@lobehub/chat 1.61.4 → 1.61.5

package/CHANGELOG.md

@@ -2,6 +2,31 @@
 
 # Changelog
 
+### [Version 1.61.5](https://github.com/lobehub/lobe-chat/compare/v1.61.4...v1.61.5)
+
+<sup>Released on **2025-02-19**</sup>
+
+#### 💄 Styles
+
+- **misc**: Show sso providers for next-auth in profile page.
+
+<br/>
+
+<details>
+<summary><kbd>Improvements and Fixes</kbd></summary>
+
+#### Styles
+
+- **misc**: Show sso providers for next-auth in profile page, closes [#5303](https://github.com/lobehub/lobe-chat/issues/5303) ([dd61bce](https://github.com/lobehub/lobe-chat/commit/dd61bce))
+
+</details>
+
+<div align="right">
+
+[![](https://img.shields.io/badge/-BACK_TO_TOP-151515?style=flat-square)](#readme-top)
+
+</div>
+
 ### [Version 1.61.4](https://github.com/lobehub/lobe-chat/compare/v1.61.3...v1.61.4)
 
 <sup>Released on **2025-02-18**</sup>

package/changelog/v1.json

@@ -1,4 +1,13 @@
 [
+  {
+    "children": {
+      "improvements": [
+        "Show sso providers for next-auth in profile page."
+      ]
+    },
+    "date": "2025-02-19",
+    "version": "1.61.5"
+  },
   {
     "children": {
       "improvements": [

package/locales/ar/auth.json

@@ -34,6 +34,15 @@
   "profile": {
     "avatar": "الصورة الشخصية",
     "email": "عنوان البريد الإلكتروني",
+    "sso": {
+      "loading": "جارٍ تحميل الحسابات المرتبطة من طرف ثالث",
+      "providers": "الحسابات المتصلة",
+      "unlink": {
+        "description": "بعد unlink ، لن تتمكن من تسجيل الدخول باستخدام حساب {{provider}} \"{{providerAccountId}}\". إذا كنت بحاجة إلى إعادة ربط حساب {{provider}} بالحساب الحالي، يرجى التأكد من أن عنوان البريد الإلكتروني لحساب {{provider}} هو {{email}}، وسنقوم بربطه تلقائيًا بالحساب المسجل الدخول عند تسجيل الدخول.",
+        "forbidden": "يجب أن تحتفظ بحساب طرف ثالث واحد على الأقل مرتبطًا.",
+        "title": "هل تريد فصل حساب الطرف الثالث {{provider}}؟"
+      }
+    },
     "username": "اسم المستخدم"
   },
   "signout": "تسجيل الخروج",
@@ -84,4 +93,4 @@
     "security": "الأمان",
     "stats": "الإحصائيات"
   }
-}
+}

package/locales/bg-BG/auth.json

@@ -34,6 +34,15 @@
   "profile": {
     "avatar": "Аватар",
     "email": "Имейл адрес",
+    "sso": {
+      "loading": "Зареждане на свързаните трети страни акаунти",
+      "providers": "Свързани акаунти",
+      "unlink": {
+        "description": "След като свържете, няма да можете да използвате акаунта на {{provider}} „{{providerAccountId}}“ за вход. Ако искате отново да свържете акаунта на {{provider}} с текущия акаунт, уверете се, че имейл адресът на акаунта на {{provider}} е {{email}}, а ние автоматично ще ви свържем с текущия влезлия акаунт при вход.",
+        "forbidden": "Трябва да имате поне един свързан акаунт на трета страна.",
+        "title": "Наистина ли искате да свържете акаунта на трета страна {{provider}}?"
+      }
+    },
     "username": "Потребителско име"
   },
   "signout": "Изход",
@@ -84,4 +93,4 @@
     "security": "Сигурност",
     "stats": "Статистика"
   }
-}
+}

package/locales/de-DE/auth.json

@@ -34,6 +34,15 @@
   "profile": {
     "avatar": "Avatar",
     "email": "E-Mail-Adresse",
+    "sso": {
+      "loading": "Laden der verknüpften Drittanbieter-Konten",
+      "providers": "Verbundene Konten",
+      "unlink": {
+        "description": "Wenn Sie die Verknüpfung aufheben, können Sie sich nicht mehr mit dem {{provider}}-Konto „{{providerAccountId}}“ anmelden. Wenn Sie das {{provider}}-Konto erneut mit dem aktuellen Konto verknüpfen möchten, stellen Sie bitte sicher, dass die E-Mail-Adresse des {{provider}}-Kontos {{email}} ist, und wir werden es Ihnen automatisch bei der Anmeldung mit dem aktuellen Konto zuordnen.",
+        "forbidden": "Sie müssen mindestens ein Drittanbieter-Konto verbunden behalten.",
+        "title": "Möchten Sie das Drittanbieter-Konto {{provider}} wirklich trennen?"
+      }
+    },
     "username": "Benutzername"
   },
   "signout": "Ausloggen",
@@ -84,4 +93,4 @@
     "security": "Sicherheit",
     "stats": "Statistiken"
   }
-}
+}

