@dofe/sso-contracts 0.1.2

package/dist/api/auth.contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.contract.d.ts","sourceRoot":"","sources":["../../src/api/auth.contract.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAsBxB,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgJxB,CAAC;AAEF,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGhC,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC"}

package/dist/api/auth.contract.js

@@ -0,0 +1,144 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authContractVersioned = exports.authContract = void 0;
+const core_1 = require("@ts-rest/core");
+const zod_1 = require("zod");
+const base_1 = require("../base");
+const auth_schema_1 = require("../schemas/auth.schema");
+const sign_schema_1 = require("../schemas/sign.schema");
+const mfa_schema_1 = require("../schemas/mfa.schema");
+const c = (0, core_1.initContract)();
+exports.authContract = c.router({
+    loginByEmail: {
+        method: 'POST',
+        path: '/login/email',
+        body: auth_schema_1.EmailLoginBodySchema,
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(zod_1.z.union([sign_schema_1.LoginSuccessSchema, mfa_schema_1.MfaRequiredResponseSchema])),
+        },
+        summary: '邮箱密码登录',
+    },
+    loginByMobile: {
+        method: 'POST',
+        path: '/login/mobile',
+        body: auth_schema_1.MobileLoginBodySchema,
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(zod_1.z.union([sign_schema_1.LoginSuccessSchema, mfa_schema_1.MfaRequiredResponseSchema])),
+        },
+        summary: '手机号密码登录',
+    },
+    loginBySms: {
+        method: 'POST',
+        path: '/login/sms',
+        body: auth_schema_1.SmsLoginBodySchema,
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(zod_1.z.union([sign_schema_1.LoginSuccessSchema, mfa_schema_1.MfaRequiredResponseSchema])),
+        },
+        summary: '短信验证码登录',
+    },
+    registerByEmail: {
+        method: 'POST',
+        path: '/register/email',
+        body: auth_schema_1.EmailRegisterBodySchema,
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(sign_schema_1.LoginSuccessSchema),
+        },
+        summary: '邮箱注册',
+    },
+    registerByMobile: {
+        method: 'POST',
+        path: '/register/mobile',
+        body: auth_schema_1.MobileRegisterBodySchema,
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(sign_schema_1.LoginSuccessSchema),
+        },
+        summary: '手机号注册',
+    },
+    refreshToken: {
+        method: 'POST',
+        path: '/token/refresh',
+        body: auth_schema_1.RefreshTokenBodySchema,
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(sign_schema_1.LoginSuccessSchema),
+        },
+        summary: '刷新 Token',
+    },
+    verifyToken: {
+        method: 'GET',
+        path: '/token/verify',
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(auth_schema_1.TokenVerifyResponseSchema),
+        },
+        summary: '验证 Token 有效性',
+    },
+    logout: {
+        method: 'POST',
+        path: '/logout',
+        body: zod_1.z.object({}).optional(),
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(base_1.SuccessResponseSchema),
+        },
+        summary: '登出',
+    },
+    sendSmsCode: {
+        method: 'POST',
+        path: '/sms/send',
+        body: auth_schema_1.SendSmsBodySchema,
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(base_1.SuccessResponseSchema),
+        },
+        summary: '发送短信验证码',
+    },
+    sendEmailCode: {
+        method: 'POST',
+        path: '/email/send',
+        body: auth_schema_1.SendEmailBodySchema,
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(base_1.SuccessResponseSchema),
+        },
+        summary: '发送邮箱验证码',
+    },
+    changePassword: {
+        method: 'POST',
+        path: '/password/change',
+        body: auth_schema_1.ChangePasswordBodySchema,
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(base_1.SuccessResponseSchema),
+        },
+        summary: '修改密码（已登录）',
+    },
+    verifyEmail: {
+        method: 'POST',
+        path: '/email/verify',
+        body: auth_schema_1.VerifyEmailBodySchema,
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(base_1.SuccessResponseSchema),
+        },
+        summary: '验证邮箱',
+    },
+    verifyMobile: {
+        method: 'POST',
+        path: '/mobile/verify',
+        body: auth_schema_1.VerifyMobileBodySchema,
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(base_1.SuccessResponseSchema),
+        },
+        summary: '验证手机号',
+    },
+    resetPassword: {
+        method: 'POST',
