sumor 3.3.2 → 3.3.3

package/dist/server/controllers/mock/avatarController.d.ts

@@ -0,0 +1,8 @@
+import { NextFunction, Request, Response } from 'express';
+/**
+ * GET /api/oauth/mock/avatar/:id
+ * mock 模式：无头像服务，直接返回 404
+ * 非 mock 模式：透传
+ */
+export declare function avatarController(_req: Request, res: Response, next: NextFunction): void;
+//# sourceMappingURL=avatarController.d.ts.map

package/dist/server/controllers/mock/avatarController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"avatarController.d.ts","sourceRoot":"","sources":["../../../../server/controllers/mock/avatarController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAGzD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,QAIhF"}

package/dist/server/controllers/mock/avatarController.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.avatarController = avatarController;
+const mockConfig_1 = require("../../mock/mockConfig");
+/**
+ * GET /api/oauth/mock/avatar/:id
+ * mock 模式：无头像服务，直接返回 404
+ * 非 mock 模式：透传
+ */
+function avatarController(_req, res, next) {
+    if (!(0, mockConfig_1.isMockMode)())
+        return next();
+    res.status(404).end();
+}
+//# sourceMappingURL=avatarController.js.map

package/dist/server/controllers/mock/avatarController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"avatarController.js","sourceRoot":"","sources":["../../../../server/controllers/mock/avatarController.ts"],"names":[],"mappings":";;AAQA,4CAIC;AAXD,sDAAkD;AAElD;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,IAAa,EAAE,GAAa,EAAE,IAAkB;IAC/E,IAAI,CAAC,IAAA,uBAAU,GAAE;QAAE,OAAO,IAAI,EAAE,CAAA;IAEhC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;AACvB,CAAC"}

package/dist/server/controllers/mock/loginController.d.ts

@@ -0,0 +1,8 @@
+import { NextFunction, Request, Response } from 'express';
+/**
+ * POST /api/oauth/mock/login
+ * mock 模式：直接签发 mock token，写入 HttpOnly Cookie，并返回用户信息
+ * 非 mock 模式：透传
+ */
+export declare function loginController(_req: Request, res: Response, next: NextFunction): void | Response<any, Record<string, any>>;
+//# sourceMappingURL=loginController.d.ts.map

package/dist/server/controllers/mock/loginController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loginController.d.ts","sourceRoot":"","sources":["../../../../server/controllers/mock/loginController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAUzD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,6CAwB/E"}

package/dist/server/controllers/mock/loginController.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loginController = loginController;
+const mockConfig_1 = require("../../mock/mockConfig");
+const mockTokenUtils_1 = require("../../mock/mockTokenUtils");
+const oauthTokenUtils_1 = require("../../utils/oauthTokenUtils");
+/**
+ * POST /api/oauth/mock/login
+ * mock 模式：直接签发 mock token，写入 HttpOnly Cookie，并返回用户信息
+ * 非 mock 模式：透传
+ */
+function loginController(_req, res, next) {
+    if (!(0, mockConfig_1.isMockMode)())
+        return next();
+    const { user } = (0, mockConfig_1.getMockConfig)();
+    const accessToken = (0, mockTokenUtils_1.generateMockAccessToken)(user);
+    const refreshToken = (0, mockTokenUtils_1.generateMockRefreshToken)(user);
+    (0, oauthTokenUtils_1.setOAuthTokenCookie)(res, accessToken, mockTokenUtils_1.MOCK_ACCESS_TOKEN_EXPIRES_IN, 'access');
+    (0, oauthTokenUtils_1.setOAuthTokenCookie)(res, refreshToken, mockTokenUtils_1.MOCK_REFRESH_TOKEN_EXPIRES_IN, 'refresh');
+    return res.json({
+        code: 'OK',
+        message: '登录成功',
+        data: {
+            isMock: true,
+            user: {
+                id: user.userId,
+                isVerified: user.isVerified,
+                roles: user.roles,
+                permissions: user.permissions
+            }
+        }
+    });
+}
+//# sourceMappingURL=loginController.js.map

