DaydreamCoding
b19da9c7fe
feat(dingtalk): 钉钉 OAuth 登录接入与 internal_only 用户属性同步
⚠️ 应用类型约束:当前实现仅支持「钉钉登录-企业内部应用」(DingTalk 开放平台
internal_app 类型)。第三方个人应用、第三方企业应用类型暂不支持——OAuth 流程
相同但 corp 校验、跨企业行为不同。backend 通过 DingTalkAppKind 校验对非
internal_app 类型 fail-closed(硬约束)。
钉钉 OAuth 登录主链
- 4 步 OAuth 链:ExchangeCodeForUserToken / GetUnionIdByUserToken /
GetUserIdByUnionId / GetStaffInfoByUserId;app token 缓存
- pending session 机制持久化 OAuth 中间态;cookie-only token 持久化
- 三种分流:bind_login_required / email_completion / choose_account_action
- corp_restriction_policy 支持 none + internal_only;stale "whitelist" 在
加载层与写入层均静默 coerce 为 none + slog.Warn
- bypass_registration 开关:企业内部模式豁免全局 REGISTRATION_DISABLED
- isReservedEmail / signup_source / canUnbindProvider / OAuth pending flow
等横切点支持 dingtalk provider
- migration 136:4 表 CHECK 约束加入 'dingtalk' provider 值
internal_only 模式同步企业邮箱/姓名/部门到用户属性
- SyncCorpEmail / SyncDisplayName / SyncDept 三个独立开关 + 对应
SyncXxxAttrKey 目标属性 key(默认 dingtalk_email / dingtalk_name /
dingtalk_department);非 internal_only policy 在写入层与加载层均
coerce 为 false,admin handler 与 setting_service 双层兜底
- 同步语义:首次注册写 users.username(昵称优先 → 企业姓名 fallback),
之后每次登录刷新 3 个属性;空值也写入以覆盖旧值
- 邮箱三级 fallback:org_email > email > extension["企业邮箱"]
(钉钉自定义字段 JSON)
- 部门路径递归向上拼接,跳过 dept_id=1 选首个真实子部门,剥离根组织名
- GetUnionIdByUserToken 同时返回 OIDC /contact/users/me 的 nick 字段;
新增 GetDeptInfo 调用 OAPI /topapi/v2/department/get
- AuthHandler 注入 UserAttributeService;OAuth pending flow 在
createPendingOAuthAccount / bindPendingOAuthLogin 分别派发到
AfterRegistration(syncUsername=true)/ AfterLogin
- migration 137 seed dingtalk_email/name/department 三个用户属性定义
附带修复(同集成路径暴露的两个 OAuth 注册回归)
- LoginOrRegisterOAuthWithTokenPair 新建用户分支用 inferLegacySignupSource
覆写 caller 显式传入的 signupSource,导致 dingtalk/linuxdo/oidc/wechat
渠道授权按 email 渠道读取;改为只在 caller 未显式传入时回退邮箱推断
- mergeProviderDefaultGrantSettings 把 parse fallback 默认值
(Concurrency=5 / Balance=0) 当作"未配置"哨兵,admin 显式设 5 时被误判
退回全局默认(复现:全局默认 1 + 渠道默认并发 5 + grant_on_signup → 新
用户实际 concurrency=1);去掉哨兵,admin 任何 >=0 值都覆盖 globalDefaults
前端
- DingTalk Login / Callback / EmailCompletion / ChoiceAccount / Error
视图;router + auth API client
- admin SettingsView:corp policy radio(none / internal_only)+ bypass
注册开关 + i18n;internal_only 下展示三同步开关 + 目标 attr key 下拉
(拉取 user attribute definitions),展示 fieldEmail /
qyapi_get_department_list 钉钉权限申请提示
- Profile:S1 主动绑定 / S5 解绑钉钉按钮 + 合成邮箱防自锁
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-19 15:27:47 +08:00
..