package/locales/en-US/auth.json

@@ -34,6 +34,15 @@
   "profile": {
     "avatar": "Avatar",
     "email": "Email Address",
+    "sso": {
+      "loading": "Loading linked third-party accounts",
+      "providers": "Connected Accounts",
+      "unlink": {
+        "description": "After unlinking, you will not be able to log in using the {{provider}} account \"{{providerAccountId}}\". If you need to re-link your {{provider}} account to the current account, please ensure that the email address for your {{provider}} account is {{email}}. We will automatically link it to the current logged-in account upon login.",
+        "forbidden": "You must retain at least one linked third-party account.",
+        "title": "Are you sure you want to unlink the third-party account {{provider}}?"
+      }
+    },
     "username": "Username"
   },
   "signout": "Log Out",
@@ -84,4 +93,4 @@
     "security": "Security",
     "stats": "Statistics"
   }
-}
+}

package/locales/es-ES/auth.json

@@ -34,6 +34,15 @@
   "profile": {
     "avatar": "Avatar",
     "email": "Dirección de correo electrónico",
+    "sso": {
+      "loading": "Cargando cuentas de terceros vinculadas",
+      "providers": "Cuentas conectadas",
+      "unlink": {
+        "description": "Al desvincular, no podrá iniciar sesión con la cuenta de {{provider}} \"{{providerAccountId}}\". Si necesita volver a vincular la cuenta de {{provider}} a la cuenta actual, asegúrese de que la dirección de correo electrónico de la cuenta {{provider}} sea {{email}} y la vincularemos automáticamente a la cuenta actual al iniciar sesión.",
+        "forbidden": "Debe conservar al menos una cuenta de terceros vinculada.",
+        "title": "¿Desea desvincular la cuenta de terceros {{provider}}?"
+      }
+    },
     "username": "Nombre de usuario"
   },
   "signout": "Cerrar sesión",
@@ -84,4 +93,4 @@
     "security": "Seguridad",
     "stats": "Estadísticas"
   }
-}
+}

package/locales/fa-IR/auth.json

@@ -34,6 +34,15 @@
   "profile": {
     "avatar": "آواتار",
     "email": "آدرس ایمیل",
+    "sso": {
+      "loading": "در حال بارگذاری حساب‌های شخص ثالث متصل شده",
+      "providers": "حساب‌های متصل",
+      "unlink": {
+        "description": "با لغو اتصال، شما نمی‌توانید با حساب {{provider}} «{{providerAccountId}}» وارد شوید. اگر نیاز دارید حساب {{provider}} را دوباره به حساب جاری متصل کنید، لطفا اطمینان حاصل کنید که آدرس ایمیل حساب {{provider}} {{email}} است، ما در هنگام ورود به طور خودکار آن را به حساب جاری متصل خواهیم کرد.",
+        "forbidden": "شما حداقل باید یک حساب شخص ثالث متصل را حفظ کنید.",
+        "title": "آیا می‌خواهید این حساب شخص ثالث {{provider}} را لغو اتصال کنید؟"
+      }
+    },
     "username": "نام کاربری"
   },
   "signout": "خروج",
@@ -84,4 +93,4 @@
     "security": "امنیت",
     "stats": "آمار"
   }
-}
+}

package/locales/fr-FR/auth.json

@@ -34,6 +34,15 @@
   "profile": {
     "avatar": "Avatar",
     "email": "Adresse e-mail",
+    "sso": {
+      "loading": "Chargement des comptes tiers liés",
+      "providers": "Comptes connectés",
+      "unlink": {
+        "description": "Après la déconnexion, vous ne pourrez plus vous connecter avec le compte {{provider}} « {{providerAccountId}} ». Si vous avez besoin de rattacher le compte {{provider}} à votre compte actuel, assurez-vous que l'adresse e-mail du compte {{provider}} soit {{email}}. Nous procéderons automatiquement au rattachement lors de votre prochaine connexion.",
+        "forbidden": "Vous devez conserver au moins un compte tiers lié.",
+        "title": "Voulez-vous vraiment déconnecter ce compte tiers {{provider}} ?"
+      }
+    },
     "username": "Nom d'utilisateur"
   },
   "signout": "Se déconnecter",
@@ -84,4 +93,4 @@
     "security": "Sécurité",
     "stats": "Statistiques"
   }
-}
+}