package/dist/server/controllers/mock/loginController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loginController.js","sourceRoot":"","sources":["../../../../server/controllers/mock/loginController.ts"],"names":[],"mappings":";;AAeA,0CAwBC;AAtCD,sDAAiE;AACjE,8DAKkC;AAClC,iEAAiE;AAEjE;;;;GAIG;AACH,SAAgB,eAAe,CAAC,IAAa,EAAE,GAAa,EAAE,IAAkB;IAC9E,IAAI,CAAC,IAAA,uBAAU,GAAE;QAAE,OAAO,IAAI,EAAE,CAAA;IAEhC,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,0BAAa,GAAE,CAAA;IAEhC,MAAM,WAAW,GAAG,IAAA,wCAAuB,EAAC,IAAI,CAAC,CAAA;IACjD,MAAM,YAAY,GAAG,IAAA,yCAAwB,EAAC,IAAI,CAAC,CAAA;IAEnD,IAAA,qCAAmB,EAAC,GAAG,EAAE,WAAW,EAAE,6CAA4B,EAAE,QAAQ,CAAC,CAAA;IAC7E,IAAA,qCAAmB,EAAC,GAAG,EAAE,YAAY,EAAE,8CAA6B,EAAE,SAAS,CAAC,CAAA;IAEhF,OAAO,GAAG,CAAC,IAAI,CAAC;QACd,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,MAAM;QACf,IAAI,EAAE;YACJ,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE;gBACJ,EAAE,EAAE,IAAI,CAAC,MAAM;gBACf,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B;SACF;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/server/controllers/mock/logoutController.d.ts

@@ -0,0 +1,8 @@
+import { NextFunction, Request, Response } from 'express';
+/**
+ * POST /api/oauth/mock/logout
+ * mock 模式：清除 mock token cookie
+ * 非 mock 模式：透传
+ */
+export declare function logoutController(_req: Request, res: Response, next: NextFunction): void | Response<any, Record<string, any>>;
+//# sourceMappingURL=logoutController.d.ts.map

package/dist/server/controllers/mock/logoutController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logoutController.d.ts","sourceRoot":"","sources":["../../../../server/controllers/mock/logoutController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAGzD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,6CAOhF"}

package/dist/server/controllers/mock/logoutController.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.logoutController = logoutController;
+const mockConfig_1 = require("../../mock/mockConfig");
+/**
+ * POST /api/oauth/mock/logout
+ * mock 模式：清除 mock token cookie
+ * 非 mock 模式：透传
+ */
+function logoutController(_req, res, next) {
+    if (!(0, mockConfig_1.isMockMode)())
+        return next();
+    res.clearCookie('access_token');
+    res.clearCookie('refresh_token');
+    return res.json({ code: 'OK', message: '登出成功' });
+}
+//# sourceMappingURL=logoutController.js.map

package/dist/server/controllers/mock/logoutController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logoutController.js","sourceRoot":"","sources":["../../../../server/controllers/mock/logoutController.ts"],"names":[],"mappings":";;AAQA,4CAOC;AAdD,sDAAkD;AAElD;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,IAAa,EAAE,GAAa,EAAE,IAAkB;IAC/E,IAAI,CAAC,IAAA,uBAAU,GAAE;QAAE,OAAO,IAAI,EAAE,CAAA;IAEhC,GAAG,CAAC,WAAW,CAAC,cAAc,CAAC,CAAA;IAC/B,GAAG,CAAC,WAAW,CAAC,eAAe,CAAC,CAAA;IAEhC,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;AAClD,CAAC"}

package/dist/server/controllers/mock/navController.d.ts

@@ -0,0 +1,8 @@
+import { NextFunction, Request, Response } from 'express';
+/**
+ * GET /api/oauth/mock/nav/:target
+ * mock 模式：导航占位页，展示目标页面名称并提供回退按钮
+ * 非 mock 模式：透传
+ */
+export declare function navController(req: Request, res: Response, next: NextFunction): void;
+//# sourceMappingURL=navController.d.ts.map

package/dist/server/controllers/mock/navController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"navController.d.ts","sourceRoot":"","sources":["../../../../server/controllers/mock/navController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAUzD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,QA6E5E"}

