto.AvailableRoleResponse": { "type": "object", "properties": { "code": { "type": "string" }, "description": { "type": "string" }, "id": { "type": "string" }, "name": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.BatchCreateUserItem": { "description": "批量创建用户单项", "type": "object", "required": [ "password" ], "properties": { "email": { "description": "邮箱", "type": "string" }, "metadata": { "description": "扩展元数据", "type": "object", "additionalProperties": { "type": "string" } }, "password": { "description": "密码", "type": "string", "minLength": 8 }, "phone": { "description": "手机号", "type": "string" }, "username": { "description": "用户名", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.BatchCreateUserRequest": { "description": "批量创建用户请求", "type": "object", "required": [ "users" ], "properties": { "users": { "description": "用户列表", "type": "array", "maxItems": 1000, "minItems": 1, "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.BatchCreateUserItem" } } } }, "gitee_com_autional_service-identity_internal_handler_dto.BatchRevokeRequest": { "type": "object", "required": [ "ids" ], "properties": { "ids": { "type": "array", "items": { "type": "string" } } } }, "gitee_com_autional_service-identity_internal_handler_dto.BatchRevokeResponse": { "type": "object", "properties": { "failed": { "type": "array", "items": { "type": "string" } }, "revoked": { "type": "integer" } } }, "gitee_com_autional_service-identity_internal_handler_dto.BatchUpdateUserStatusRequest": { "description": "批量更新用户状态请求", "type": "object", "required": [ "status", "user_ids" ], "properties": { "status": { "description": "目标状态", "type": "string", "enum": [ "active", "banned", "pending", "suspended", "locked", "deleted" ] }, "user_ids": { "description": "用户ID列表", "type": "array", "maxItems": 1000, "minItems": 1, "items": { "type": "string" } } } }, "gitee_com_autional_service-identity_internal_handler_dto.BindOAuthRequest": { "description": "绑定OAuth账户请求", "type": "object", "required": [ "code", "provider" ], "properties": { "code": { "description": "Code", "type": "string" }, "code_verifier": { "description": "PKCE code verifier", "type": "string" }, "provider": { "description": "Provider", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.BootstrapAdminRequest": { "type": "object", "required": [ "user_id" ], "properties": { "user_id": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.BootstrapAdminResponse": { "type": "object", "properties": { "message": { "type": "string" }, "role_id": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.BrandingInfo": { "description": "登录页品牌定制（Logo/主色/自定义CSS/隐私条款URL）", "type": "object", "properties": { "company_name": { "type": "string", "example": "My Company" }, "custom_css": { "type": "string", "example": ".login-btn { border-radius: 12px; }" }, "favicon_url": { "type": "string", "example": "https://cdn.example.com/favicon.ico" }, "login_page_description": { "type": "string", "example": "Sign in to your account" }, "login_page_title": { "type": "string", "example": "Welcome" }, "logo_url": { "type": "string", "example": "https://cdn.example.com/logo.png" }, "primary_color": { "type": "string", "example": "#3b82f6" }, "privacy_policy_url": { "type": "string", "example": "https://example.com/privacy" }, "secondary_color": { "type": "string", "example": "#10b981" }, "terms_of_service_url": { "type": "string", "example": "https://example.com/terms" } } }, "gitee_com_autional_service-identity_internal_handler_dto.CertificateDetailResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ProviderCertificateResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.CertificateListResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ProviderCertificateResponse" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ChangeEmailRequest": { "description": "发起邮箱变更请求（password 可选：携带即单密码放行，缺省走重认证闸门，AC-006/008）", "type": "object", "required": [ "new_email" ], "properties": { "new_email": { "description": "新邮箱", "type": "string" }, "password": { "description": "当前密码（可选，*string 兼容三态：缺省/nil/空串 → 走闸门）", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ChangePasswordResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "message": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ChangePhoneRequest": { "description": "发起手机号变更请求（password 可选：携带即单密码放行，缺省走重认证闸门，AC-006/008）", "type": "object", "required": [ "new_phone" ], "properties": { "new_phone": { "description": "新手机号(E.164格式)", "type": "string" }, "password": { "description": "当前密码（可选，*string 兼容三态：缺省/nil/空串 → 走闸门）", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.CheckEmailRequest": { "description": "检查邮箱可用性请求", "type": "object", "required": [ "email" ], "properties": { "email": { "description": "Email", "type": "string", "example": "user@example.com" } } }, "gitee_com_autional_service-identity_internal_handler_dto.CheckEmailResponse": { "description": "检查邮箱可用性结果", "type": "object", "properties": { "available": { "description": "Is available", "type": "boolean", "example": true }, "email": { "description": "Email", "type": "string", "example": "user@example.com" } } }, "gitee_com_autional_service-identity_internal_handler_dto.CheckPermissionInternalRequest": { "description": "内部检查权限请求", "type": "object", "required": [ "action", "resource", "tenant_id", "user_id" ], "properties": { "action": { "description": "Action", "type": "string" }, "resource": { "description": "Resource", "type": "string" }, "tenant_id": { "description": "Tenant ID", "type": "string" }, "user_id": { "description": "User ID", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.CheckPermissionRequest": { "description": "检查权限请求 (user_id derived from JWT context)", "type": "object", "required": [ "action", "resource" ], "properties": { "action": { "description": "Action", "type": "string" }, "resource": { "description": "Resource", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.CheckRoleRequest": { "description": "检查角色请求 (user_id derived from JWT context)", "type": "object", "required": [ "role_code" ], "properties": { "role_code": { "description": "Role code", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.CheckUsernameRequest": { "description": "检查用户名可用性请求", "type": "object", "required": [ "username" ], "properties": { "username": { "description": "Username", "type": "string", "example": "john_doe" } } }, "gitee_com_autional_service-identity_internal_handler_dto.CheckUsernameResponse": { "description": "检查用户名可用性结果", "type": "object", "properties": { "available": { "description": "Is available", "type": "boolean", "example": true }, "username": { "description": "Username", "type": "string", "example": "john_doe" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ChildrenConsentResponse": { "description": "未成年人家长同意验证状态", "type": "object", "properties": { "id": { "description": "记录ID", "type": "string", "example": "child_consent_001" }, "method": { "description": "验证方式", "type": "string", "example": "email" }, "parent_email": { "description": "家长邮箱", "type": "string", "example": "parent@example.com" }, "parent_phone": { "description": "家长手机", "type": "string", "example": "13800138000" }, "recorded_at": { "description": "记录时间", "type": "string", "example": "2026-04-15T10:30:00Z" }, "status": { "description": "状态", "type": "string", "example": "pending" }, "tenant_id": { "description": "租户ID", "type": "string", "example": "tnt_xyz789" }, "user_id": { "description": "用户ID", "type": "string", "example": "usr_abc123" }, "verified": { "description": "是否已验证", "type": "boolean", "example": true }, "verified_at": { "description": "验证时间", "type": "string", "example": "2026-04-15T10:30:00Z" } } }, "gitee_com_autional_service-identity_internal_handler_dto.CleanupExpiredResponse": { "type": "object", "properties": { "expired_count": { "type": "integer" }, "message": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.CompleteAccountRecoveryRequest": { "description": "完成账户恢复（重置密码）", "type": "object", "required": [ "code", "new_password", "recovery_token" ], "properties": { "code": { "description": "验证码", "type": "string" }, "new_password": { "description": "新密码", "type": "string" }, "password_transmission": { "description": "plain|hash|symmetric|asymmetric", "type": "string" }, "recovery_token": { "description": "恢复令牌", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.CompleteAccountRecoveryResponse": { "type": "object", "properties": { "message": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ComplianceProfileInfo": { "description": "租户选中的合规标准信息", "type": "object", "properties": { "resolved_at": { "type": "string", "example": "2026-06-15T10:00:00Z" }, "standards": { "type": "array", "items": { "type": "string" }, "example": [ "[\"nist_sp800_63b_v4\"", "\"dengbao_l3\"]" ] } } }, "gitee_com_autional_service-identity_internal_handler_dto.ComplianceWarningItem": { "description": "当前配置与合规标准之间的差距", "type": "object", "properties": { "current": { "example": "8" }, "description": { "type": "string", "example": "NIST v4 AAL2 requires 15 characters" }, "parameter": { "type": "string", "example": "password_min_length_sfa" }, "required": { "example": "15" }, "severity": { "type": "string", "example": "high" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ConsentHistoryResponse": { "description": "用户隐私同意历史", "type": "object", "properties": { "history": { "description": "History", "type": "array", "items": { "$ref": "#/definitions/domain.UserConsent" } }, "user_id": { "description": "User ID", "type": "string", "example": "user-001" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ConsentRequest": { "description": "同意管理请求参数", "type": "object", "required": [ "scope" ], "properties": { "granted": { "description": "Granted", "type": "boolean" }, "metadata": { "description": "Metadata", "type": "object", "additionalProperties": true }, "scope": { "description": "Scope", "type": "string", "example": "marketing" } } }, "gitee_com_autional_service-identity_internal_handler_dto.CreateABACPolicyRequest": { "type": "object", "required": [ "condition", "name" ], "properties": { "condition": { "type": "string" }, "description": { "type": "string" }, "effect": { "type": "string" }, "name": { "type": "string" }, "priority": { "type": "integer" } } }, "gitee_com_autional_service-identity_internal_handler_dto.CreateApiKeyRequest": { "type": "object", "required": [ "name" ], "properties": { "environment": { "type": "string", "enum": [ "live", "test" ] }, "expires_at": { "type": "string" }, "name": { "type": "string" }, "scopes": { "type": "array", "items": { "type": "string" } } } }, "gitee_com_autional_service-identity_internal_handler_dto.CreateApiKeyResponse": { "type": "object", "properties": { "created_at": { "type": "string" }, "environment": { "type": "string" }, "expires_at": { "type": "string" }, "id": { "type": "string" }, "name": { "type": "string" }, "raw_key": { "type": "string" }, "scopes": { "type": "array", "items": { "type": "string" } }, "status": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.CreateCertificateRequest": { "description": "为身份提供商上传签名/加密证书", "type": "object", "required": [ "cert_pem", "name", "type" ], "properties": { "cert_pem": { "type": "string", "example": "-----BEGIN