package/locales/it-IT/auth.json

@@ -34,6 +34,15 @@
   "profile": {
     "avatar": "Avatar",
     "email": "Indirizzo Email",
+    "sso": {
+      "loading": "Caricamento degli account di terze parti collegati",
+      "providers": "Account collegati",
+      "unlink": {
+        "description": "Dopo la disconnessione, non potrai più accedere con l'account {{provider}} “{{providerAccountId}}”. Se desideri ricollegare l'account {{provider}} a questo account, assicurati che l'indirizzo email dell'account {{provider}} sia {{email}}, e lo collegheremo automaticamente all'account attualmente in uso al momento dell'accesso.",
+        "forbidden": "Devi mantenere almeno un account di terze parti collegato.",
+        "title": "Vuoi disconnettere questo account di terze parti {{provider}}?"
+      }
+    },
     "username": "Nome Utente"
   },
   "signout": "Disconnetti",
@@ -84,4 +93,4 @@
     "security": "Sicurezza",
     "stats": "Statistiche"
   }
-}
+}

package/locales/ja-JP/auth.json

@@ -34,6 +34,15 @@
   "profile": {
     "avatar": "アバター",
     "email": "メールアドレス",
+    "sso": {
+      "loading": "リンクされたサードパーティアカウントを読み込み中",
+      "providers": "接続されたアカウント",
+      "unlink": {
+        "description": "解除すると、{{provider}} アカウント「{{providerAccountId}}」を使用してログインできなくなります。現在のアカウントに{{provider}} アカウントを再度リンクする必要がある場合は、{{provider}} アカウントのメールアドレスが {{email}} であることを確認してください。ログイン時に自動的に現在のログインアカウントにリンクされます。",
+        "forbidden": "少なくとも1つのサードパーティアカウントをリンクしておく必要があります。",
+        "title": "サードパーティアカウント {{provider}} を解除しますか？"
+      }
+    },
     "username": "ユーザー名"
   },
   "signout": "ログアウト",
@@ -84,4 +93,4 @@
     "security": "セキュリティ",
     "stats": "統計"
   }
-}
+}

package/locales/ko-KR/auth.json

@@ -34,6 +34,15 @@
   "profile": {
     "avatar": "아바타",
     "email": "이메일 주소",
+    "sso": {
+      "loading": "연결된 제3자 계정을 로드 중입니다",
+      "providers": "연결된 계정",
+      "unlink": {
+        "description": "연결을 해제하면 {{provider}} 계정“{{providerAccountId}}”으로 로그인할 수 없습니다. 현재 계정에 {{provider}} 계정을 다시 연결해야 하는 경우, {{provider}} 계정의 이메일 주소가 {{email}}인지 확인하십시오. 로그인 시 자동으로 현재 로그인 계정에 연결됩니다.",
+        "forbidden": "최소한 하나의 제3자 계정 연결을 유지해야 합니다.",
+        "title": "이 제3자 계정 {{provider}} 를 연결 해제하시겠습니까?"
+      }
+    },
     "username": "사용자 이름"
   },
   "signout": "로그아웃",
@@ -84,4 +93,4 @@
     "security": "보안",
     "stats": "통계"
   }
-}
+}

package/locales/nl-NL/auth.json

@@ -34,6 +34,15 @@
   "profile": {
     "avatar": "Avatar",
     "email": "E-mailadres",
+    "sso": {
+      "loading": "Bezig met laden van gekoppelde externe accounts",
+      "providers": "Verbindingse accounts",
+      "unlink": {
+        "description": "Als u ontkoppelt, kunt u niet meer inloggen met het {{provider}} account “{{providerAccountId}}”. Als u het {{provider}} account opnieuw aan deze account wilt koppelen, zorg er dan voor dat het e-mailadres van het {{provider}} account {{email}} is, dan zullen we het automatisch koppelen aan de huidige ingelogde account.",
+        "forbidden": "U moet minstens één extern account gekoppeld houden.",
+        "title": "Wilt u dit externe account {{provider}} ontkoppelen?"
+      }
+    },
     "username": "Gebruikersnaam"
   },
   "signout": "Uitloggen",
@@ -84,4 +93,4 @@
     "security": "Beveiliging",
     "stats": "Statistieken"
   }
-}
+}