package/dist/server/controllers/mock/navController.js

@@ -0,0 +1,93 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.navController = navController;
+const mockConfig_1 = require("../../mock/mockConfig");
+const NAV_LABELS = {
+    home: '首页',
+    site: '站点管理',
+    user: '用户中心',
+    feedback: '意见反馈'
+};
+/**
+ * GET /api/oauth/mock/nav/:target
+ * mock 模式：导航占位页，展示目标页面名称并提供回退按钮
+ * 非 mock 模式：透传
+ */
+function navController(req, res, next) {
+    if (!(0, mockConfig_1.isMockMode)())
+        return next();
+    const target = req.params['target'];
+    const label = NAV_LABELS[target] || target;
+    res.setHeader('Content-Type', 'text/html; charset=utf-8');
+    res.send(`<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>[Mock] ${label}</title>
+  <style>
+    *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
+    body {
+      min-height: 100vh;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
+      background: #f5f5f5;
+      color: #333;
+    }
+    .card {
+      background: #fff;
+      border-radius: 12px;
+      box-shadow: 0 4px 24px rgba(0,0,0,.08);
+      padding: 48px 56px;
+      text-align: center;
+      max-width: 420px;
+      width: 90%;
+    }
+    .badge {
+      display: inline-block;
+      background: #fff3cd;
+      color: #856404;
+      font-size: 12px;
+      font-weight: 600;
+      letter-spacing: .5px;
+      padding: 3px 10px;
+      border-radius: 99px;
+      margin-bottom: 20px;
+    }
+    h1 {
+      font-size: 24px;
+      font-weight: 700;
+      margin-bottom: 8px;
+    }
+    p {
+      font-size: 14px;
+      color: #888;
+      margin-bottom: 32px;
+      line-height: 1.6;
+    }
+    button {
+      background: #333;
+      color: #fff;
+      border: none;
+      border-radius: 8px;
+      padding: 10px 28px;
+      font-size: 14px;
+      cursor: pointer;
+      transition: background .15s;
+    }
+    button:hover { background: #555; }
+  </style>
+</head>
+<body>
+  <div class="card">
+    <span class="badge">MOCK</span>
+    <h1>${label}</h1>
+    <p>当前处于 Mock 模式，此页面为占位页。<br/>真实环境中将跳转到 OAuth 服务的「${label}」页面。</p>
+    <button onclick="history.back()">返回上一页</button>
+  </div>
+</body>
+</html>`);
+}
+//# sourceMappingURL=navController.js.map

package/dist/server/controllers/mock/navController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"navController.js","sourceRoot":"","sources":["../../../../server/controllers/mock/navController.ts"],"names":[],"mappings":";;AAeA,sCA6EC;AA3FD,sDAAkD;AAElD,MAAM,UAAU,GAA2B;IACzC,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,MAAM;CACjB,CAAA;AAED;;;;GAIG;AACH,SAAgB,aAAa,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAC3E,IAAI,CAAC,IAAA,uBAAU,GAAE;QAAE,OAAO,IAAI,EAAE,CAAA;IAEhC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAW,CAAA;IAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,MAAM,CAAA;IAE1C,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAA;IACzD,GAAG,CAAC,IAAI,CAAC;;;;;kBAKO,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UA2Db,KAAK;uDACwC,KAAK;;;;QAIpD,CAAC,CAAA;AACT,CAAC"}

package/dist/server/controllers/mock/tokenController.d.ts

@@ -0,0 +1,8 @@
+import { NextFunction, Request, Response } from 'express';
+/**
+ * PUT /token
+ * mock 模式：验证 mock token 并返回用户信息，响应中包含 isMock: true
+ * 非 mock 模式：透传到真实的 tokenRefreshController
+ */
+export declare function tokenController(req: Request, res: Response, next: NextFunction): void | Response<any, Record<string, any>>;
+//# sourceMappingURL=tokenController.d.ts.map

package/dist/server/controllers/mock/tokenController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenController.d.ts","sourceRoot":"","sources":["../../../../server/controllers/mock/tokenController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAsBzD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,6CAoE9E"}