CERTIFICATE-----..." }, "name": { "type": "string", "example": "My SAML Signing Cert" }, "type": { "type": "string", "enum": [ "signing", "encryption" ], "example": "signing" } } }, "gitee_com_autional_service-identity_internal_handler_dto.CreateIDPRequest": { "description": "创建身份提供商请求参数", "type": "object", "required": [ "client_id", "client_secret", "name", "type" ], "properties": { "attribute_mapping": { "description": "字段映射", "type": "object", "additionalProperties": { "type": "string" } }, "auth_url": { "description": "授权端点", "type": "string", "example": "https://example.com/auth" }, "client_id": { "description": "Client ID", "type": "string", "example": "client_123" }, "client_secret": { "description": "Client Secret", "type": "string", "example": "secret_456" }, "config": { "description": "额外配置", "type": "object", "additionalProperties": true }, "display_name": { "description": "前端展示名称", "type": "string", "example": "My OIDC Provider" }, "icon_url": { "description": "图标URL", "type": "string", "example": "https://example.com/icon.png" }, "name": { "description": "显示名称", "type": "string", "example": "My OIDC Provider" }, "scopes": { "description": "权限范围", "type": "array", "items": { "type": "string" }, "example": [ "[openid", "profile", "email]" ] }, "sort_order": { "description": "排序", "type": "integer", "example": 0 }, "token_url": { "description": "Token端点", "type": "string", "example": "https://example.com/token" }, "type": { "description": "类型", "type": "string", "example": "custom" }, "user_info_url": { "description": "用户信息端点", "type": "string", "example": "https://example.com/userinfo" } } }, "gitee_com_autional_service-identity_internal_handler_dto.CreateUserResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UserWithIdentitiesResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.DataResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "type": "object", "additionalProperties": true }, "message": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.DeactivateAccountRequest": { "description": "停用账户请求参数", "type": "object", "properties": { "password": { "description": "Password", "type": "string", "example": "CurrentP@ssw0rd" } } }, "gitee_com_autional_service-identity_internal_handler_dto.DeactivateAccountResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "message": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.DeleteAccountRequest": { "description": "删除账户请求参数", "type": "object", "required": [ "password" ], "properties": { "password": { "description": "Password", "type": "string", "example": "CurrentP@ssw0rd" }, "reason": { "description": "Reason", "type": "string", "example": "no longer needed" } } }, "gitee_com_autional_service-identity_internal_handler_dto.DeleteAccountResponse": { "description": "删除账户结果", "type": "object", "properties": { "deleted_at": { "description": "Deletion time", "type": "string", "example": "2026-04-15T10:00:00Z" }, "message": { "description": "Message", "type": "string" }, "user_id": { "description": "User ID", "type": "string", "example": "user-001" } } }, "gitee_com_autional_service-identity_internal_handler_dto.DeviceListResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.DeviceResponse" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "gitee_com_autional_service-identity_internal_handler_dto.DeviceResponse": { "description": "用户设备信息（含安全增强字段）", "type": "object", "properties": { "browser": { "description": "浏览器", "type": "string", "example": "Safari" }, "created_at": { "description": "首次登录", "type": "string", "example": "2026-01-01T00:00:00Z" }, "device_fingerprint": { "description": "设备指纹", "type": "string", "example": "sha256:abc123def" }, "device_name": { "description": "设备名称", "type": "string", "example": "My iPhone" }, "id": { "description": "设备ID", "type": "string", "example": "dev_abc123" }, "ip": { "description": "IP", "type": "string", "example": "192.168.1.1" }, "is_trusted": { "description": "是否信任", "type": "boolean", "example": true }, "last_seen": { "description": "最近使用", "type": "string", "example": "2026-04-15T10:30:00Z" }, "login_count": { "description": "登录次数", "type": "integer", "example": 42 }, "os": { "description": "系统", "type": "string", "example": "iOS 17" }, "session_id": { "description": "关联会话", "type": "string", "example": "sess_123" }, "trust_score": { "description": "信任评分", "type": "integer", "example": 85 }, "type": { "description": "类型", "type": "string", "example": "mobile" }, "user_id": { "description": "用户ID", "type": "string", "example": "usr_abc123" } } }, "gitee_com_autional_service-identity_internal_handler_dto.DiscoverTenantInfo": { "type": "object", "properties": { "display_name": { "type": "string" }, "id": { "type": "string" }, "membership_approval": { "type": "string" }, "name": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.EmailStatusResponse": { "type": "object", "properties": { "email": { "type": "string" }, "email_verified": { "type": "boolean" }, "verification_sent": { "type": "boolean" } } }, "gitee_com_autional_service-identity_internal_handler_dto.EmailVerificationResponse": { "type": "object", "properties": { "expires_in": { "type": "integer" } } }, "gitee_com_autional_service-identity_internal_handler_dto.EmailVerifiedResponse": { "type": "object", "properties": { "email": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ExportMyDataResponse": { "description": "GDPR数据导出结果 GDPR数据导出结果（个人信息聚合数据）", "type": "object", "properties": { "audit_logs": {}, "billing_data": {}, "communication_data": {}, "devices": {}, "export_at": { "type": "string", "example": "2026-04-19T10:00:00Z" }, "notification_data": {}, "oauth_data": {}, "point_data": {}, "profile_data": {}, "session_data": {}, "storage_data": {}, "user": {}, "wallet_data": {} } }, "gitee_com_autional_service-identity_internal_handler_dto.ForgotPasswordRequest": { "description": "忘记密码请求参数", "type": "object", "required": [ "identity" ], "properties": { "identity": { "description": "Email or phone", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ForgotPasswordResponse": { "description": "忘记密码响应", "type": "object", "properties": { "expires_in": { "description": "Expiration time", "type": "integer" }, "message": { "description": "Message", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.GenerateTicketInput": { "description": "生成一次性票据请求参数", "type": "object", "required": [ "user_id" ], "properties": { "tenant_id": { "description": "租户ID", "type": "string", "example": "tnt_xyz789" }, "user_id": { "description": "用户ID", "type": "string", "example": "usr_abc123" } } }, "gitee_com_autional_service-identity_internal_handler_dto.GenerateTicketResponse": { "description": "Web3钱包登录票据", "type": "object", "properties": { "expires_in": { "type": "integer", "example": 300 }, "ticket": { "type": "string", "example": "a1b2c3d4e5f6..." } } }, "gitee_com_autional_service-identity_internal_handler_dto.GetChildrenConsentResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "type": "object", "properties": { "id": { "type": "string" }, "method": { "type": "string" }, "parent_email": { "type": "string" }, "parent_phone": { "type": "string" }, "recorded_at": { "type": "string" }, "tenant_id": { "type": "string" }, "user_id": { "type": "string" }, "verified": { "type": "boolean" }, "verified_at": { "type": "string" } } }, "message": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.GetIdentitiesResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.IdentityListData" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.GetMySessionsResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": {}, "message": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.HTTPChangePasswordRequest": { "description": "HTTP修改密码请求", "type": "object", "required": [ "new_password" ], "properties": { "new_password": { "description": "New password", "type": "string", "minLength": 8 }, "old_password": { "description": "Old password (optional for admin reset)", "type": "string" }, "password_transmission": { "description": "plain|hash|symmetric|asymmetric", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.HTTPResetPasswordRequest": { "description": "HTTP重置密码请求", "type": "object", "required": [ "new_password", "reset_token" ], "properties": { "force_change": { "description": "Force user to change password on next login", "type": "boolean" }, "new_password": { "description": "New password (或 hash)", "type": "string" }, "password_transmission": { "description": "plain|hash|symmetric|asymmetric", "type": "string" }, "reset_token": { "description": "Reset token", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.HTTPUserCreateRequest": { "description": "HTTP创建用户请求", "type": "object", "required": [ "password" ], "properties": { "email": { "description": "Email", "type": "string" }, "force_password_change": { "description": "Force user to change password on first login", "type": "boolean" }, "metadata": { "description": "Metadata", "type": "object", "additionalProperties": { "type": "string" } }, "password": { "description": "Password or hash (取决于 password_transmission)", "type": "string", "minLength": 8 }, "password_transmission": { "description": "plain|hash|symmetric|asymmetric", "type": "string" }, "phone": { "description": "Phone", "type": "string" }, "username": { "description": "Username", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.IDPDetailResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.IDPResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.IDPListResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.IDPResponse" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "gitee_com_autional_service-identity_internal_handler_dto.IDPResponse": { "description": "身份提供商详细信息", "type": "object", "properties": { "attribute_mapping": { "description": "字段映射", "type": "object", "additionalProperties": { "type": "string" } }, "auth_url": { "description": "授权端点", "type": "string", "example": "https://example.com/auth" }, "client_id": { "description": "Client ID", "type": "string", "example": "client_123" }, "config": { "description": "额外配置", "type": "object", "additionalProperties": true }, "created_at": { "description": "创建时间", "type": "string", "example": "2026-01-01T00:00:00Z" }, "display_name": { "description": "前端展示名称", "type": "string", "example": "My OIDC Provider" }, "icon_url": { "description": "图标URL", "type": "string", "example": "https://example.com/icon.png" }, "id": { "description": "提供商ID", "type": "string", "example": "idp_abc123" }, "is_popular": { "description": "常用提供商", "type": "boolean", "example": false }, "is_system": { "description": "系统内置", "type": "boolean", "example": false }, "name": { "description": "显示名称", "type": "string", "example": "My OIDC Provider" }, "scopes": { "description": "权限范围", "type": "array", "items": { "type": "string" }, "example": [ "[openid", "profile", "email]" ] }, "sort_order": { "description": "排序", "type": "integer", "example": 0 }, "status": { "description": "状态", "type": "string", "example": "active" }, "tenant_id": { "description": "租户ID", "type": "string", "example": "tnt_xyz789" }, "token_url": { "description": "Token端点", "type": "string", "example": "https://example.com/token" }, "type": { "description": "类型", "type": "string", "example": "custom" }, "type_display_name": { "description": "类型显示名称", "type": "string", "example": "自定义" }, "updated_at": { "description": "更新时间", "type": "string", "example": "2026-04-10T14:20:00Z" }, "user_info_url": { "description": "用户信息端点", "type": "string", "example": "https://example.com/userinfo" } } }, "gitee_com_autional_service-identity_internal_handler_dto.IdentityListData": { "type": "object", "properties": { "identities": { "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.IdentityResponse" } } } }, "gitee_com_autional_service-identity_internal_handler_dto.IdentityResponse": { "description": "用户身份凭证信息", "type": "object", "properties": { "created_at": { "description": "创建时间", "type": "string", "example": "2026-01-01T00:00:00Z" }, "id": { "description": "凭证ID", "type": "string", "example": "id_abc123" }, "identifier": { "description": "标识(脱敏)", "type": "string", "example": "j***@example.com" }, "is_primary": { "description": "是否主凭证", "type": "boolean", "example": true }, "is_verified": { "description": "是否验证", "type": "boolean", "example": true }, "type": { "description": "类型", "type": "string", "example": "email" }, "user_id": { "description": "用户ID", "type": "string", "example": "usr_abc123" }, "verified_at": { "description": "验证时间", "type": "string", "example": "2026-01-10T08:00:00Z" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ImpersonateRequest": { "type": "object", "properties": { "reason": { "description": "模拟原因", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ImpersonateResponse": { "type": "object", "properties": { "expires_at": { "type": "string", "example": "2026-06-16T11:00:00Z" }, "impersonation_token": { "type": "string", "example": "eyJhbGciOi..." } } }, "gitee_com_autional_service-identity_internal_handler_dto.ImportOIDCDiscoveryRequest": { "description": "从OIDC discovery URL导入身份提供商配置", "type": "object", "required": [ "discovery_url" ], "properties": { "discovery_url": { "type": "string", "example": "https://idp.example.com/.well-known/openid-configuration" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ImportSAMLMetadataRequest": { "description": "从SAML metadata URL导入身份提供商配置", "type": "object", "required": [ "metadata_url" ], "properties": { "metadata_url": { "type": "string", "example": "https://idp.example.com/metadata.xml" } } }, "gitee_com_autional_service-identity_internal_handler_dto.KeyExchangeResponse": { "type": "object", "properties": { "algorithm": { "description": "\"ECDH-P256-HKDF-SHA256-AES256GCM\"", "type": "string" }, "expires_in": { "description": "TTL in seconds", "type": "integer" }, "key_exchange_id": { "type": "string" }, "server_pub_key": { "description": "base64 ECDH P-256 public key", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.LdapGroupRoleMappingRequest": { "type": "object", "required": [ "mapping" ], "properties": { "mapping": { "type": "object", "additionalProperties": { "type": "string" } } } }, "gitee_com_autional_service-identity_internal_handler_dto.LdapGroupRoleMappingResponse": { "type": "object", "properties": { "directory_name": { "type": "string" }, "mapping": { "type": "object", "additionalProperties": { "type": "string" } } } }, "gitee_com_autional_service-identity_internal_handler_dto.LdapHealthResponse": { "type": "object", "properties": { "directory_name": { "type": "string" }, "error": { "type": "string" }, "healthy": { "type": "boolean" } } }, "gitee_com_autional_service-identity_internal_handler_dto.LdapLoginRequest": { "type": "object", "required": [ "password", "username" ], "properties": { "password": { "type": "string" }, "tenant_id": { "description": "显式指定租户（可选，兜底 X-Tenant-ID header）", "type": "string" }, "username": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.LdapLoginResponse": { "type": "object", "properties": { "access_token": { "type": "string" }, "is_new_user": { "type": "boolean" }, "refresh_token": { "type": "string" }, "user_id": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.LdapTestConnectionRequest": { "type": "object", "required": [ "directory_name" ], "properties": { "directory_name": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.LdapTestConnectionResponse": { "type": "object", "properties": { "connected": { "type": "boolean" }, "directory_name": { "type": "string" }, "error": { "type": "string" }, "latency_ms": { "type": "integer" }, "mapping": { "type": "object", "additionalProperties": { "type": "string" } }, "success": { "type": "boolean" } } }, "gitee_com_autional_service-identity_internal_handler_dto.LinkSAMLUserRequest": { "type": "object", "required": [ "email", "name_id", "provider_id" ], "properties": { "email": { "type": "string" }, "name": { "type": "string" }, "name_id": { "type": "string" }, "provider_id": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.LinkSAMLUserResponse": { "type": "object", "properties": { "is_new": { "type": "boolean" }, "user_id": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.LoginByCodeResponse": { "type": "object", "properties": { "access_token": { "type": "string" }, "expires_in": { "type": "integer" }, "is_new_user": { "type": "boolean" }, "refresh_token": { "type": "string" }, "token_type": { "type": "string" }, "user": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UserInfo" }, "user_id": { "description": "User ID (redundant with User.ID for flat access)", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.LoginByEmailCodeRequest": { "type": "object", "required": [ "code", "email" ], "properties": { "captcha_challenge_id": { "type": "string" }, "captcha_token": { "type": "string" }, "code": { "type": "string" }, "email": { "type": "string" }, "register_if_new": { "type": "boolean" }, "tenant_id": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.LoginByPhoneCodeRequest": { "type": "object", "required": [ "code", "phone" ], "properties": { "captcha_challenge_id": { "type": "string" }, "captcha_token": { "type": "string" }, "code": { "type": "string" }, "phone": { "type": "string" }, "register_if_new": { "type": "boolean" }, "tenant_id": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.LoginHistoryListResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LoginHistoryResponse" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "gitee_com_autional_service-identity_internal_handler_dto.LoginHistoryResponse": { "description": "用户登录历史记录", "type": "object", "properties": { "browser": { "description": "浏览器", "type": "string", "example": "Chrome" }, "created_at": { "description": "登录时间", "type": "string", "example": "2026-04-15T10:30:00Z" }, "device_type": { "description": "设备类型", "type": "string", "example": "desktop" }, "fail_reason": { "description": "失败原因", "type": "string", "example": "" }, "id": { "description": "记录ID", "type": "string", "example": "hist_abc123" }, "ip": { "description": "IP地址", "type": "string", "example": "192.168.1.1" }, "location": { "description": "地理位置", "type": "string", "example": "Beijing" }, "login_type": { "description": "登录类型", "type": "string", "example": "password" }, "os": { "description": "操作系统", "type": "string", "example": "Windows 10" }, "session_id": { "description": "会话ID", "type": "string", "example": "sess_123" }, "status": { "description": "状态", "type": "string", "example": "success" }, "tenant_id": { "description": "租户ID", "type": "string", "example": "tnt_xyz789" }, "user_agent": { "description": "User-Agent", "type": "string", "example": "Mozilla/5.0" }, "user_id": { "description": "用户ID", "type": "string", "example": "usr_abc123" } } }, "gitee_com_autional_service-identity_internal_handler_dto.LoginRequest": { "description": "用户登录请求参数", "type": "object", "required": [ "identity", "password" ], "properties": { "captcha_challenge_id": { "description": "CAPTCHA challenge ID", "type": "string" }, "captcha_provider": { "description": "CAPTCHA provider (pow/turnstile)", "type": "string" }, "captcha_token": { "description": "CAPTCHA verification token (PoW/Turnstile)", "type": "string" }, "client_nonce": { "description": "hash 模式: 客户端随机 nonce", "type": "string" }, "client_pub_key": { "description": "symmetric 模式: 客户端 ECDH 临时公钥", "type": "string" }, "identity": { "description": "Username/Email/Phone", "type": "string" }, "key_exchange_id": { "description": "symmetric 模式: ECDH 密钥交换 ID", "type": "string" }, "key_id": { "description": "asymmetric 模式: 服务端公钥 ID", "type": "string" }, "password": { "description": "Password or hash/ciphertext (取决于 password_transmission)", "type": "string" }, "password_transmission": { "description": "plain|hash|symmetric|asymmetric", "type": "string" }, "tenant_id": { "description": "Tenant ID", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.LoginResponse": { "description": "用户登录结果", "type": "object", "properties": { "access_token": { "description": "Access token", "type": "string", "example": "eyJhbGciOi..." }, "challenge_token": { "description": "MFA challenge token (short-lived, requires MFA verification)", "type": "string", "example": "chg_abc123..." }, "expires_in": { "description": "Expiration time", "type": "integer", "example": 1800 }, "mfa_check_reason": { "description": "MFA触发原因描述", "type": "string", "example": "new_device" }, "must_change_password": { "description": "Password must be changed", "type": "boolean", "example": false }, "password_expires_in": { "description": "Days until password expires", "type": "integer", "example": 30 }, "password_warning": { "description": "Password warning: expiring/expired_grace/expired", "type": "string", "example": "expiring" }, "refresh_token": { "description": "Refresh token", "type": "string", "example": "eyJhbGciOi..." }, "required_mfa_methods": { "description": "MFA推荐方法列表", "type": "array", "items": { "type": "string" } }, "requires_mfa": { "description": "自适应MFA: 需要额外MFA验证", "type": "boolean", "example": false }, "risk_assessment": { "description": "Risk assessment", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RiskAssessmentInfo" } ] }, "risk_level": { "description": "风险等级: low/medium/high", "type": "string", "example": "low" }, "token_type": { "description": "Token type", "type": "string", "example": "Bearer" }, "user": { "description": "User info", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UserInfo" } ] }, "user_id": { "description": "User ID (redundant with User.ID for flat access)", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.LogoutAllSessionsResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "message": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.LogoutResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "type": "object", "properties": { "message": { "type": "string" }, "token_invalidated": { "type": "boolean" } } }, "message": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.LogoutSessionResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "message": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.MakerCheckerRecordRequest": { "description": "双人复核记录请求", "type": "object", "required": [ "approver", "operation", "requester" ], "properties": { "approver": { "description": "Approver", "type": "string", "example": "user-002" }, "details": { "description": "Details", "type": "object", "additionalProperties": true }, "operation": { "description": "Operation", "type": "string", "example": "delete_user" }, "requester": { "description": "Requester", "type": "string", "example": "user-001" } } }, "gitee_com_autional_service-identity_internal_handler_dto.MakerCheckerRecordResponse": { "description": "双人复核记录响应", "type": "object", "properties": { "approver": { "description": "Approver", "type": "string" }, "operation": { "description": "Operation", "type": "string" }, "record_id": { "description": "Record ID", "type": "string" }, "requester": { "description": "Requester", "type": "string" }, "status": { "description": "Status", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.MembershipInfo": { "type": "object", "properties": { "joined_at": { "type": "string", "example": "2026-01-15T10:30:00Z" }, "role": { "type": "string", "example": "member" }, "status": { "description": "active / pending / disabled", "type": "string", "example": "active" }, "tenant_id": { "type": "string", "example": "tnt_abc123" }, "tenant_name": { "type": "string", "example": "acme-corp" } } }, "gitee_com_autional_service-identity_internal_handler_dto.MembershipListResponseWrapper": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.MembershipInfo" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "gitee_com_autional_service-identity_internal_handler_dto.MergeUsersRequest": { "description": "合并用户请求（合并从账户到主账户）", "type": "object", "required": [ "primary_user_id", "secondary_user_id" ], "properties": { "primary_user_id": { "description": "主账户用户ID", "type": "string" }, "secondary_user_id": { "description": "从账户用户ID", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.MyPermissionsResponse": { "type": "object", "properties": { "permissions": { "type": "array", "items": { "type": "string" } } } }, "gitee_com_autional_service-identity_internal_handler_dto.MyPermissionsResponseWrapper": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.MyPermissionsResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.MyTenantsResponse": { "type": "object", "properties": { "tenants": { "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.TenantInfo" } } } }, "gitee_com_autional_service-identity_internal_handler_dto.MyTenantsResponseWrapper": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.MyTenantsResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.NHIPolicyRequest": { "description": "NHI (非人类身份) 策略配置请求", "type": "object", "properties": { "agent_default_ttl": { "type": "string", "example": "1h" }, "agent_max_count": { "type": "integer", "example": 100 }, "device_max_per_owner": { "type": "integer", "example": 10 }, "robot_max_count": { "type": "integer", "example": 100 }, "rotation_days_default": { "type": "integer", "example": 90 } } }, "gitee_com_autional_service-identity_internal_handler_dto.NHIPolicyResponse": { "description": "NHI (非人类身份) 策略配置", "type": "object", "properties": { "agent_default_ttl": { "type": "string", "example": "1h" }, "agent_max_count": { "type": "integer", "example": 100 }, "device_max_per_owner": { "type": "integer", "example": 10 }, "robot_max_count": { "type": "integer", "example": 100 }, "rotation_days_default": { "type": "integer", "example": 90 }, "updated_at": { "type": "string", "example": "2026-06-09T10:30:00Z" } } }, "gitee_com_autional_service-identity_internal_handler_dto.NHIPolicyResponseWrapper": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.NHIPolicyResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.OAuthBindingStatsResponse": { "type": "object", "properties": { "by_provider": { "type": "object", "additionalProperties": { "type": "integer" } }, "tenant_id": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.OAuthCallbackResponse": { "description": "OAuth/SSO回调响应", "type": "object", "properties": { "access_token": { "description": "Access token", "type": "string", "example": "eyJhbGciOi..." }, "challenge_token": { "description": "MFA challenge token", "type": "string", "example": "chg_abc123..." }, "expires_in": { "description": "Expiration time", "type": "integer", "example": 1800 }, "is_new_user": { "description": "Is new user", "type": "boolean", "example": false }, "mfa_check_reason": { "description": "MFA check reason", "type": "string", "example": "new_device" }, "provider": { "description": "Provider", "type": "string", "example": "github" }, "refresh_token": { "description": "Refresh token", "type": "string", "example": "eyJhbGciOi..." }, "required_mfa_methods": { "description": "MFA recommended methods", "type": "array", "items": { "type": "string" } }, "requires_mfa": { "description": "Requires MFA", "type": "boolean", "example": false }, "risk_level": { "description": "Risk level", "type": "string", "example": "low" }, "state": { "description": "State", "type": "string", "example": "random-state" }, "token_type": { "description": "Token type", "type": "string", "example": "Bearer" } } }, "gitee_com_autional_service-identity_internal_handler_dto.OAuthProviderHealthResponse": { "type": "object", "properties": { "providers": {} } }, "gitee_com_autional_service-identity_internal_handler_dto.PasskeyAuthBeginRequest": { "type": "object", "properties": { "email": { "type": "string" }, "mediation": { "description": "\"conditional\" 启用条件UI(免填写邮箱自动填充)", "type": "string" }, "tenant_id": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.PasskeyAuthenticateCompleteRequest": { "type": "object", "required": [ "credential" ], "properties": { "credential": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_infrastructure_webauthn.AuthenticationResponse" }, "email": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.PasswordPolicyResponse": { "description": "密码策略配置", "type": "object", "properties": { "captcha_enabled": { "description": "是否启用CAPTCHA验证", "type": "boolean" }, "change_cooldown_minutes": { "description": "密码修改冷却时间", "type": "integer", "example": 0 }, "check_breached_passwords": { "description": "是否检测已泄露密码", "type": "boolean" }, "expiry_days": { "description": "密码过期天数", "type": "integer", "example": 90 }, "force_change_on_first_login": { "description": "首次登录强制修改密码", "type": "boolean" }, "grace_period_days": { "description": "过期宽限天数", "type": "integer", "example": 7 }, "history_count": { "description": "密码历史保留数量", "type": "integer", "example": 5 }, "identity_threshold": { "description": "登录限速账号阈值", "type": "integer" }, "ip_threshold": { "description": "登录限速IP阈值", "type": "integer" }, "login_methods": { "type": "array", "items": { "type": "string" } }, "max_length": { "description": "最大长度", "type": "integer", "example": 128 }, "min_length": { "description": "最小长度", "type": "integer", "example": 8 }, "oauth_providers": { "type": "array", "items": { "type": "string" } }, "password_transmission": { "description": "密码传输方式", "type": "string" }, "pepper_enabled": { "description": "US-P13: 服务端Pepper加密启用", "type": "boolean" }, "require_digit": { "description": "需要数字", "type": "boolean", "example": true }, "require_lower": { "description": "需要小写字母", "type": "boolean", "example": true }, "require_special": { "description": "需要特殊字符", "type": "boolean", "example": true }, "require_upper": { "description": "需要大写字母", "type": "boolean", "example": true }, "sso_providers": { "type": "array", "items": { "type": "string" } }, "unicode_allowed": { "description": "是否允许Unicode密码（NFC标准化）", "type": "boolean" } } }, "gitee_com_autional_service-identity_internal_handler_dto.PasswordStatusResponse": { "type": "object", "properties": { "active": { "description": "密码是否有效", "type": "boolean" }, "must_change_password": { "description": "需要强制修改密码", "type": "boolean" }, "password_changed_at": { "description": "密码最后修改时间", "type": "string" }, "password_expires_in": { "description": "密码剩余天数", "type": "integer" }, "password_warning": { "description": "密码警告: expiring/expired_grace/expired", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.PasswordStrengthCheckItem": { "description": "密码强度检查中的单个检查项", "type": "object", "properties": { "key": { "type": "string", "example": "min_length" }, "label": { "type": "string", "example": "At least 8 characters" }, "passed": { "type": "boolean", "example": true } } }, "gitee_com_autional_service-identity_internal_handler_dto.PasswordStrengthResponse": { "description": "密码强度检查结果，包含分数和各项检查详情", "type": "object", "properties": { "checks": { "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.PasswordStrengthCheckItem" } }, "crack_seconds": { "type": "number", "example": 31557600 }, "crack_time": { "type": "string", "example": "centuries" }, "is_strong": { "type": "boolean", "example": false }, "score": { "type": "integer", "example": 75 }, "suggestions": { "type": "array", "items": { "type": "string" }, "example": [ "Add another word or two" ] }, "warning": { "type": "string", "example": "This is a common password" } } }, "gitee_com_autional_service-identity_internal_handler_dto.PasswordStrengthResponseWrapper": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.PasswordStrengthResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.PermissionCheckDetailResponse": { "type": "object", "properties": { "action": { "type": "string" }, "allowed": { "type": "boolean" }, "resource": { "type": "string" }, "user_id": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.PermissionCheckResponse": { "type": "object", "properties": { "allowed": { "type": "boolean" } } }, "gitee_com_autional_service-identity_internal_handler_dto.PhoneStatusResponse": { "type": "object", "properties": { "phone": { "type": "string" }, "phone_verified": { "type": "boolean" }, "verification_sent": { "type": "boolean" } } }, "gitee_com_autional_service-identity_internal_handler_dto.PhoneVerificationResponse": { "type": "object", "properties": { "expires_in": { "type": "integer" }, "phone": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.PhoneVerifiedResponse": { "type": "object", "properties": { "phone": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ProviderCertificateResponse": { "description": "身份提供商证书信息", "type": "object", "properties": { "created_at": { "type": "string", "example": "2026-04-15T10:30:00Z" }, "expires_at": { "type": "string", "example": "2027-04-15T10:30:00Z" }, "fingerprint": { "type": "string", "example": "sha256:abc123def456" }, "id": { "type": "string", "example": "cert_abc123" }, "name": { "type": "string", "example": "My SAML Signing Cert" }, "provider_id": { "type": "string", "example": "idp_xyz789" }, "status": { "type": "string", "example": "active" }, "type": { "type": "string", "example": "signing" } } }, "gitee_com_autional_service-identity_internal_handler_dto.PublicAuthConfigResponse": { "description": "公开认证配置，包含租户基本信息、密码策略、品牌定制", "type": "object", "properties": { "branding": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.BrandingInfo" }, "breach_check_enabled": { "type": "boolean" }, "captcha_enabled": { "type": "boolean" }, "captcha_provider": { "type": "string" }, "compliance_profile": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ComplianceProfileInfo" }, "compliance_warnings": { "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ComplianceWarningItem" } }, "cross_tenant_switch_enabled": { "type": "boolean" }, "device_fingerprint_enabled": { "type": "boolean" }, "display_name": { "type": "string", "example": "My