ryan 5412c385dc fix(oauth): remove pending oauth auto-binding and enforce oidc policies ...

- Complete removal of completePendingOAuthBinding logic to prevent unintended account takeovers (AUTH-ROUTE-1).
- Add strict OIDC policy checks (global switch and source active states) across authorization and callback paths (AUTH-POLICY-1).
- Fix OIDC test cases to properly clear the Redis-backed system config cache using composite keys.

2026-06-13 10:06:49 +08:00

..

access_tokens.go

去除 access_token 访问写库逻辑

2026-06-11 09:09:17 +08:00

constants.go

精简

2026-06-10 11:33:33 +08:00

errs.go

登录界面优化

2026-06-12 11:35:48 +08:00

logics.go

fix(oauth): remove pending oauth auto-binding and enforce oidc policies

2026-06-13 10:06:49 +08:00

routers_test.go

fix(oauth): secure OAuth state session binding to prevent account takeover

2026-06-13 09:55:07 +08:00

routers.go

fix(oauth): remove pending oauth auto-binding and enforce oidc policies

2026-06-13 10:06:49 +08:00

tasks.go

解耦任务框架与业务任务

2026-06-11 08:52:44 +08:00