package/locales/pl-PL/auth.json

@@ -34,6 +34,15 @@
   "profile": {
     "avatar": "Awatar",
     "email": "Adres e-mail",
+    "sso": {
+      "loading": "Ładowanie powiązanych kont zewnętrznych",
+      "providers": "Podłączone konta",
+      "unlink": {
+        "description": "Po odłączeniu nie będziesz mógł korzystać z konta {{provider}} „{{providerAccountId}}” do logowania. Jeśli potrzebujesz ponownie powiązać konto {{provider}} z bieżącym kontem, upewnij się, że adres e-mail konta {{provider}} to {{email}}, a my automatycznie je powiążemy podczas logowania.",
+        "forbidden": "Musisz zachować co najmniej jedno powiązane konto zewnętrzne.",
+        "title": "Czy odłączyć to konto zewnętrzne {{provider}}?"
+      }
+    },
     "username": "Nazwa użytkownika"
   },
   "signout": "Wyloguj się",
@@ -84,4 +93,4 @@
     "security": "Bezpieczeństwo",
     "stats": "Statystyki"
   }
-}
+}

package/locales/pt-BR/auth.json

@@ -34,6 +34,15 @@
   "profile": {
     "avatar": "Avatar",
     "email": "Endereço de E-mail",
+    "sso": {
+      "loading": "Carregando contas de terceiros vinculadas",
+      "providers": "Contas conectadas",
+      "unlink": {
+        "description": "Após desvincular, você não poderá usar a conta {{provider}} “{{providerAccountId}}” para fazer login. Se precisar re-vincular a conta {{provider}} à conta atual, certifique-se de que o endereço de e-mail da conta {{provider}} seja {{email}}; nós a vincularemos automaticamente à conta de login atual.",
+        "forbidden": "Você deve manter pelo menos uma conta de terceiros vinculada.",
+        "title": "Deseja desvincular a conta de terceiros {{provider}}?"
+      }
+    },
     "username": "Nome de Usuário"
   },
   "signout": "Sair",
@@ -84,4 +93,4 @@
     "security": "Segurança",
     "stats": "Estatísticas"
   }
-}
+}

package/locales/ru-RU/auth.json

@@ -34,6 +34,15 @@
   "profile": {
     "avatar": "Аватар",
     "email": "Электронная почта",
+    "sso": {
+      "loading": "Загрузка связанных сторонних аккаунтов",
+      "providers": "Подключенные аккаунты",
+      "unlink": {
+        "description": "После отключения вы не сможете использовать аккаунт {{provider}} \"{{providerAccountId}}\" для входа. Если вам нужно повторно связать аккаунт {{provider}} с текущим аккаунтом, убедитесь, что адрес электронной почты вашего аккаунта {{provider}} - {{email}}. Мы автоматически свяжем его с текущим вошедшим в систему аккаунтом при входе.",
+        "forbidden": "Вы должны оставить хотя бы одну привязку стороннего аккаунта.",
+        "title": "Вы уверены, что хотите отменить связь с сторонним аккаунтом {{provider}}?"
+      }
+    },
     "username": "Имя пользователя"
   },
   "signout": "Выйти",
@@ -84,4 +93,4 @@
     "security": "Безопасность",
     "stats": "Статистика"
   }
-}
+}

package/locales/tr-TR/auth.json

@@ -34,6 +34,15 @@
   "profile": {
     "avatar": "Avatar",
     "email": "E-posta Adresi",
+    "sso": {
+      "loading": "Bağlı üçüncü taraf hesapları yükleniyor",
+      "providers": "Bağlı Hesaplar",
+      "unlink": {
+        "description": "Bu hesap ile {{provider}} hesap “{{providerAccountId}}” ilişkisi kesildiğinde giriş yapamayacaksınız. Eğer {{provider}} hesabınızı mevcut hesaba yeniden bağlamak isterseniz, lütfen {{provider}} hesabının e-posta adresinin {{email}} olduğundan emin olun, giriş yaptığınızda otomatik olarak mevcut hesaba bağlanacaktır.",
+        "forbidden": "En az bir üçüncü taraf hesap bağlamaya devam etmelisiniz.",
+        "title": "{{provider}} adlı üçüncü taraf hesabını kaldırmak istiyor musunuz?"
+      }
+    },
     "username": "Kullanıcı Adı"
   },
   "signout": "Çıkış Yap",
@@ -84,4 +93,4 @@
     "security": "Güvenlik",
     "stats": "İstatistikler"
   }
-}
+}