Tenant" }, "identity_threshold": { "type": "integer" }, "ip_threshold": { "type": "integer" }, "login_methods": { "type": "array", "items": { "type": "string" } }, "magic_link_enabled": { "type": "boolean" }, "max_concurrent_sessions": { "type": "integer" }, "membership_approval": { "type": "string" }, "oauth_client_id": { "type": "string", "example": "app-01KV1ZCSJ5ZJ8G78B4TDG398NK" }, "oauth_providers": { "type": "array", "items": { "type": "string" } }, "passkey_enabled": { "type": "boolean" }, "password_policy": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.PasswordPolicyResponse" }, "pepper_enabled": { "type": "boolean" }, "silent_challenge_enabled": { "type": "boolean" }, "sso_providers": { "type": "array", "items": { "type": "string" } }, "tenant_id": { "type": "string", "example": "tnt_xyz789" }, "tenant_name": { "type": "string", "example": "my-tenant" }, "transmission_nonce": { "type": "string" }, "transmission_nonce_expires_at": { "type": "string" }, "transmission_public_key": { "type": "string" }, "transmission_public_key_id": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.QrLoginCancelRequest": { "type": "object", "required": [ "token" ], "properties": { "token": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.QrLoginConfirmRequest": { "type": "object", "required": [ "token" ], "properties": { "token": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.QrLoginInitiateResponse": { "type": "object", "properties": { "expires_in": { "type": "integer" }, "number_matching": { "type": "string" }, "session_token": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.QrLoginScanRequest": { "type": "object", "required": [ "token" ], "properties": { "device_info": { "type": "string" }, "token": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.QrLoginStatusResponse": { "type": "object", "properties": { "access_token": { "type": "string" }, "expires_in": { "type": "integer" }, "number_matching": { "type": "string" }, "refresh_token": { "type": "string" }, "status": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ReAuthenticateRequest": { "description": "敏感操作前强制重新认证", "type": "object", "required": [ "password" ], "properties": { "mfa_code": { "description": "MFA验证码", "type": "string" }, "password": { "description": "当前密码", "type": "string", "minLength": 1 } } }, "gitee_com_autional_service-identity_internal_handler_dto.ReAuthenticateResponse": { "description": "重新认证成功响应", "type": "object", "properties": { "expires_in": { "description": "有效期", "type": "integer", "example": 300 }, "message": { "description": "结果消息", "type": "string", "example": "re-authentication successful" }, "step_up_token": { "description": "Step-up token", "type": "string", "example": "stepup_abc..." } } }, "gitee_com_autional_service-identity_internal_handler_dto.ReapplyRegistrationRequest": { "type": "object", "required": [ "email" ], "properties": { "email": { "description": "Email", "type": "string" }, "invitation_code": { "description": "邀请码", "type": "string" }, "reason": { "description": "申请理由", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ReapplyRegistrationResponse": { "type": "object", "properties": { "message": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ReapplyRegistrationResponseWrapper": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ReapplyRegistrationResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.RecordConsentResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "type": "object", "properties": { "granted": { "type": "boolean" }, "id": { "type": "string" }, "ip_address": { "type": "string" }, "recorded_at": { "type": "string" }, "revoked_at": { "type": "string" }, "scope": { "type": "string" }, "tenant_id": { "type": "string" }, "user_agent": { "type": "string" }, "user_id": { "type": "string" }, "version": { "type": "string" } } }, "message": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.RecordLoginFailureRequest": { "description": "记录登录失败请求", "type": "object", "required": [ "identifier" ], "properties": { "identifier": { "description": "Identifier", "type": "string" }, "ip": { "description": "IP address", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.RecordLoginSuccessRequest": { "description": "记录登录成功请求", "type": "object", "required": [ "user_id" ], "properties": { "ip": { "description": "IP address", "type": "string" }, "user_id": { "description": "User ID", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.RecoverAccountRequest": { "type": "object", "required": [ "identity" ], "properties": { "identity": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.RecoverAccountResetRequest": { "type": "object", "required": [ "code", "identity", "new_password" ], "properties": { "code": { "type": "string" }, "identity": { "type": "string" }, "new_password": { "type": "string" }, "password_transmission": { "description": "plain|hash|symmetric|asymmetric", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.RecoverAccountResetResponse": { "type": "object", "properties": { "message": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.RecoverAccountResponse": { "type": "object", "properties": { "contact_types": { "type": "array", "items": { "type": "string" } }, "expires_in": { "type": "integer" }, "masked_to": { "type": "string" }, "message": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.RecoveryContactListResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RecoveryContactResponse" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "gitee_com_autional_service-identity_internal_handler_dto.RecoveryContactResponse": { "description": "备用联系方式", "type": "object", "properties": { "created_at": { "description": "创建时间", "type": "string", "example": "2026-04-15T10:30:00Z" }, "id": { "description": "联系方式ID", "type": "string", "example": "rc_abc123" }, "type": { "description": "类型", "type": "string", "example": "email" }, "value": { "description": "脱敏值", "type": "string", "example": "ba***@example.com" }, "verified": { "description": "是否已验证", "type": "boolean", "example": true } } }, "gitee_com_autional_service-identity_internal_handler_dto.RefreshTokenRequest": { "description": "刷新令牌请求参数", "type": "object", "required": [ "refresh_token" ], "properties": { "refresh_token": { "description": "Refresh token", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.RegisterByEmailCodeRequest": { "type": "object", "required": [ "code", "email" ], "properties": { "code": { "type": "string" }, "email": { "type": "string" }, "tenant_id": { "type": "string" }, "username": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.RegisterByInvitationRequest": { "description": "邀请注册请求参数", "type": "object", "required": [ "invitation_code", "password" ], "properties": { "invitation_code": { "type": "string" }, "password": { "type": "string", "maxLength": 128, "minLength": 8 }, "username": { "type": "string", "maxLength": 32, "minLength": 3 } } }, "gitee_com_autional_service-identity_internal_handler_dto.RegisterByOAuthRequest": { "description": "OAuth显式补充注册请求参数", "type": "object", "required": [ "agree_terms", "password", "pending_token" ], "properties": { "agree_terms": { "type": "boolean" }, "password": { "type": "string", "maxLength": 128, "minLength": 8 }, "pending_token": { "type": "string" }, "phone": { "type": "string" }, "username": { "type": "string", "maxLength": 32, "minLength": 3 } } }, "gitee_com_autional_service-identity_internal_handler_dto.RegisterByOAuthResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.LoginByCodeResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.RegisterByPhoneCodeRequest": { "type": "object", "required": [ "code", "phone" ], "properties": { "code": { "type": "string" }, "phone": { "type": "string" }, "tenant_id": { "type": "string" }, "username": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.RegisterRequest": { "description": "用户注册请求参数", "type": "object", "required": [ "password" ], "properties": { "birth_date": { "description": "Birth date (format: \"2006-01-02\")", "type": "string" }, "client_nonce": { "description": "hash 模式: 客户端随机 nonce", "type": "string" }, "email": { "description": "Email", "type": "string" }, "invitation_code": { "description": "邀请码（invitation_only 模式下必填）", "type": "string" }, "password": { "description": "Password or hash/ciphertext", "type": "string", "maxLength": 256, "minLength": 8 }, "password_transmission": { "description": "plain|hash|symmetric|asymmetric", "type": "string" }, "phone": { "description": "Phone", "type": "string" }, "tenant_id": { "description": "对齐 LoginRequest — 若填写则覆盖 header 推导值", "type": "string" }, "username": { "description": "Username", "type": "string", "maxLength": 32, "minLength": 3 } } }, "gitee_com_autional_service-identity_internal_handler_dto.RegisterResponse": { "description": "用户注册结果", "type": "object", "properties": { "membership_status": { "description": "成员状态（审批模式下为 pending）", "type": "string", "example": "pending" }, "message": { "description": "Message", "type": "string", "example": "registration successful" }, "status": { "description": "Status", "type": "string", "example": "active" }, "user_id": { "description": "User ID", "type": "string", "example": "usr_abc123" } } }, "gitee_com_autional_service-identity_internal_handler_dto.RequestAccountRecoveryRequest": { "description": "通过备用邮箱/安全问题/信任设备发起账户恢复", "type": "object", "required": [ "identity", "method" ], "properties": { "identity": { "description": "已知的身份标识", "type": "string", "example": "john@example.com" }, "method": { "description": "恢复方法", "type": "string", "enum": [ "backup_email", "security_qa", "trusted_device", "sms" ] } } }, "gitee_com_autional_service-identity_internal_handler_dto.RequestAccountRecoveryResponseWrapper": { "type": "object", "properties": { "code": { "type": "integer" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.RequestActivationRequest": { "type": "object", "required": [ "duration", "justification", "role_id" ], "properties": { "duration": { "type": "string" }, "justification": { "type": "string" }, "role_id": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.RequestMagicLinkRequest": { "type": "object", "required": [ "email" ], "properties": { "email": { "type": "string" }, "tenant_id": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ResendSMSCodeRequest": { "type": "object", "required": [ "phone" ], "properties": { "phone": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ResendVerificationEmailRequest": { "type": "object", "required": [ "email" ], "properties": { "email": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ResetPasswordRequest": { "description": "重置密码请求参数", "type": "object", "required": [ "code", "identity", "new_password" ], "properties": { "code": { "description": "Verification code", "type": "string" }, "identity": { "description": "Email or phone", "type": "string" }, "new_password": { "type": "string" }, "password_transmission": { "description": "plain|hash|symmetric|asymmetric", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ResetPasswordResponse": { "description": "重置密码响应", "type": "object", "properties": { "message": { "description": "Message", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.RevokeActivationRequest": { "type": "object", "required": [ "reason" ], "properties": { "reason": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.RevokeConsentResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "message": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.RiskAssessmentInfo": { "type": "object", "properties": { "level": { "type": "string" }, "recommended_mfa_methods": { "type": "array", "items": { "type": "string" } }, "require_mfa": { "type": "boolean" }, "score": { "type": "integer" } } }, "gitee_com_autional_service-identity_internal_handler_dto.RiskEventListResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.RiskEventResponse" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "gitee_com_autional_service-identity_internal_handler_dto.RiskEventResponse": { "type": "object", "properties": { "created_at": { "description": "事件时间", "type": "string" }, "device_id": { "description": "设备ID", "type": "string" }, "event_type": { "description": "事件类型", "type": "string" }, "geo_location": { "description": "地理位置", "type": "string" }, "id": { "description": "事件ID", "type": "string" }, "ip": { "description": "来源IP", "type": "string" }, "metadata": { "description": "元数据", "type": "string" }, "risk_score": { "description": "风险分数", "type": "number" }, "user_id": { "description": "用户ID", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.RoleCheckResponse": { "type": "object", "properties": { "has_role": { "type": "boolean" } } }, "gitee_com_autional_service-identity_internal_handler_dto.RotateCertificateRequest": { "description": "吊销旧证书并上传新证书", "type": "object", "required": [ "cert_pem" ], "properties": { "cert_pem": { "type": "string", "example": "-----BEGIN CERTIFICATE-----..." }, "name": { "type": "string", "example": "Rotated SAML Signing Cert" } } }, "gitee_com_autional_service-identity_internal_handler_dto.SSOCallbackRequest": { "description": "SSO回调请求", "type": "object", "required": [ "code", "provider", "state" ], "properties": { "code": { "description": "Code", "type": "string", "example": "saml-response-base64" }, "provider": { "description": "Provider", "type": "string", "example": "saml" }, "state": { "description": "State", "type": "string", "example": "random-state" } } }, "gitee_com_autional_service-identity_internal_handler_dto.SSOCallbackResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "type": "object", "additionalProperties": true }, "message": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.SSOInitiateRequest": { "description": "SSO登录启动请求", "type": "object", "required": [ "provider" ], "properties": { "provider": { "description": "Provider", "type": "string", "example": "saml" }, "return_url": { "description": "Return URL", "type": "string", "example": "https://app.example.com/callback" }, "tenant_id": { "description": "Tenant ID", "type": "string", "example": "tenant-001" } } }, "gitee_com_autional_service-identity_internal_handler_dto.SSOInitiateResponse": { "description": "SSO登录启动响应", "type": "object", "properties": { "auth_url": { "description": "Authorization URL", "type": "string" }, "provider": { "description": "Provider", "type": "string" }, "return_url": { "description": "Return URL", "type": "string" }, "state": { "description": "State parameter", "type": "string" }, "tenant_id": { "description": "Tenant ID", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.SecurityEventDismissRequest": { "description": "标记安全事件为已处理", "type": "object", "properties": { "reason": { "description": "处理原因", "type": "string", "example": "This was me, recognized device" } } }, "gitee_com_autional_service-identity_internal_handler_dto.SecurityEventListResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.SecurityEventResponse" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "gitee_com_autional_service-identity_internal_handler_dto.SecurityEventResponse": { "description": "用户安全事件", "type": "object", "properties": { "created_at": { "description": "事件时间", "type": "string", "example": "2026-04-15T10:30:00Z" }, "description": { "description": "描述", "type": "string", "example": "New login from Beijing, CN" }, "dismissed": { "description": "是否已处理", "type": "boolean", "example": false }, "id": { "description": "事件ID", "type": "string", "example": "evt_abc123" }, "ip": { "description": "来源IP", "type": "string", "example": "203.0.113.1" }, "location": { "description": "来源位置", "type": "string", "example": "Beijing, CN" }, "severity": { "description": "严重级别", "type": "string", "example": "medium" }, "type": { "description": "事件类型", "type": "string", "example": "anomalous_login" } } }, "gitee_com_autional_service-identity_internal_handler_dto.SecurityStatusResponse": { "description": "用户账户安全状态", "type": "object", "properties": { "can_login": { "description": "是否可以登录", "type": "boolean", "example": true }, "email_verified": { "description": "邮箱验证", "type": "boolean", "example": true }, "is_locked": { "description": "是否锁定", "type": "boolean", "example": false }, "lock_until": { "description": "锁定截止", "type": "string", "example": "2026-04-15T12:00:00Z" }, "lockout_duration_minutes": { "description": "锁定时长（分钟）", "type": "integer", "example": 30 }, "login_fail_count": { "description": "失败次数", "type": "integer", "example": 0 }, "max_attempts": { "description": "最大尝试次数", "type": "integer", "example": 5 }, "mfa_enabled": { "description": "MFA启用", "type": "boolean", "example": true }, "phone_verified": { "description": "手机验证", "type": "boolean", "example": true } } }, "gitee_com_autional_service-identity_internal_handler_dto.SecurityStatusResponse2": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.SecurityStatusResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.SelfTrustDeviceRequest": { "description": "信任设备请求参数", "type": "object", "properties": { "trusted": { "description": "Is trusted", "type": "boolean", "example": true } } }, "gitee_com_autional_service-identity_internal_handler_dto.SendSMSCodeRequest": { "type": "object", "required": [ "phone" ], "properties": { "phone": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.SendVerificationEmailRequest": { "type": "object", "required": [ "email" ], "properties": { "email": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.SessionPolicyResponse": { "type": "object", "properties": { "refresh_token_rotation": { "type": "boolean" }, "session_bind_to_device": { "type": "boolean" }, "session_concurrent_limit": { "type": "integer" }, "session_idle_ttl_minutes": { "type": "integer" }, "session_ttl_minutes": { "type": "integer" } } }, "gitee_com_autional_service-identity_internal_handler_dto.StopImpersonationResponse": { "type": "object", "properties": { "access_token": { "type": "string", "example": "eyJhbGciOi..." }, "expires_in": { "type": "integer", "example": 1800 }, "refresh_token": { "type": "string", "example": "eyJhbGciOi..." }, "token_type": { "type": "string", "example": "Bearer" } } }, "gitee_com_autional_service-identity_internal_handler_dto.SwitchTenantRequest": { "type": "object", "required": [ "tenant_id" ], "properties": { "tenant_id": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.SwitchTenantResponse": { "type": "object", "properties": { "access_token": { "type": "string" }, "expires_in": { "type": "integer" }, "refresh_token": { "type": "string" }, "token_type": { "type": "string" }, "user": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UserInfo" } } }, "gitee_com_autional_service-identity_internal_handler_dto.SwitchTenantResponseWrapper": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.SwitchTenantResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.TenantInfo": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" }, "role": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.TicketSigninRequest": { "description": "票据签名登录请求参数", "type": "object", "required": [ "ticket" ], "properties": { "ticket": { "description": "一次性票据", "type": "string", "example": "a1b2c3d4..." } } }, "gitee_com_autional_service-identity_internal_handler_dto.TrustDeviceRequest": { "description": "信任设备请求参数", "type": "object", "required": [ "trust" ], "properties": { "trust": { "description": "是否信任", "type": "boolean" } } }, "gitee_com_autional_service-identity_internal_handler_dto.UnbindOAuthRequest": { "description": "解绑OAuth账户请求", "type": "object", "required": [ "provider" ], "properties": { "provider": { "description": "Provider", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.UnlockAccountRequest": { "description": "解锁账户请求参数", "type": "object", "required": [ "reason" ], "properties": { "reason": { "description": "解锁原因（审计追踪必需）", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.UpdateABACPolicyRequest": { "type": "object", "properties": { "condition": { "type": "string" }, "description": { "type": "string" }, "effect": { "type": "string" }, "enabled": { "type": "boolean" }, "name": { "type": "string" }, "priority": { "type": "integer" } } }, "gitee_com_autional_service-identity_internal_handler_dto.UpdateAgeClassificationRequest": { "type": "object", "required": [ "birth_date" ], "properties": { "birth_date": { "type": "string", "example": "2010-03-15" }, "digital_consent_age": { "type": "integer", "example": 13 }, "minors_age_threshold": { "type": "integer", "example": 18 } } }, "gitee_com_autional_service-identity_internal_handler_dto.UpdateApiKeyScopesRequest": { "type": "object", "required": [ "scopes" ], "properties": { "scopes": { "type": "array", "items": { "type": "string" } } } }, "gitee_com_autional_service-identity_internal_handler_dto.UpdateApiKeyStatusRequest": { "type": "object", "required": [ "status" ], "properties": { "status": { "type": "string", "enum": [ "active", "inactive" ] } } }, "gitee_com_autional_service-identity_internal_handler_dto.UpdateAttributeMappingRequest": { "description": "更新身份提供商的字段映射配置", "type": "object", "required": [ "mappings" ], "properties": { "mappings": { "type": "object", "additionalProperties": { "type": "string" } } } }, "gitee_com_autional_service-identity_internal_handler_dto.UpdateAuthConfigRequest": { "description": "更新全局认证安全配置", "type": "object", "properties": { "breach_check_enabled": { "type": "boolean" }, "captcha_enabled": { "type": "boolean" }, "change_cooldown_minutes": { "description": "密码修改冷却时间（分钟）", "type": "integer" }, "cross_tenant_switch_enabled": { "type": "boolean" }, "device_fingerprint_enabled": { "type": "boolean" }, "expiry_days": { "description": "密码过期天数", "type": "integer" }, "grace_period_days": { "description": "过期宽限天数", "type": "integer" }, "history_count": { "description": "密码历史保留数量", "type": "integer" }, "identity_threshold": { "type": "integer" }, "ip_threshold": { "type": "integer" }, "lock_duration_sec": { "description": "账户锁定时间（秒）", "type": "integer" }, "login_methods": { "type": "array", "items": { "type": "string" } }, "magic_link_enabled": { "type": "boolean" }, "max_length": { "description": "最大长度", "type": "integer" }, "max_login_attempts": { "description": "最大登录失败次数", "type": "integer" }, "membership_approval": { "type": "string" }, "min_length": { "description": "最小长度", "type": "integer" }, "oauth_providers": { "type": "array", "items": { "type": "string" } }, "passkey_enabled": { "type": "boolean" }, "password_transmission": { "description": "密码传输方式", "type": "string" }, "pepper_enabled": { "type": "boolean" }, "require_digit": { "description": "需要数字", "type": "boolean" }, "require_lower": { "description": "需要小写字母", "type": "boolean" }, "require_special": { "description": "需要特殊字符", "type": "boolean" }, "require_upper": { "description": "需要大写字母", "type": "boolean" }, "silent_challenge_enabled": { "type": "boolean" }, "sso_providers": { "type": "array", "items": { "type": "string" } }, "unicode_allowed": { "type": "boolean" } } }, "gitee_com_autional_service-identity_internal_handler_dto.UpdateCurrentUserAuthResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "message": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.UpdateIDPRequest": { "description": "更新身份提供商请求参数", "type": "object", "properties": { "attribute_mapping": { "description": "字段映射", "type": "object", "additionalProperties": { "type": "string" } }, "auth_url": { "description": "授权端点", "type": "string", "example": "https://example.com/auth" }, "client_id": { "description": "Client