+        path: '/password/reset',
+        body: auth_schema_1.ResetPasswordBodySchema,
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(base_1.SuccessResponseSchema),
+        },
+        summary: '重置密码',
+    },
+}, {
+    pathPrefix: '/auth',
+});
+exports.authContractVersioned = (0, base_1.withVersion)(exports.authContract, {
+    version: base_1.API_VERSION.V1,
+    pathPrefix: '/auth',
+});
+//# sourceMappingURL=auth.contract.js.map

package/dist/api/auth.contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.contract.js","sourceRoot":"","sources":["../../src/api/auth.contract.ts"],"names":[],"mappings":";;;AAAA,wCAA6C;AAC7C,6BAAwB;AACxB,kCAA6F;AAC7F,wDAcgC;AAChC,wDAA4D;AAC5D,sDAAkE;AAElE,MAAM,CAAC,GAAG,IAAA,mBAAY,GAAE,CAAC;AAEZ,QAAA,YAAY,GAAG,CAAC,CAAC,MAAM,CAClC;IACE,YAAY,EAAE;QACZ,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,kCAAoB;QAC1B,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EAAC,OAAC,CAAC,KAAK,CAAC,CAAC,gCAAkB,EAAE,sCAAyB,CAAC,CAAC,CAAC;SACjF;QACD,OAAO,EAAE,QAAQ;KAClB;IAED,aAAa,EAAE;QACb,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,mCAAqB;QAC3B,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EAAC,OAAC,CAAC,KAAK,CAAC,CAAC,gCAAkB,EAAE,sCAAyB,CAAC,CAAC,CAAC;SACjF;QACD,OAAO,EAAE,SAAS;KACnB;IAED,UAAU,EAAE;QACV,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,gCAAkB;QACxB,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EAAC,OAAC,CAAC,KAAK,CAAC,CAAC,gCAAkB,EAAE,sCAAyB,CAAC,CAAC,CAAC;SACjF;QACD,OAAO,EAAE,SAAS;KACnB;IAED,eAAe,EAAE;QACf,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,qCAAuB;QAC7B,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EAAC,gCAAkB,CAAC;SAC3C;QACD,OAAO,EAAE,MAAM;KAChB;IAED,gBAAgB,EAAE;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,sCAAwB;QAC9B,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EAAC,gCAAkB,CAAC;SAC3C;QACD,OAAO,EAAE,OAAO;KACjB;IAED,YAAY,EAAE;QACZ,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,oCAAsB;QAC5B,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EAAC,gCAAkB,CAAC;SAC3C;QACD,OAAO,EAAE,UAAU;KACpB;IAED,WAAW,EAAE;QACX,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,eAAe;QACrB,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EAAC,uCAAyB,CAAC;SAClD;QACD,OAAO,EAAE,cAAc;KACxB;IAED,MAAM,EAAE;QACN,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC7B,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EAAC,4BAAqB,CAAC;SAC9C;QACD,OAAO,EAAE,IAAI;KACd;IAED,WAAW,EAAE;QACX,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,+BAAiB;QACvB,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EAAC,4BAAqB,CAAC;SAC9C;QACD,OAAO,EAAE,SAAS;KACnB;IAED,aAAa,EAAE;QACb,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,iCAAmB;QACzB,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EAAC,4BAAqB,CAAC;SAC9C;QACD,OAAO,EAAE,SAAS;KACnB;IAED,cAAc,EAAE;QACd,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,sCAAwB;QAC9B,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EAAC,4BAAqB,CAAC;SAC9C;QACD,OAAO,EAAE,WAAW;KACrB;IAED,WAAW,EAAE;QACX,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,mCAAqB;QAC3B,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EAAC,4BAAqB,CAAC;SAC9C;QACD,OAAO,EAAE,MAAM;KAChB;IAED,YAAY,EAAE;QACZ,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,oCAAsB;QAC5B,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EAAC,4BAAqB,CAAC;SAC9C;QACD,OAAO,EAAE,OAAO;KACjB;IAED,aAAa,EAAE;QACb,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,qCAAuB;QAC7B,SAAS,EAAE;YACT,GAAG,EAAE,IAAA,wBAAiB,EAAC,4BAAqB,CAAC;SAC9C;QACD,OAAO,EAAE,MAAM;KAChB;CACF,EACD;IACE,UAAU,EAAE,OAAO;CACpB,CACF,CAAC;AAEW,QAAA,qBAAqB,GAAG,IAAA,kBAAW,EAAC,oBAAY,EAAE;IAC7D,OAAO,EAAE,kBAAW,CAAC,EAAE;IACvB,UAAU,EAAE,OAAO;CACpB,CAAC,CAAC"}

package/dist/api/client.contract.d.ts

@@ -0,0 +1,435 @@
+import { z } from 'zod';
+export declare const clientContract: {
+    listClients: {
+        summary: "获取 OAuth 客户端列表（分页）";
+        query: z.ZodObject<{
+            limit: z.ZodDefault<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
+            page: z.ZodDefault<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
+            asc: z.ZodOptional<z.ZodEnum<{
+                asc: "asc";
+                desc: "desc";
+            }>>;
+            search: z.ZodOptional<z.ZodString>;
+            isActive: z.ZodOptional<z.ZodCoercedBoolean<unknown>>;
+            sort: z.ZodOptional<z.ZodEnum<{
+                createdAt: "createdAt";
+                clientName: "clientName";
+            }>>;
+        }, z.core.$strip>;
+        method: "GET";