2026-05-19 15:20:02 +08:00
2026-04-25 14:52:58 +08:00
2026-04-19 18:45:04 +08:00
2026-04-23 21:40:58 +08:00
2026-04-23 21:40:58 +08:00
2026-04-14 16:26:46 +08:00
2026-05-05 03:26:54 +08:00
2026-04-25 14:52:58 +08:00
2026-04-28 04:53:29 +08:00
2026-05-11 16:22:40 +08:00
2026-05-11 16:22:40 +08:00
2026-04-15 15:29:52 +08:00
2026-04-25 05:26:33 +00:00
2026-04-14 09:32:11 +08:00
2026-04-25 14:52:58 +08:00
2026-05-03 20:33:14 +08:00
2026-05-05 06:44:37 -07:00
2026-04-22 13:19:28 +08:00
2026-04-27 17:32:34 +08:00
2026-05-05 06:44:37 -07:00
2026-05-05 06:44:37 -07:00
2026-04-23 16:34:37 +08:00
2026-05-05 03:26:54 +08:00
2026-04-23 16:34:37 +08:00
2026-04-23 16:34:37 +08:00
2026-04-23 16:34:37 +08:00
2026-05-19 15:27:47 +08:00
2026-04-25 20:22:07 +08:00
2026-05-03 22:12:57 +08:00
2026-04-21 09:53:15 -07:00
2026-04-21 09:53:15 -07:00
2026-04-21 09:53:15 -07:00
2026-05-12 16:04:24 +08:00
2026-05-12 16:12:08 +08:00
2026-05-07 09:14:47 +08:00
2026-05-07 09:14:47 +08:00
2026-05-07 09:14:47 +08:00
2026-04-22 14:57:47 +08:00
2026-05-06 16:06:11 +08:00
2026-05-06 17:19:20 +08:00
2026-05-19 15:27:47 +08:00
2026-04-21 09:53:15 -07:00
2026-04-22 14:56:56 +08:00
2026-04-22 14:56:56 +08:00
2026-05-05 06:44:37 -07:00
2026-04-25 08:44:18 +08:00
2026-05-19 15:27:47 +08:00
2026-05-19 15:27:47 +08:00
2026-04-25 08:44:18 +08:00
2026-05-19 15:27:47 +08:00
2026-04-14 09:36:40 +08:00
2026-04-14 09:36:26 +08:00
2026-04-14 09:31:45 +08:00
2026-04-14 09:35:20 +08:00
2026-04-23 16:34:37 +08:00
2026-04-23 16:34:37 +08:00
2026-04-23 16:34:37 +08:00
2026-04-27 16:47:44 +08:00
2026-05-12 15:21:31 +08:00
2026-04-17 22:06:32 +08:00
2026-05-05 03:26:54 +08:00
2026-04-17 22:06:32 +08:00
2026-05-12 15:21:31 +08:00
2026-05-15 01:28:13 +08:00
2026-05-15 01:28:13 +08:00
2026-04-20 23:38:59 +08:00
2026-04-20 20:21:02 +08:00
2026-04-21 14:14:49 +08:00
2026-04-21 14:14:49 +08:00
2026-04-22 19:17:08 +08:00
2026-04-22 20:08:31 +08:00
2026-04-22 20:08:31 +08:00
2026-04-22 19:17:08 +08:00
2026-04-20 20:21:02 +08:00
2026-04-21 14:39:19 +08:00
2026-04-21 14:39:19 +08:00
2026-04-21 14:14:49 +08:00
2026-04-20 20:21:02 +08:00
2026-04-23 00:45:10 +08:00
2026-05-15 13:14:07 +08:00
2026-05-15 13:14:07 +08:00
2026-05-15 13:14:07 +08:00
2026-04-25 20:39:58 -04:00
2026-04-29 16:53:09 +08:00
2026-05-07 00:10:20 +08:00
2026-04-23 21:40:58 +08:00
2026-04-14 17:35:27 +08:00
2026-05-07 09:14:47 +08:00
2026-05-07 14:31:19 +08:00
2026-05-07 14:31:19 +08:00
2026-05-07 15:11:38 +08:00
2026-05-07 15:11:38 +08:00
2026-05-19 15:27:47 +08:00