package/locales/vi-VN/auth.json

@@ -34,6 +34,15 @@
   "profile": {
     "avatar": "Ảnh đại diện",
     "email": "Địa chỉ email",
+    "sso": {
+      "loading": "Đang tải tài khoản bên thứ ba đã liên kết",
+      "providers": "Tài khoản liên kết",
+      "unlink": {
+        "description": "Sau khi hủy liên kết, bạn sẽ không thể sử dụng tài khoản {{provider}} “{{providerAccountId}}” để đăng nhập. Nếu bạn cần liên kết lại tài khoản {{provider}} với tài khoản hiện tại, hãy đảm bảo rằng địa chỉ email của tài khoản {{provider}} là {{email}} , chúng tôi sẽ tự động liên kết nó với tài khoản đăng nhập hiện tại của bạn khi bạn đăng nhập.",
+        "forbidden": "Bạn cần phải giữ lại ít nhất một tài khoản bên thứ ba được liên kết.",
+        "title": "Có chắc chắn muốn hủy liên kết tài khoản bên thứ ba {{provider}}?"
+      }
+    },
     "username": "Tên người dùng"
   },
   "signout": "Đăng xuất",
@@ -84,4 +93,4 @@
     "security": "Bảo mật",
     "stats": "Thống kê"
   }
-}
+}

package/locales/zh-CN/auth.json

@@ -34,6 +34,15 @@
   "profile": {
     "avatar": "头像",
     "email": "电子邮件地址",
+    "sso": {
+      "loading": "正在加载已绑定的第三方账户",
+      "providers": "连接的帐户",
+      "unlink": {
+        "description": "解绑后，您将无法使用 {{provider}} 账户“{{providerAccountId}}”登录。如果您需要重新绑定 {{provider}} 账户到当前账户，请确保 {{provider}} 账户的邮件地址为 {{email}} ，我们会在登陆时为你自动绑定到当前登录账户。",
+        "forbidden": "您至少需要保留一个第三方账户绑定。",
+        "title": "是否解绑该第三方账户 {{provider}} ？"
+      }
+    },
     "username": "用户名"
   },
   "signout": "退出登录",

package/locales/zh-TW/auth.json

@@ -34,6 +34,15 @@
   "profile": {
     "avatar": "頭像",
     "email": "電子郵件地址",
+    "sso": {
+      "loading": "正在載入已綁定的第三方帳戶",
+      "providers": "連結的帳戶",
+      "unlink": {
+        "description": "解除綁定後，您將無法使用 {{provider}} 帳戶「{{providerAccountId}}」登入。如果您需要重新綁定 {{provider}} 帳戶到當前帳戶，請確保 {{provider}} 帳戶的電子郵件地址為 {{email}}，我們會在登入時為您自動綁定到當前登入帳戶。",
+        "forbidden": "您至少需要保留一個第三方帳戶綁定。",
+        "title": "是否解除綁定該第三方帳戶 {{provider}} ？"
+      }
+    },
     "username": "用戶名"
   },
   "signout": "登出",
@@ -84,4 +93,4 @@
     "security": "安全",
     "stats": "數據統計"
   }
-}
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lobehub/chat",
-  "version": "1.61.4",
+  "version": "1.61.5",
   "description": "Lobe Chat - an open-source, high-performance chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. Supports one-click free deployment of your private ChatGPT/LLM web application.",
   "keywords": [
     "framework",

package/src/app/[variants]/(main)/profile/(home)/Client.tsx

@@ -11,6 +11,8 @@ import UserAvatar from '@/features/User/UserAvatar';
 import { useUserStore } from '@/store/user';
 import { authSelectors, userProfileSelectors } from '@/store/user/selectors';
 
+import SSOProvidersList from './features/SSOProvidersList';
+
 type SettingItemGroup = ItemGroup;
 
 const Client = memo<{ mobile?: boolean }>(() => {
@@ -42,6 +44,13 @@ const Client = memo<{ mobile?: boolean }>(() => {
         label: t('profile.email'),
         minWidth: undefined,
       },
+      {
+        children: <SSOProvidersList />,
+        hidden: !isLoginWithNextAuth,
+        label: t('profile.sso.providers'),
+        layout: 'vertical',
+        minWidth: undefined,
+      },
     ],
     title: t('tab.profile'),
   };

package/src/app/[variants]/(main)/profile/(home)/features/SSOProvidersList/AuthIcons.tsx