+        path: "/admin/clients";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    list: z.ZodArray<z.ZodObject<{
+                        clientId: z.ZodString;
+                        clientName: z.ZodString;
+                        clientUri: z.ZodNullable<z.ZodString>;
+                        redirectUris: z.ZodArray<z.ZodString>;
+                        grantTypes: z.ZodArray<z.ZodString>;
+                        isConfidential: z.ZodBoolean;
+                        isActive: z.ZodBoolean;
+                        createdAt: z.ZodNullable<z.ZodString>;
+                    }, z.core.$strip>>;
+                    total: z.ZodNumber;
+                    page: z.ZodNumber;
+                    limit: z.ZodNumber;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    getClient: {
+        summary: "获取 OAuth 客户端详情";
+        pathParams: z.ZodObject<{
+            clientId: z.ZodString;
+        }, z.core.$strip>;
+        method: "GET";
+        path: "/admin/clients/:clientId";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    clientId: z.ZodString;
+                    clientName: z.ZodString;
+                    clientUri: z.ZodOptional<z.ZodString>;
+                    redirectUris: z.ZodArray<z.ZodString>;
+                    grantTypes: z.ZodArray<z.ZodString>;
+                    scopes: z.ZodArray<z.ZodString>;
+                    isConfidential: z.ZodBoolean;
+                    isActive: z.ZodBoolean;
+                    createdAt: z.ZodOptional<z.ZodDate>;
+                    clientSecret: z.ZodString;
+                    postLogoutRedirectUris: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                    corsOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                    tokenEndpointAuthMethod: z.ZodOptional<z.ZodEnum<{
+                        none: "none";
+                        client_secret_basic: "client_secret_basic";
+                        client_secret_post: "client_secret_post";
+                    }>>;
+                    idTokenTtl: z.ZodOptional<z.ZodNumber>;
+                    refreshTokenTtl: z.ZodOptional<z.ZodNumber>;
+                    updatedAt: z.ZodNullable<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    createClient: {
+        summary: "创建 OAuth 客户端";
+        method: "POST";
+        body: z.ZodObject<{
+            clientName: z.ZodString;
+            clientUri: z.ZodOptional<z.ZodString>;
+            redirectUris: z.ZodArray<z.ZodString>;
+            postLogoutRedirectUris: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            grantTypes: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                authorization_code: "authorization_code";
+                refresh_token: "refresh_token";
+                client_credentials: "client_credentials";
+            }>>>>;
+            scopes: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+            tokenEndpointAuthMethod: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+                none: "none";
+                client_secret_basic: "client_secret_basic";
+                client_secret_post: "client_secret_post";
+            }>>>;
+            isConfidential: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            corsOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>;
+        path: "/admin/clients";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    clientId: z.ZodString;
+                    clientSecret: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    updateClient: {
+        summary: "更新 OAuth 客户端";
+        pathParams: z.ZodObject<{
+            clientId: z.ZodString;
+        }, z.core.$strip>;
+        method: "PATCH";
+        body: z.ZodObject<{
+            clientName: z.ZodOptional<z.ZodString>;
+            clientUri: z.ZodOptional<z.ZodString>;
+            redirectUris: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            postLogoutRedirectUris: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            grantTypes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                authorization_code: "authorization_code";
+                refresh_token: "refresh_token";
+                client_credentials: "client_credentials";
+            }>>>;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            corsOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            idTokenTtl: z.ZodOptional<z.ZodNumber>;
+            refreshTokenTtl: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>;
+        path: "/admin/clients/:clientId";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    clientId: z.ZodString;