2026-04-14 10:18:39 +08:00
2026-04-23 21:40:58 +08:00
2026-04-23 21:40:58 +08:00
2026-05-18 18:41:25 +08:00
2026-04-25 20:39:58 -04:00
2026-05-07 18:56:11 +08:00
2026-04-24 23:16:32 +08:00
2026-05-11 21:26:41 +08:00
2026-04-29 16:53:09 +08:00
2026-04-29 16:53:09 +08:00
2026-04-23 21:40:58 +08:00
2026-05-11 21:26:41 +08:00
2026-04-23 21:40:58 +08:00
2026-04-25 22:50:35 +08:00
2026-05-12 15:21:31 +08:00
2026-04-19 18:05:25 +08:00
2026-04-19 18:05:25 +08:00
2026-05-03 17:11:27 +08:00
2026-04-17 22:06:32 +08:00
2026-05-19 15:27:47 +08:00
2026-04-29 15:44:54 +08:00
2026-05-11 21:26:41 +08:00
2026-05-11 17:27:04 +08:00
2026-04-14 09:36:40 +08:00
2026-04-14 17:35:27 +08:00
2026-05-19 15:10:24 +08:00
2026-05-16 00:16:38 +08:00
2026-05-14 15:33:10 +08:00
2026-05-19 14:07:25 +08:00
2026-04-23 21:40:58 +08:00
2026-04-29 16:53:09 +08:00
2026-05-05 03:26:54 +08:00
2026-05-05 03:26:54 +08:00
2026-04-24 23:16:32 +08:00
2026-05-05 03:26:54 +08:00
2026-05-12 15:21:31 +08:00
2026-05-12 15:21:31 +08:00
2026-05-12 15:21:31 +08:00
2026-05-12 16:04:24 +08:00
2026-05-12 15:21:31 +08:00
2026-04-23 00:45:10 +08:00
2026-04-22 12:30:08 +08:00
2026-04-14 09:36:40 +08:00
2026-04-14 09:35:20 +08:00
2026-04-23 12:58:13 +08:00
2026-04-25 14:52:58 +08:00
2026-04-25 14:52:58 +08:00
2026-04-25 14:52:58 +08:00
2026-05-05 03:26:54 +08:00
2026-04-30 21:46:46 +08:00
2026-05-19 15:14:36 +08:00
2026-05-19 15:14:36 +08:00
2026-04-25 14:52:58 +08:00
2026-04-25 14:52:58 +08:00
2026-04-25 14:52:58 +08:00
2026-05-19 09:53:50 +08:00
2026-05-05 19:36:33 +08:00
2026-05-05 19:36:33 +08:00
2026-05-13 11:25:15 +08:00
2026-05-14 16:45:31 +08:00
2026-05-14 16:45:31 +08:00
2026-05-03 17:43:56 +08:00
2026-05-13 11:25:15 +08:00
2026-05-13 11:25:15 +08:00
2026-05-17 15:33:34 +08:00
2026-05-19 14:47:10 +08:00
2026-05-17 15:33:34 +08:00
2026-05-12 15:21:31 +08:00
2026-05-15 10:41:57 +08:00
2026-05-19 10:24:18 +08:00
2026-05-19 14:44:37 +08:00
2026-05-07 00:10:20 +08:00
2026-05-19 14:14:50 +08:00
2026-05-19 14:44:37 +08:00
2026-05-19 14:44:37 +08:00
2026-05-05 19:36:33 +08:00
2026-05-11 12:03:17 +08:00
2026-05-05 19:36:33 +08:00
2026-05-05 19:36:33 +08:00
2026-05-05 19:36:33 +08:00
2026-05-05 19:36:33 +08:00
2026-05-05 03:26:54 +08:00
2026-05-12 09:26:53 +00:00
2026-05-04 11:43:00 +08:00
2026-05-05 19:36:33 +08:00
2026-05-08 11:36:09 +08:00
2026-04-27 00:39:06 +00:00
2026-05-05 03:26:54 +08:00
2026-05-08 11:36:09 +08:00
2026-05-08 11:36:09 +08:00
2026-04-24 19:31:49 +08:00
2026-04-24 19:31:49 +08:00
2026-04-25 14:52:58 +08:00
2026-05-16 03:03:43 +08:00
