安全加固

frontend/components/auth/login-page.tsx

@@ -109,6 +109,12 @@ export function LoginPage() {
         setIsProcessingCallback(true)
         try {
           const result = await services.auth.handleCallback({ state, code })
+          if (result.status === "need_bind") {
+            toast.info("您的第三方账号未绑定本地账号，系统已关闭注册。请登录已有本地账号进行绑定。")
+            setIsProcessingCallback(false)
+            router.replace('/login')
+            return
+          }
           if (result.user) {
             setUser(result.user)
           }

frontend/lib/services/auth/auth.service.ts

@@ -129,6 +129,6 @@ export class AuthService extends BaseService {
   }
 
   static async deleteExternalAccountBinding(id: string): Promise<void> {
-    return this.delete<void>(`/oauth/external-accounts/${encodeURIComponent(id)}/delete`);
+    return this.post<void>(`/oauth/external-accounts/${encodeURIComponent(id)}/delete`);
   }
 }

frontend/lib/services/auth/types.ts

@@ -74,7 +74,7 @@ export interface OAuthAuthorizeResponse {
 }
 
 export interface OAuthCallbackResult {
-  status: 'logged_in' | 'bound';
+  status: 'logged_in' | 'bound' | 'need_bind';
   user?: User;
 }