@@ -0,0 +1,37 @@
+import {
+  Auth0,
+  Authelia,
+  Authentik,
+  Casdoor,
+  Cloudflare,
+  Github,
+  Logto,
+  MicrosoftEntra,
+  NextAuth,
+  Zitadel,
+} from '@lobehub/ui/icons';
+import React from 'react';
+
+const iconProps = {
+  size: 32,
+};
+
+const iconComponents: { [key: string]: React.ElementType } = {
+  'auth0': Auth0,
+  'authelia': Authelia.Color,
+  'authentik': Authentik.Color,
+  'casdoor': Casdoor.Color,
+  'cloudflare': Cloudflare.Color,
+  'default': NextAuth.Color,
+  'github': Github,
+  'logto': Logto.Color,
+  'microsoft-entra-id': MicrosoftEntra.Color,
+  'zitadel': Zitadel.Color,
+};
+
+const AuthIcons = (id: string) => {
+  const IconComponent = iconComponents[id] || iconComponents.default;
+  return <IconComponent {...iconProps} />;
+};
+
+export default AuthIcons;

package/src/app/[variants]/(main)/profile/(home)/features/SSOProvidersList/index.tsx

@@ -0,0 +1,93 @@
+import { ActionIcon, CopyButton, List } from '@lobehub/ui';
+import { RotateCw, Unlink } from 'lucide-react';
+import { CSSProperties, memo, useState } from 'react';
+import { useTranslation } from 'react-i18next';
+import { Flexbox } from 'react-layout-kit';
+
+import { modal, notification } from '@/components/AntdStaticMethods';
+import { useOnlyFetchOnceSWR } from '@/libs/swr';
+import { userService } from '@/services/user';
+import { useUserStore } from '@/store/user';
+import { userProfileSelectors } from '@/store/user/selectors';
+
+import AuthIcons from './AuthIcons';
+
+const { Item } = List;
+
+const providerNameStyle: CSSProperties = {
+  textTransform: 'capitalize',
+};
+
+export const SSOProvidersList = memo(() => {
+  const [userProfile] = useUserStore((s) => [userProfileSelectors.userProfile(s)]);
+  const { t } = useTranslation('auth');
+
+  const [allowUnlink, setAllowUnlink] = useState<boolean>(false);
+  const [hoveredIndex, setHoveredIndex] = useState<number | null>(null);
+
+  const { data, isLoading, mutate } = useOnlyFetchOnceSWR('profile-sso-providers', async () => {
+    const list = await userService.getUserSSOProviders();
+    setAllowUnlink(list?.length > 1);
+    return list;
+  });
+
+  const handleUnlinkSSO = async (provider: string, providerAccountId: string) => {
+    if (data?.length === 1 || !data) {
+      // At least one SSO provider should be linked
+      notification.error({
+        message: t('profile.sso.unlink.forbidden'),
+      });
+      return;
+    }
+    modal.confirm({
+      content: t('profile.sso.unlink.description', {
+        email: userProfile?.email || 'None',
+        provider,
+        providerAccountId,
+      }),
+      okButtonProps: {
+        danger: true,
+      },
+      onOk: async () => {
+        await userService.unlinkSSOProvider(provider, providerAccountId);
+        mutate();
+      },
+      title: <span style={providerNameStyle}>{t('profile.sso.unlink.title', { provider })}</span>,
+    });
+  };
+
+  return isLoading ? (
+    <Flexbox align={'center'} gap={4} horizontal>
+      <ActionIcon icon={RotateCw} spin />
+      {t('profile.sso.loading')}
+    </Flexbox>
+  ) : (
+    <Flexbox>
+      {data?.map((item, index) => (
+        <Item
+          actions={
+            <Flexbox gap={4} horizontal>
+              <CopyButton content={item.providerAccountId} size={'small'} />
+              <ActionIcon
+                disable={!allowUnlink}
+                icon={Unlink}
+                onClick={() => handleUnlinkSSO(item.provider, item.providerAccountId)}
+                size={'small'}
+              />
+            </Flexbox>
+          }
+          avatar={AuthIcons(item.provider)}
+          date={item.expires_at}
+          description={item.providerAccountId}
+          key={index}
+          onMouseEnter={() => setHoveredIndex(index)}
+          onMouseLeave={() => setHoveredIndex(null)}
+          showAction={hoveredIndex === index}
+          title={<span style={providerNameStyle}>{item.provider}</span>}
+        />
+      ))}
+    </Flexbox>
+  );
+});
+
+export default SSOProvidersList;