2026-05-07 14:59:42 +08:00
2026-04-30 12:02:08 +08:00
2026-05-05 03:26:54 +08:00
2026-05-19 14:00:24 +08:00
2026-04-28 11:15:09 +08:00
2026-04-15 15:29:52 +08:00
2026-05-14 16:45:31 +08:00
2026-05-04 13:35:26 +08:00
2026-05-04 13:35:26 +08:00
2026-04-29 15:01:02 +08:00
2026-05-04 13:35:26 +08:00
2026-04-14 17:35:27 +08:00
2026-04-14 17:35:27 +08:00
2026-04-22 12:30:08 +08:00
2026-05-04 12:43:15 +08:00
2026-05-04 13:35:26 +08:00
2026-04-14 17:35:27 +08:00
2026-05-11 11:17:26 +08:00
2026-05-11 11:17:26 +08:00
2026-05-11 11:17:26 +08:00
2026-04-14 09:36:26 +08:00
2026-04-14 17:35:27 +08:00
2026-05-11 11:17:26 +08:00
2026-05-11 11:17:26 +08:00
2026-04-21 23:20:37 +08:00
2026-05-11 11:17:26 +08:00
2026-05-11 11:17:26 +08:00
2026-04-23 19:22:43 +08:00
2026-05-11 11:17:26 +08:00
2026-05-11 11:17:26 +08:00
2026-04-22 11:28:58 +08:00
2026-05-05 06:44:37 -07:00
2026-04-22 18:01:51 +08:00
2026-05-11 11:17:26 +08:00
2026-05-11 11:17:26 +08:00
2026-05-14 11:36:02 +08:00
2026-05-14 11:36:02 +08:00
2026-05-11 11:17:26 +08:00
2026-05-11 11:17:26 +08:00
2026-04-22 12:30:17 +08:00
2026-04-22 12:30:17 +08:00
2026-04-22 14:57:16 +08:00
2026-04-22 12:30:17 +08:00
2026-05-11 11:17:26 +08:00
2026-04-22 16:38:36 +08:00
2026-04-22 02:32:53 +08:00
2026-04-21 12:50:55 +08:00
2026-05-12 09:26:53 +00:00
2026-05-05 03:26:54 +08:00
2026-05-05 20:11:12 +08:00
2026-04-23 12:58:13 +08:00
2026-04-23 12:58:13 +08:00
2026-05-11 16:22:40 +08:00
2026-05-11 16:22:40 +08:00
2026-04-23 21:40:58 +08:00
2026-05-05 06:44:37 -07:00
2026-04-29 22:48:39 +08:00
2026-04-29 22:48:39 +08:00
2026-04-29 22:48:39 +08:00
2026-04-21 20:36:10 +08:00
2026-04-22 16:51:23 +08:00
2026-04-22 12:30:07 +08:00
2026-05-11 22:25:20 +08:00
2026-04-22 13:18:10 +08:00
2026-05-19 15:27:47 +08:00
2026-05-19 15:27:47 +08:00
2026-04-21 10:13:28 -07:00
2026-04-23 21:40:58 +08:00
2026-05-18 21:09:11 +08:00
2026-05-18 21:09:11 +08:00
2026-05-18 21:09:11 +08:00
2026-05-08 11:36:09 +08:00
2026-04-20 19:53:22 +08:00
2026-05-18 19:01:12 +08:00
2026-05-18 19:01:12 +08:00
2026-04-16 01:53:22 +08:00
2026-04-17 22:07:15 +08:00
2026-04-14 09:36:26 +08:00
2026-05-12 15:21:31 +08:00
2026-05-19 15:27:47 +08:00
2026-04-23 16:34:37 +08:00
2026-04-23 16:34:37 +08:00
2026-04-21 01:00:59 +08:00
2026-05-05 06:44:37 -07:00
2026-05-19 15:27:47 +08:00
2026-05-18 21:09:11 +08:00
2026-05-18 21:09:11 +08:00
2026-04-23 16:34:37 +08:00
2026-05-08 14:03:15 +08:00
2026-05-11 11:43:44 +08:00
2026-04-14 09:36:40 +08:00
2026-04-14 17:35:27 +08:00
2026-05-11 22:25:20 +08:00