+                    clientName: z.ZodString;
+                    clientUri: z.ZodOptional<z.ZodString>;
+                    redirectUris: z.ZodArray<z.ZodString>;
+                    grantTypes: z.ZodArray<z.ZodString>;
+                    scopes: z.ZodArray<z.ZodString>;
+                    isConfidential: z.ZodBoolean;
+                    isActive: z.ZodBoolean;
+                    createdAt: z.ZodOptional<z.ZodDate>;
+                    clientSecret: z.ZodString;
+                    postLogoutRedirectUris: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                    corsOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                    tokenEndpointAuthMethod: z.ZodOptional<z.ZodEnum<{
+                        none: "none";
+                        client_secret_basic: "client_secret_basic";
+                        client_secret_post: "client_secret_post";
+                    }>>;
+                    idTokenTtl: z.ZodOptional<z.ZodNumber>;
+                    refreshTokenTtl: z.ZodOptional<z.ZodNumber>;
+                    updatedAt: z.ZodNullable<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    toggleClient: {
+        summary: "启用/禁用 OAuth 客户端";
+        pathParams: z.ZodObject<{
+            clientId: z.ZodString;
+        }, z.core.$strip>;
+        method: "POST";
+        body: z.ZodObject<{}, z.core.$strict>;
+        path: "/admin/clients/:clientId/toggle";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    isActive: z.ZodBoolean;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    rotateClientSecret: {
+        summary: "轮换 OAuth 客户端密钥";
+        pathParams: z.ZodObject<{
+            clientId: z.ZodString;
+        }, z.core.$strip>;
+        method: "POST";
+        body: z.ZodObject<{}, z.core.$strict>;
+        path: "/admin/clients/:clientId/rotate-secret";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    clientSecret: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    revokeClient: {
+        summary: "吊销 OAuth 客户端";
+        pathParams: z.ZodObject<{
+            clientId: z.ZodString;
+        }, z.core.$strip>;
+        method: "DELETE";
+        path: "/admin/clients/:clientId";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    success: z.ZodBoolean;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+};
+export declare const clientContractVersioned: import("@dofe/infra-contracts-base/base").VersionedContract<{
+    listClients: {
+        summary: "获取 OAuth 客户端列表（分页）";
+        query: z.ZodObject<{
+            limit: z.ZodDefault<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
+            page: z.ZodDefault<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
+            asc: z.ZodOptional<z.ZodEnum<{
+                asc: "asc";
+                desc: "desc";
+            }>>;
+            search: z.ZodOptional<z.ZodString>;
+            isActive: z.ZodOptional<z.ZodCoercedBoolean<unknown>>;
+            sort: z.ZodOptional<z.ZodEnum<{
+                createdAt: "createdAt";
+                clientName: "clientName";
+            }>>;
+        }, z.core.$strip>;
+        method: "GET";
+        path: "/admin/clients";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    list: z.ZodArray<z.ZodObject<{
+                        clientId: z.ZodString;
+                        clientName: z.ZodString;
+                        clientUri: z.ZodNullable<z.ZodString>;
+                        redirectUris: z.ZodArray<z.ZodString>;
+                        grantTypes: z.ZodArray<z.ZodString>;
+                        isConfidential: z.ZodBoolean;
+                        isActive: z.ZodBoolean;
+                        createdAt: z.ZodNullable<z.ZodString>;
+                    }, z.core.$strip>>;
+                    total: z.ZodNumber;
+                    page: z.ZodNumber;
+                    limit: z.ZodNumber;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    getClient: {
+        summary: "获取 OAuth 客户端详情";
+        pathParams: z.ZodObject<{
+            clientId: z.ZodString;
+        }, z.core.$strip>;
+        method: "GET";
+        path: "/admin/clients/:clientId";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    clientId: z.ZodString;
+                    clientName: z.ZodString;
+                    clientUri: z.ZodOptional<z.ZodString>;
+                    redirectUris: z.ZodArray<z.ZodString>;
+                    grantTypes: z.ZodArray<z.ZodString>;
+                    scopes: z.ZodArray<z.ZodString>;