package/src/database/server/models/user.ts

@@ -1,6 +1,7 @@
 import { TRPCError } from '@trpc/server';
 import dayjs from 'dayjs';
 import { eq } from 'drizzle-orm/expressions';
+import type { AdapterAccount } from 'next-auth/adapters';
 import { DeepPartial } from 'utility-types';
 
 import { LobeChatDatabase } from '@/database/type';
@@ -9,7 +10,14 @@ import { UserKeyVaults, UserSettings } from '@/types/user/settings';
 import { merge } from '@/utils/merge';
 import { today } from '@/utils/time';
 
-import { NewUser, UserItem, UserSettingsItem, userSettings, users } from '../../schemas';
+import {
+  NewUser,
+  UserItem,
+  UserSettingsItem,
+  nextauthAccounts,
+  userSettings,
+  users,
+} from '../../schemas';
 
 type DecryptUserKeyVaults = (
   encryptKeyVaultsStr: string | null,
@@ -96,6 +104,21 @@ export class UserModel {
     };
   };
 
+  getUserSSOProviders = async () => {
+    const result = await this.db
+      .select({
+        expiresAt: nextauthAccounts.expires_at,
+        provider: nextauthAccounts.provider,
+        providerAccountId: nextauthAccounts.providerAccountId,
+        scope: nextauthAccounts.scope,
+        type: nextauthAccounts.type,
+        userId: nextauthAccounts.userId,
+      })
+      .from(nextauthAccounts)
+      .where(eq(nextauthAccounts.userId, this.userId));
+    return result as unknown as AdapterAccount[];
+  };
+
   getUserSettings = async () => {
     return this.db.query.userSettings.findFirst({ where: eq(userSettings.id, this.userId) });
   };

package/src/locales/default/auth.ts

@@ -34,6 +34,16 @@ export default {
   profile: {
     avatar: '头像',
     email: '电子邮件地址',
+    sso: {
+      loading: '正在加载已绑定的第三方账户',
+      providers: '连接的帐户',
+      unlink: {
+        description:
+          '解绑后，您将无法使用 {{provider}} 账户“{{providerAccountId}}”登录。如果您需要重新绑定 {{provider}} 账户到当前账户，请确保 {{provider}} 账户的邮件地址为 {{email}} ，我们会在登陆时为你自动绑定到当前登录账户。',
+        forbidden: '您至少需要保留一个第三方账户绑定。',
+        title: '是否解绑该第三方账户 {{provider}} ？',
+      },
+    },
     username: '用户名',
   },
   signout: '退出登录',

package/src/server/routers/lambda/user.ts

@@ -7,15 +7,24 @@ import { serverDB } from '@/database/server';
 import { MessageModel } from '@/database/server/models/message';
 import { SessionModel } from '@/database/server/models/session';
 import { UserModel, UserNotFoundError } from '@/database/server/models/user';
+import { LobeNextAuthDbAdapter } from '@/libs/next-auth/adapter';
 import { authedProcedure, router } from '@/libs/trpc';
 import { KeyVaultsGateKeeper } from '@/server/modules/KeyVaultsEncrypt';
 import { UserService } from '@/server/services/user';
-import { UserGuideSchema, UserInitializationState, UserPreference } from '@/types/user';
+import {
+  NextAuthAccountSchame,
+  UserGuideSchema,
+  UserInitializationState,
+  UserPreference,
+} from '@/types/user';
 import { UserSettings } from '@/types/user/settings';
 
 const userProcedure = authedProcedure.use(async (opts) => {
   return opts.next({
-    ctx: { userModel: new UserModel(serverDB, opts.ctx.userId) },
+    ctx: {
+      nextAuthDbAdapter: LobeNextAuthDbAdapter(serverDB),
+      userModel: new UserModel(serverDB, opts.ctx.userId),
+    },
   });
 });
 
@@ -24,6 +33,10 @@ export const userRouter = router({
     return ctx.userModel.getUserRegistrationDuration();
   }),
 
+  getUserSSOProviders: userProcedure.query(async ({ ctx }) => {
+    return ctx.userModel.getUserSSOProviders();
+  }),
+
   getUserState: userProcedure.query(async ({ ctx }): Promise<UserInitializationState> => {
     let state: Awaited<ReturnType<UserModel['getUserState']>> | undefined;
 