ID", "type": "string", "example": "client_123" }, "client_secret": { "description": "Client Secret", "type": "string", "example": "secret_456" }, "config": { "description": "额外配置", "type": "object", "additionalProperties": true }, "display_name": { "description": "前端展示名称", "type": "string", "example": "My OIDC Provider" }, "icon_url": { "description": "图标URL", "type": "string", "example": "https://example.com/icon.png" }, "name": { "description": "显示名称", "type": "string", "example": "My OIDC Provider" }, "scopes": { "description": "权限范围", "type": "array", "items": { "type": "string" }, "example": [ "[openid", "profile", "email]" ] }, "sort_order": { "description": "排序", "type": "integer", "example": 0 }, "status": { "description": "状态", "type": "string", "example": "active" }, "token_url": { "description": "Token端点", "type": "string", "example": "https://example.com/token" }, "user_info_url": { "description": "用户信息端点", "type": "string", "example": "https://example.com/userinfo" } } }, "gitee_com_autional_service-identity_internal_handler_dto.UpdateJITConfigRequest": { "description": "更新身份提供商的JIT（Just-In-Time）用户自动创建策略配置", "type": "object", "properties": { "attribute_mapping_id": { "type": "string", "example": "attr_map_001" }, "auto_create_user": { "type": "boolean", "example": true }, "default_role": { "type": "string", "example": "member" }, "enabled": { "type": "boolean", "example": true } } }, "gitee_com_autional_service-identity_internal_handler_dto.UpdatePasswordPolicyRequest": { "description": "运行时更新密码策略请求", "type": "object", "properties": { "change_cooldown_minutes": { "description": "密码修改冷却时间（分钟）", "type": "integer" }, "check_breached_passwords": { "description": "是否检测已泄露密码", "type": "boolean" }, "expiry_days": { "description": "密码过期天数", "type": "integer" }, "grace_period_days": { "description": "过期宽限天数", "type": "integer" }, "history_count": { "description": "密码历史保留数量", "type": "integer" }, "lock_duration_sec": { "description": "账户锁定时间（秒）", "type": "integer" }, "max_length": { "description": "最大长度", "type": "integer" }, "max_login_attempts": { "description": "最大登录失败次数", "type": "integer" }, "min_length": { "description": "最小长度", "type": "integer" }, "password_transmission": { "description": "密码传输方式", "type": "string" }, "require_digit": { "description": "需要数字", "type": "boolean" }, "require_lower": { "description": "需要小写字母", "type": "boolean" }, "require_special": { "description": "需要特殊字符", "type": "boolean" }, "require_upper": { "description": "需要大写字母", "type": "boolean" } } }, "gitee_com_autional_service-identity_internal_handler_dto.UpdateUserAuthRequest": { "description": "更新当前认证用户请求", "type": "object", "properties": { "metadata": { "description": "Metadata (flat string map)", "type": "object", "additionalProperties": { "type": "string" } }, "mfa_enabled": { "description": "MFAEnabled", "type": "boolean" }, "username": { "description": "Username", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.UpdateUserResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.AuthUserResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.UpdateUserStatusRequest": { "description": "更新用户状态请求参数", "type": "object", "required": [ "status" ], "properties": { "reason": { "description": "原因", "type": "string" }, "status": { "description": "目标状态", "type": "string", "enum": [ "active", "banned", "pending", "suspended", "locked", "deleted" ] } } }, "gitee_com_autional_service-identity_internal_handler_dto.UserDetailResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UserWithIdentitiesResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.UserInfo": { "description": "用户基本信息", "type": "object", "properties": { "created_at": { "description": "Account creation time", "type": "string", "example": "2026-01-15T10:30:00Z" }, "email": { "description": "Email", "type": "string", "example": "john@example.com" }, "id": { "description": "User ID", "type": "string", "example": "usr_abc123" }, "last_login_at": { "description": "Last login time", "type": "string", "example": "2026-07-20T08:00:00Z" }, "must_change_password": { "description": "Password must be changed", "type": "boolean", "example": false }, "password_expires_in": { "description": "Days until password expires", "type": "integer", "example": 30 }, "password_warning": { "description": "Password warning: expiring/expired_grace/expired", "type": "string", "example": "expiring" }, "phone": { "description": "Phone", "type": "string", "example": "13800138000" }, "status": { "description": "Status", "type": "string", "example": "active" }, "username": { "description": "Username", "type": "string", "example": "john.doe" } } }, "gitee_com_autional_service-identity_internal_handler_dto.UserInfoResponseWrapper": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.UserInfo" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.UserListResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "items": { "description": "统一使用 items", "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.AuthUserResponse" } }, "message": { "type": "string" }, "pagination": { "description": "分页信息（嵌套对象）", "allOf": [ { "$ref": "#/definitions/gitee_com_autional_service-core_base_dto.PageInfo" } ] }, "timestamp": { "type": "string" }, "total": { "description": "总条数（平铺，便于直接读取）", "type": "integer" } } }, "gitee_com_autional_service-identity_internal_handler_dto.UserUpdateRequest": { "description": "更新用户请求参数", "type": "object", "properties": { "age_group": { "description": "年龄段", "type": "string" }, "birth_date": { "description": "出生日期", "type": "string" }, "department_id": { "description": "部门ID", "type": "string" }, "email": { "description": "邮箱", "type": "string" }, "is_minor": { "description": "是否未成年", "type": "boolean" }, "nickname": { "description": "昵称", "type": "string" }, "pending_parental_consent": { "description": "是否等待家长同意", "type": "boolean" }, "phone": { "description": "手机号", "type": "string" }, "reason": { "description": "变更原因（变更 email 时必填，ADR-07）", "type": "string" }, "role": { "description": "角色", "type": "string" }, "username": { "description": "用户名", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.UserWithIdentitiesResponse": { "type": "object", "properties": { "identities": { "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.IdentityResponse" } }, "user": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.AuthUserResponse" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ValidateKeyRequest": { "type": "object", "required": [ "api_key" ], "properties": { "api_key": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ValidateKeyResult": { "type": "object", "properties": { "ip_restrictions": { "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.ipRestrictionDTO" } }, "key_id": { "type": "string" }, "scopes": { "type": "array", "items": { "type": "string" } }, "status": { "type": "string" }, "tenant_id": { "type": "string" }, "user_id": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.VerificationTrackingQueryResponse": { "type": "object", "properties": { "channel": { "type": "string" }, "created_at": { "type": "string" }, "error": { "type": "string" }, "expires_at": { "type": "string" }, "purpose": { "type": "string" }, "sent_at": { "type": "string" }, "status": { "type": "string" }, "tracking_id": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.VerifyAccountRecoveryRequest": { "description": "验证账户恢复验证码", "type": "object", "required": [ "code", "recovery_token" ], "properties": { "code": { "description": "验证码", "type": "string" }, "recovery_token": { "description": "恢复令牌", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.VerifyChangeRequest": { "description": "验证邮箱/手机号变更", "type": "object", "required": [ "code" ], "properties": { "code": { "description": "验证码", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.VerifyEmailRequest": { "type": "object", "required": [ "code", "email" ], "properties": { "code": { "type": "string" }, "email": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.VerifyMFAChallengeRequest": { "type": "object", "required": [ "challenge_token", "code" ], "properties": { "challenge_token": { "type": "string" }, "code": { "type": "string" }, "mfa_method": { "description": "totp/sms/email/push — default totp; for push, code is challenge_id", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.VerifyPasswordData": { "type": "object", "properties": { "user_id": { "type": "string" }, "valid": { "type": "boolean" } } }, "gitee_com_autional_service-identity_internal_handler_dto.VerifyPasswordRequest": { "description": "验证密码请求", "type": "object", "required": [ "identifier", "password" ], "properties": { "identifier": { "description": "Identifier", "type": "string" }, "password": { "description": "Password", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.VerifyPasswordResponse": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.VerifyPasswordData" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.VerifyPhoneRequest": { "type": "object", "required": [ "code", "phone" ], "properties": { "code": { "type": "string" }, "phone": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.VerifyRecoveryContactRequest": { "description": "校验发送到该恢复联系方式的验证码", "type": "object", "required": [ "code" ], "properties": { "code": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.VerifyResetCodeRequest": { "description": "验证重置码请求参数", "type": "object", "required": [ "code", "identity" ], "properties": { "code": { "description": "Verification code", "type": "string" }, "identity": { "description": "Email or phone", "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.Web3VerifyRequest": { "type": "object", "required": [ "address", "message", "signature" ], "properties": { "address": { "type": "string", "example": "0xAb5801a7D398351b8bE11C439e05C5B3259aeC9B" }, "message": { "type": "string", "example": "Sign this message to verify wallet ownership." }, "signature": { "type": "string", "example": "0x1234abc..." } } }, "gitee_com_autional_service-identity_internal_handler_dto.Web3VerifyResponse": { "type": "object", "properties": { "address": { "type": "string", "example": "0xAb5801a7D398351b8bE11C439e05C5B3259aeC9B" }, "message": { "type": "string", "example": "Signature