package/dist/server/controllers/mock/tokenController.js

@@ -0,0 +1,89 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tokenController = tokenController;
+const mockConfig_1 = require("../../mock/mockConfig");
+const mockTokenUtils_1 = require("../../mock/mockTokenUtils");
+const oauthTokenUtils_1 = require("../../utils/oauthTokenUtils");
+function parseCookies(cookieString) {
+    const cookies = {};
+    if (!cookieString)
+        return cookies;
+    cookieString.split(';').forEach(cookie => {
+        const [name, value] = cookie.split('=');
+        if (name && value) {
+            cookies[name.trim()] = value.trim();
+        }
+    });
+    return cookies;
+}
+/**
+ * PUT /token
+ * mock 模式：验证 mock token 并返回用户信息，响应中包含 isMock: true
+ * 非 mock 模式：透传到真实的 tokenRefreshController
+ */
+function tokenController(req, res, next) {
+    if (!(0, mockConfig_1.isMockMode)())
+        return next();
+    const { user } = (0, mockConfig_1.getMockConfig)();
+    const cookies = parseCookies(req.headers.cookie);
+    const accessTokenRaw = cookies.access_token || '';
+    const refreshTokenRaw = cookies.refresh_token || '';
+    // 先验证 access_token
+    if (accessTokenRaw && (0, mockTokenUtils_1.isMockToken)(accessTokenRaw)) {
+        try {
+            const claims = (0, mockTokenUtils_1.verifyMockToken)(accessTokenRaw);
+            if (claims.sub) {
+                return res.json({
+                    code: 'OK',
+                    message: 'Token 仍然有效',
+                    data: {
+                        isMock: true,
+                        user: {
+                            id: claims.sub,
+                            isVerified: claims.isVerified ?? user.isVerified,
+                            roles: claims.roles ?? user.roles,
+                            permissions: claims.permissions ?? user.permissions
+                        }
+                    }
+                });
+            }
+        }
+        catch {
+            // access_token 过期，继续尝试 refresh_token
+        }
+    }
+    // 使用 refresh_token 重签 access_token
+    if (refreshTokenRaw && (0, mockTokenUtils_1.isMockToken)(refreshTokenRaw)) {
+        try {
+            (0, mockTokenUtils_1.verifyMockToken)(refreshTokenRaw);
+            const newAccessToken = (0, mockTokenUtils_1.generateMockAccessToken)(user);
+            (0, oauthTokenUtils_1.setOAuthTokenCookie)(res, newAccessToken, mockTokenUtils_1.MOCK_ACCESS_TOKEN_EXPIRES_IN, 'access');
+            return res.json({
+                code: 'OK',
+                message: 'Token 刷新成功',
+                data: {
+                    isMock: true,
+                    user: {
+                        id: user.userId,
+                        isVerified: user.isVerified,
+                        roles: user.roles,
+                        permissions: user.permissions
+                    }
+                }
+            });
+        }
+        catch {
+            // refresh_token 也过期了
+        }
+    }
+    // 未登录
+    return res.json({
+        code: 'OK',
+        message: '未登录',
+        data: {
+            isMock: true,
+            user: null
+        }
+    });
+}
+//# sourceMappingURL=tokenController.js.map

package/dist/server/controllers/mock/tokenController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenController.js","sourceRoot":"","sources":["../../../../server/controllers/mock/tokenController.ts"],"names":[],"mappings":";;AA2BA,0CAoEC;AA9FD,sDAAiE;AACjE,8DAKkC;AAClC,iEAAiE;AAEjE,SAAS,YAAY,CAAC,YAAqB;IACzC,MAAM,OAAO,GAA2B,EAAE,CAAA;IAC1C,IAAI,CAAC,YAAY;QAAE,OAAO,OAAO,CAAA;IACjC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;QACvC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACvC,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;QACrC,CAAC;IACH,CAAC,CAAC,CAAA;IACF,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAgB,eAAe,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAC7E,IAAI,CAAC,IAAA,uBAAU,GAAE;QAAE,OAAO,IAAI,EAAE,CAAA;IAEhC,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,0BAAa,GAAE,CAAA;IAEhC,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAChD,MAAM,cAAc,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAA;IACjD,MAAM,eAAe,GAAG,OAAO,CAAC,aAAa,IAAI,EAAE,CAAA;IAEnD,mBAAmB;IACnB,IAAI,cAAc,IAAI,IAAA,4BAAW,EAAC,cAAc,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,gCAAe,EAAC,cAAc,CAAC,CAAA;YAC9C,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;gBACf,OAAO,GAAG,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,IAAI;oBACV,OAAO,EAAE,YAAY;oBACrB,IAAI,EAAE;wBACJ,MAAM,EAAE,IAAI;wBACZ,IAAI,EAAE;4BACJ,EAAE,EAAE,MAAM,CAAC,GAAG;4BACd,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU;4BAChD,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK;4BACjC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW;yBACpD;qBACF;iBACF,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;IACH,CAAC;IAED,mCAAmC;IACnC,IAAI,eAAe,IAAI,IAAA,4BAAW,EAAC,eAAe,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC;YACH,IAAA,gCAAe,EAAC,eAAe,CAAC,CAAA;YAEhC,MAAM,cAAc,GAAG,IAAA,wCAAuB,EAAC,IAAI,CAAC,CAAA;YACpD,IAAA,qCAAmB,EAAC,GAAG,EAAE,cAAc,EAAE,6CAA4B,EAAE,QAAQ,CAAC,CAAA;YAEhF,OAAO,GAAG,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,YAAY;gBACrB,IAAI,EAAE;oBACJ,MAAM,EAAE,IAAI;oBACZ,IAAI,EAAE;wBACJ,EAAE,EAAE,IAAI,CAAC,MAAM;wBACf,UAAU,EAAE,IAAI,CAAC,UAAU;wBAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,WAAW,EAAE,IAAI,CAAC,WAAW;qBAC9B;iBACF;aACF,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;IACH,CAAC;IAED,MAAM;IACN,OAAO,GAAG,CAAC,IAAI,CAAC;QACd,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,KAAK;QACd,IAAI,EAAE;YACJ,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,IAAI;SACX;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/server/mock/mockConfig.d.ts