+                    isConfidential: z.ZodBoolean;
+                    isActive: z.ZodBoolean;
+                    createdAt: z.ZodOptional<z.ZodDate>;
+                    clientSecret: z.ZodString;
+                    postLogoutRedirectUris: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                    corsOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                    tokenEndpointAuthMethod: z.ZodOptional<z.ZodEnum<{
+                        none: "none";
+                        client_secret_basic: "client_secret_basic";
+                        client_secret_post: "client_secret_post";
+                    }>>;
+                    idTokenTtl: z.ZodOptional<z.ZodNumber>;
+                    refreshTokenTtl: z.ZodOptional<z.ZodNumber>;
+                    updatedAt: z.ZodNullable<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    createClient: {
+        summary: "创建 OAuth 客户端";
+        method: "POST";
+        body: z.ZodObject<{
+            clientName: z.ZodString;
+            clientUri: z.ZodOptional<z.ZodString>;
+            redirectUris: z.ZodArray<z.ZodString>;
+            postLogoutRedirectUris: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            grantTypes: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                authorization_code: "authorization_code";
+                refresh_token: "refresh_token";
+                client_credentials: "client_credentials";
+            }>>>>;
+            scopes: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+            tokenEndpointAuthMethod: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+                none: "none";
+                client_secret_basic: "client_secret_basic";
+                client_secret_post: "client_secret_post";
+            }>>>;
+            isConfidential: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            corsOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>;
+        path: "/admin/clients";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    clientId: z.ZodString;
+                    clientSecret: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    updateClient: {
+        summary: "更新 OAuth 客户端";
+        pathParams: z.ZodObject<{
+            clientId: z.ZodString;
+        }, z.core.$strip>;
+        method: "PATCH";
+        body: z.ZodObject<{
+            clientName: z.ZodOptional<z.ZodString>;
+            clientUri: z.ZodOptional<z.ZodString>;
+            redirectUris: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            postLogoutRedirectUris: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            grantTypes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                authorization_code: "authorization_code";
+                refresh_token: "refresh_token";
+                client_credentials: "client_credentials";
+            }>>>;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            corsOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            idTokenTtl: z.ZodOptional<z.ZodNumber>;
+            refreshTokenTtl: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>;
+        path: "/admin/clients/:clientId";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    clientId: z.ZodString;
+                    clientName: z.ZodString;
+                    clientUri: z.ZodOptional<z.ZodString>;
+                    redirectUris: z.ZodArray<z.ZodString>;
+                    grantTypes: z.ZodArray<z.ZodString>;
+                    scopes: z.ZodArray<z.ZodString>;
+                    isConfidential: z.ZodBoolean;
+                    isActive: z.ZodBoolean;
+                    createdAt: z.ZodOptional<z.ZodDate>;
+                    clientSecret: z.ZodString;
+                    postLogoutRedirectUris: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                    corsOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                    tokenEndpointAuthMethod: z.ZodOptional<z.ZodEnum<{
+                        none: "none";
+                        client_secret_basic: "client_secret_basic";
+                        client_secret_post: "client_secret_post";
+                    }>>;
+                    idTokenTtl: z.ZodOptional<z.ZodNumber>;
+                    refreshTokenTtl: z.ZodOptional<z.ZodNumber>;
+                    updatedAt: z.ZodNullable<z.ZodString>;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    toggleClient: {
+        summary: "启用/禁用 OAuth 客户端";
+        pathParams: z.ZodObject<{