@@ -92,6 +105,23 @@ export const userRouter = router({
     return ctx.userModel.deleteSetting();
   }),
 
+  unlinkSSOProvider: userProcedure.input(NextAuthAccountSchame).mutation(async ({ ctx, input }) => {
+    const { provider, providerAccountId } = input;
+    if (
+      ctx.nextAuthDbAdapter?.unlinkAccount &&
+      typeof ctx.nextAuthDbAdapter.unlinkAccount === 'function' &&
+      ctx.nextAuthDbAdapter?.getAccount &&
+      typeof ctx.nextAuthDbAdapter.getAccount === 'function'
+    ) {
+      const account = await ctx.nextAuthDbAdapter.getAccount(providerAccountId, provider);
+      // The userId can either get from ctx.nextAuth?.id or ctx.userId
+      if (!account || account.userId !== ctx.userId) throw new Error('The account does not exist');
+      await ctx.nextAuthDbAdapter.unlinkAccount({ provider, providerAccountId });
+    } else {
+      throw new Error('The method in LobeNextAuthDbAdapter `unlinkAccount` is not implemented');
+    }
+  }),
+
   updateGuide: userProcedure.input(UserGuideSchema).mutation(async ({ ctx, input }) => {
     return ctx.userModel.updateGuide(input);
   }),

package/src/services/user/_deprecated.ts

@@ -37,6 +37,15 @@ export class ClientService implements IUserService {
     };
   }
 
+  getUserSSOProviders = async () => {
+    // Account not exist on next-auth in client mode, no need to implement this method
+    return [];
+  };
+
+  unlinkSSOProvider = async () => {
+    // Account not exist on next-auth in client mode, no need to implement this method
+  };
+
   // eslint-disable-next-line @typescript-eslint/no-unused-vars
   updateUserSettings = async (patch: DeepPartial<UserSettings>, _?: any) => {
     return UserModel.updateSettings(patch);

package/src/services/user/client.ts

@@ -54,6 +54,15 @@ export class ClientService extends BaseClientService implements IUserService {
     };
   };
 
+  getUserSSOProviders: IUserService['getUserSSOProviders'] = async () => {
+    // Account not exist on next-auth in client mode, no need to implement this method
+    return [];
+  };
+
+  unlinkSSOProvider: IUserService['unlinkSSOProvider'] = async () => {
+    // Account not exist on next-auth in client mode, no need to implement this method
+  };
+
   updateUserSettings: IUserService['updateUserSettings'] = async (value) => {
     const { keyVaults, ...res } = value;
 

package/src/services/user/server.ts

@@ -10,6 +10,17 @@ export class ServerService implements IUserService {
     return lambdaClient.user.getUserState.query();
   };
 
+  getUserSSOProviders: IUserService['getUserSSOProviders'] = async () => {
+    return lambdaClient.user.getUserSSOProviders.query();
+  };
+
+  unlinkSSOProvider: IUserService['unlinkSSOProvider'] = async (
+    provider: string,
+    providerAccountId: string,
+  ) => {
+    return lambdaClient.user.unlinkSSOProvider.mutate({ provider, providerAccountId });
+  };
+
   makeUserOnboarded = async () => {
     return lambdaClient.user.makeUserOnboarded.mutate();
   };

package/src/services/user/type.ts

@@ -1,3 +1,4 @@
+import type { AdapterAccount } from 'next-auth/adapters';
 import { DeepPartial } from 'utility-types';
 
 import { UserGuide, UserInitializationState, UserPreference } from '@/types/user';
@@ -9,8 +10,10 @@ export interface IUserService {
     duration: number;
     updatedAt: string;
   }>;
+  getUserSSOProviders: () => Promise<AdapterAccount[]>;
   getUserState: () => Promise<UserInitializationState>;
   resetUserSettings: () => Promise<any>;
+  unlinkSSOProvider: (provider: string, providerAccountId: string) => Promise<any>;
   updateGuide: (guide: Partial<UserGuide>) => Promise<any>;
   updatePreference: (preference: Partial<UserPreference>) => Promise<any>;
   updateUserSettings: (value: DeepPartial<UserSettings>, signal?: AbortSignal) => Promise<any>;

package/src/types/user/index.ts

@@ -54,3 +54,8 @@ export interface UserInitializationState {
   settings: DeepPartial<UserSettings>;
   userId?: string;
 }
+
+export const NextAuthAccountSchame = z.object({
+  provider: z.string(),
+  providerAccountId: z.string(),
+});