verification successful" }, "verified": { "type": "boolean", "example": true } } }, "gitee_com_autional_service-identity_internal_handler_dto.WebAuthnAuthenticatorSelection": { "type": "object", "properties": { "authenticatorAttachment": { "type": "string" }, "residentKey": { "type": "string" }, "userVerification": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.WebAuthnCredentialDescriptor": { "type": "object", "properties": { "id": { "type": "string" }, "transports": { "type": "array", "items": { "type": "string" } }, "type": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.WebAuthnCredentialParameter": { "type": "object", "properties": { "alg": { "type": "integer" }, "type": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.WebAuthnCredentialResponse": { "type": "object", "properties": { "aaguid": { "type": "string" }, "attestation_type": { "type": "string" }, "authenticator_attachment": { "type": "string" }, "authenticator_name": { "type": "string" }, "backup_eligible": { "type": "boolean" }, "backup_state": { "type": "boolean" }, "created_at": { "type": "string" }, "credential_id": { "type": "string" }, "id": { "type": "string" }, "last_used_at": { "type": "string" }, "name": { "type": "string" }, "sign_count": { "type": "integer" }, "transports": { "type": "string" }, "user_id": { "type": "string" }, "user_verified": { "type": "boolean" } } }, "gitee_com_autional_service-identity_internal_handler_dto.WebAuthnLoginOptionsResponse": { "type": "object", "properties": { "allowCredentials": { "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.WebAuthnCredentialDescriptor" } }, "challenge": { "type": "string" }, "rpId": { "type": "string" }, "timeout": { "type": "integer" }, "userVerification": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.WebAuthnLoginResponse": { "type": "object", "properties": { "publicKey": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.WebAuthnLoginOptionsResponse" } } }, "gitee_com_autional_service-identity_internal_handler_dto.WebAuthnLoginResponseWrapper": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.WebAuthnLoginResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.WebAuthnRPEntity": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.WebAuthnRegistrationOptionsResponse": { "description": "WebAuthn navigator.credentials.create() 的 publicKey 参数", "type": "object", "properties": { "attestation": { "type": "string" }, "authenticatorSelection": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.WebAuthnAuthenticatorSelection" }, "challenge": { "type": "string" }, "pubKeyCredParams": { "type": "array", "items": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.WebAuthnCredentialParameter" } }, "rp": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.WebAuthnRPEntity" }, "timeout": { "type": "integer" }, "user": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.WebAuthnUserEntity" } } }, "gitee_com_autional_service-identity_internal_handler_dto.WebAuthnRegistrationResponse": { "type": "object", "properties": { "publicKey": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.WebAuthnRegistrationOptionsResponse" } } }, "gitee_com_autional_service-identity_internal_handler_dto.WebAuthnRegistrationResponseWrapper": { "type": "object", "properties": { "code": { "type": "integer" }, "data": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_handler_dto.WebAuthnRegistrationResponse" }, "message": { "type": "string" }, "timestamp": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.WebAuthnUserEntity": { "type": "object", "properties": { "displayName": { "type": "string" }, "id": { "type": "string" }, "name": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_handler_dto.ipRestrictionDTO": { "type": "object", "properties": { "id": { "type": "string" }, "label": { "type": "string" }, "status": { "type": "string" }, "value": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_infrastructure_webauthn.AuthenticationResponse": { "type": "object", "properties": { "id": { "type": "string" }, "raw_id": { "type": "string" }, "response": { "type": "object", "properties": { "authenticator_data": { "type": "string" }, "client_data_json": { "type": "string" }, "signature": { "type": "string" }, "user_handle": { "description": "base64url, 条件UI返回的用户标识", "type": "string" } } }, "type": { "type": "string" }, "user_id": { "type": "string" } } }, "gitee_com_autional_service-identity_internal_infrastructure_webauthn.CredentialCreation": { "type": "object", "properties": { "id": { "type": "string" }, "raw_id": { "type": "string" }, "response": { "type": "object", "properties": { "attestation_object": { "type": "string" }, "client_data_json": { "type": "string" } } }, "type": { "type": "string" } } }, "handler.BackchannelLogoutRequest": { "type": "object", "properties": { "logout_token": { "type": "string" } } }, "handler.CheckPublicPasswordStrengthRequest": { "type": "object", "required": [ "password" ], "properties": { "password": { "type": "string", "example": "MyP@ssw0rd!" } } }, "handler.SCIMError": { "type": "object", "properties": { "detail": { "type": "string" }, "schemas": { "type": "array", "items": { "type": "string" } }, "scimType": { "type": "string" }, "status": { "type": "string" } } }, "handler.SamlLinkedAccountInfo": { "type": "object", "properties": { "email": { "type": "string" }, "id": { "type": "string" }, "linked_at": { "type": "string" }, "name_id": { "type": "string" }, "provider_id": { "type": "string" }, "provider_name": { "type": "string" } } }, "handler.SelfServicePasswordStrengthRequest": { "type": "object", "required": [ "password" ], "properties": { "password": { "type": "string", "example": "MyP@ssw0rd!" } } }, "handler.beginLoginRequest": { "type": "object", "required": [ "password" ], "properties": { "password": { "type": "string", "minLength": 1 } } }, "handler.beginRegistrationRequest": { "type": "object", "required": [ "password" ], "properties": { "display_name": { "type": "string" }, "password": { "type": "string", "minLength": 1 }, "user_name": { "description": "UserName 仅作凭据 label（UP-91-A）：可缺省，服务端派生链补全（user_name → email → user-）。", "type": "string" } } }, "handler.completeLoginRequest": { "type": "object", "properties": { "id": { "type": "string" }, "raw_id": { "type": "string" }, "response": { "type": "object", "properties": { "authenticator_data": { "type": "string" }, "client_data_json": { "type": "string" }, "signature": { "type": "string" }, "user_handle": { "description": "base64url, 条件UI返回的用户标识", "type": "string" } } }, "type": { "type": "string" }, "user_id": { "type": "string" } } }, "handler.completeRegistrationRequest": { "type": "object", "required": [ "credential" ], "properties": { "credential": { "$ref": "#/definitions/gitee_com_autional_service-identity_internal_infrastructure_webauthn.CredentialCreation" } } }, "handler.riskConfigRequest": { "type": "object", "properties": { "critical_threshold": { "type": "integer" }, "elevated_threshold": { "type": "integer" }, "high_threshold": { "type": "integer" }, "learning_period_days": { "type": "integer", "maximum": 3650, "minimum": 0 }, "moderate_threshold": { "type": "integer" }, "session_risk_enabled": { "type": "boolean" }, "signal_weights": { "$ref": "#/definitions/domain.SignalWeights" } } }, "handler.riskConfigResponse": { "type": "object", "properties": { "critical_threshold": { "type": "integer" }, "elevated_threshold": { "type": "integer" }, "high_threshold": { "type": "integer" }, "learning_period_days": { "type": "integer" }, "moderate_threshold": { "type": "integer" }, "session_risk_enabled": { "type": "boolean" }, "signal_weights": { "$ref": "#/definitions/domain.SignalWeights" }, "tenant_id": { "type": "string" } } }, "handler.riskDashboardResponse": { "type": "object", "properties": { "day_counts": { "type": "array", "items": { "$ref": "#/definitions/domain.RiskEventDayCount" } }, "score_ranges": { "type": "array", "items": { "$ref": "#/definitions/domain.RiskScoreRange" } }, "tenant_id": { "type": "string" }, "today_total": { "type": "integer" }, "top_event_types": { "type": "array", "items": { "$ref": "#/definitions/domain.RiskEventTypeCount" } }, "top_risk_users": { "type": "array", "items": { "$ref": "#/definitions/domain.TopRiskUser" } } } }, "robot_domain.CreateRobotRequest": { "type": "object", "required": [ "name" ], "properties": { "firmware_ver": { "type": "string" }, "location": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "workload_subtype": { "type": "string" } } }, "robot_domain.RobotInfo": { "type": "object", "properties": { "created_at": { "type": "string" }, "firmware_ver": { "type": "string" }, "identity_id": { "type": "string" }, "last_health_at": { "type": "string" }, "location": { "type": "string" }, "model": { "type": "string" }, "name": { "type": "string" }, "owner_id": { "type": "string" }, "owner_principal_id": { "description": "OwnerPrincipalID additive（json omitempty）；保留 OwnerID 以向后兼容（C-4）。", "type": "string" }, "safety_policy": { "type": "string" }, "status": { "type": "string" }, "updated_at": { "type": "string" }, "workload_subtype": { "type": "string" } } }, "robot_domain.UpdateRobotRequest": { "type": "object", "properties": { "firmware_ver": { "type": "string" }, "location": { "type": "string" }, "name": { "type": "string" }, "safety_policy": { "type": "string" } } }, "robot_handler.IssueIntentTokenRequest": { "type": "object", "properties": { "actions": { "type": "array", "items": { "type": "string" } }, "allowed_zones": { "type": "array", "items": { "type": "string" } }, "max_speed": { "type": "number" } } }, "robot_handler.IssueIntentTokenResponse": { "type": "object", "properties": { "intent_token": { "type": "string" } } }, "robot_handler.RevokeIntentTokenRequest": { "type": "object", "properties": { "intent_token": { "type": "string" } } } }, "securityDefinitions": { "bearerAuth": { "description": "Type \"Bearer\" followed by a space and JWT token.", "type": "apiKey", "name": "Authorization", "in": "header" } }, "tags": [ { "description": "用户身份认证相关接口：登录、注册、密码管理、令牌刷新", "name": "身份认证" }, { "description": "API 密钥管理：创建、轮换、撤销", "name": "API Key" }, { "description": "多因素认证：TOTP、短信、邮件、生物识别、Push", "name": "多因素认证" }, { "description": "跨域身份管理系统：用户和组同步", "name": "SCIM" }, { "description": "WebAuthn/FIDO2 无密码认证", "name": "WebAuthn" }, { "description": "外部身份提供商管理：OAuth/SAML/SCIM 配置", "name": "身份提供商" }, { "description": "OAuth 2.0 / OIDC 标准接口：授权码、令牌、自省、撤销", "name": "OAuth" }, { "description": "管理员接口：用户管理、系统配置、安全策略", "name": "Admin" }, { "description": "管理员机器人管理接口", "name": "Admin/Robots" }, { "description": "管理员物联网设备管理接口", "name": "Admin/IoTs" }, { "description": "管理员AI代理/服务账户管理接口", "name": "Admin/Agents" }, { "description": "物联网设备自管理接口", "name": "IoTs" }, { "description": "安全策略配置：密码策略、MFA策略、登录限制", "name": "安全策略" }, { "description": "未成年人账户管理：家长控制、年龄验证、合规", "name": "未成年人管理" }, { "description": "认证策略配置：授权策略、访问控制规则", "name": "认证策略管理" }, { "description": "账户恢复：忘记密码、账户找回、身份验证", "name": "账户恢复" } ], "host": "api.autional.cn", "schemes": [ "https" ] }