+            clientId: z.ZodString;
+        }, z.core.$strip>;
+        method: "POST";
+        body: z.ZodObject<{}, z.core.$strict>;
+        path: "/admin/clients/:clientId/toggle";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    isActive: z.ZodBoolean;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    rotateClientSecret: {
+        summary: "轮换 OAuth 客户端密钥";
+        pathParams: z.ZodObject<{
+            clientId: z.ZodString;
+        }, z.core.$strip>;
+        method: "POST";
+        body: z.ZodObject<{}, z.core.$strict>;
+        path: "/admin/clients/:clientId/rotate-secret";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    clientSecret: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    revokeClient: {
+        summary: "吊销 OAuth 客户端";
+        pathParams: z.ZodObject<{
+            clientId: z.ZodString;
+        }, z.core.$strip>;
+        method: "DELETE";
+        path: "/admin/clients/:clientId";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    success: z.ZodBoolean;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+}>;
+export type ClientContract = typeof clientContract;
+//# sourceMappingURL=client.contract.d.ts.map

package/dist/api/client.contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.contract.d.ts","sourceRoot":"","sources":["../../src/api/client.contract.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2F1B,CAAC;AAEF,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGlC,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC"}

package/dist/api/client.contract.js

@@ -0,0 +1,90 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.clientContractVersioned = exports.clientContract = void 0;
+const core_1 = require("@ts-rest/core");
+const zod_1 = require("zod");
+const base_1 = require("../base");
+const client_schema_1 = require("../schemas/client.schema");
+const c = (0, core_1.initContract)();
+exports.clientContract = c.router({
+    listClients: {
+        method: 'GET',
+        path: '/clients',
+        query: client_schema_1.ListClientsQuerySchema,
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(client_schema_1.ListClientsResponseSchema),
+        },
+        summary: '获取 OAuth 客户端列表（分页）',
+    },
+    getClient: {
+        method: 'GET',
+        path: '/clients/:clientId',
+        pathParams: zod_1.z.object({ clientId: zod_1.z.string() }),
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(client_schema_1.ClientDetailSchema),
+        },
+        summary: '获取 OAuth 客户端详情',
+    },
+    createClient: {
+        method: 'POST',
+        path: '/clients',
+        body: client_schema_1.CreateClientBodySchema,
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(zod_1.z.object({
+                clientId: zod_1.z.string(),
+                clientSecret: zod_1.z.string(),
+            })),
+        },
+        summary: '创建 OAuth 客户端',
+    },
+    updateClient: {
+        method: 'PATCH',
+        path: '/clients/:clientId',
+        pathParams: zod_1.z.object({ clientId: zod_1.z.string() }),
+        body: client_schema_1.UpdateClientBodySchema,
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(client_schema_1.ClientDetailSchema),
+        },
+        summary: '更新 OAuth 客户端',
+    },
+    toggleClient: {
+        method: 'POST',
+        path: '/clients/:clientId/toggle',
+        pathParams: zod_1.z.object({ clientId: zod_1.z.string() }),
+        body: zod_1.z.object({}).strict(),
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(zod_1.z.object({
+                isActive: zod_1.z.boolean(),
+            })),
+        },
+        summary: '启用/禁用 OAuth 客户端',
+    },
+    rotateClientSecret: {
+        method: 'POST',
+        path: '/clients/:clientId/rotate-secret',
+        pathParams: zod_1.z.object({ clientId: zod_1.z.string() }),
+        body: zod_1.z.object({}).strict(),
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(zod_1.z.object({
+                clientSecret: zod_1.z.string(),
+            })),
+        },
+        summary: '轮换 OAuth 客户端密钥',
+    },
+    revokeClient: {
+        method: 'DELETE',
+        path: '/clients/:clientId',
+        pathParams: zod_1.z.object({ clientId: zod_1.z.string() }),
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(base_1.SuccessResponseSchema),
+        },
+        summary: '吊销 OAuth 客户端',
+    },
+}, {
+    pathPrefix: '/admin',
+});
+exports.clientContractVersioned = (0, base_1.withVersion)(exports.clientContract, {
+    version: base_1.API_VERSION.V1,
+    pathPrefix: '/admin',
+});
+//# sourceMappingURL=client.contract.js.map