@@ -21,14 +21,12 @@ export interface MockConfig {
 }
 /**
  * 判断是否启用了 Mock 模式
+ * 每次调用都从 process.env 读取，确保 dotenv 初始化后能正确感知
  */
 export declare function isMockMode(): boolean;
 /**
  * 获取 Mock 配置
+ * 每次调用都从 process.env 读取，避免 dotenv 未加载时缓存错误值
  */
 export declare function getMockConfig(): MockConfig;
-/**
- * 重置缓存（测试用）
- */
-export declare function resetMockConfigCache(): void;
 //# sourceMappingURL=mockConfig.d.ts.map

package/dist/server/mock/mockConfig.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mockConfig.d.ts","sourceRoot":"","sources":["../../../server/mock/mockConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,cAAc,CAAA;CACrB;AAID;;GAEG;AACH,wBAAgB,UAAU,IAAI,OAAO,CAEpC;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,UAAU,CAa1C;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C"}
+{"version":3,"file":"mockConfig.d.ts","sourceRoot":"","sources":["../../../server/mock/mockConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,cAAc,CAAA;CACrB;AAED;;;GAGG;AACH,wBAAgB,UAAU,IAAI,OAAO,CAEpC;AAED;;;GAGG;AACH,wBAAgB,aAAa,IAAI,UAAU,CAU1C"}

package/dist/server/mock/mockConfig.js

@@ -13,35 +13,26 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.isMockMode = isMockMode;
 exports.getMockConfig = getMockConfig;
-exports.resetMockConfigCache = resetMockConfigCache;
-let cachedMockConfig = null;
 /**
  * 判断是否启用了 Mock 模式
+ * 每次调用都从 process.env 读取，确保 dotenv 初始化后能正确感知
  */
 function isMockMode() {
     return process.env.OAUTH_MOCK === 'true';
 }
 /**
  * 获取 Mock 配置
+ * 每次调用都从 process.env 读取，避免 dotenv 未加载时缓存错误值
  */
 function getMockConfig() {
-    if (!cachedMockConfig) {
-        cachedMockConfig = {
-            enabled: isMockMode(),
-            user: {
-                userId: process.env.OAUTH_MOCK_USER_ID || 'mock-user-001',
-                roles: process.env.OAUTH_MOCK_USER_ROLES || 'admin',
-                permissions: process.env.OAUTH_MOCK_USER_PERMISSIONS || '',
-                isVerified: parseInt(process.env.OAUTH_MOCK_USER_IS_VERIFIED || '1', 10)
-            }
-        };
-    }
-    return cachedMockConfig;
-}
-/**
- * 重置缓存（测试用）
- */
-function resetMockConfigCache() {
-    cachedMockConfig = null;
+    return {
+        enabled: isMockMode(),
+        user: {
+            userId: process.env.OAUTH_MOCK_USER_ID || 'mock-user-001',
+            roles: process.env.OAUTH_MOCK_USER_ROLES || 'admin',
+            permissions: process.env.OAUTH_MOCK_USER_PERMISSIONS || '',
+            isVerified: parseInt(process.env.OAUTH_MOCK_USER_IS_VERIFIED || '1', 10)
+        }
+    };
 }
 //# sourceMappingURL=mockConfig.js.map

package/dist/server/mock/mockConfig.js.map

@@ -1 +1 @@
-{"version":3,"file":"mockConfig.js","sourceRoot":"","sources":["../../../server/mock/mockConfig.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;AAmBH,gCAEC;AAKD,sCAaC;AAKD,oDAEC;AAhCD,IAAI,gBAAgB,GAAsB,IAAI,CAAA;AAE9C;;GAEG;AACH,SAAgB,UAAU;IACxB,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,MAAM,CAAA;AAC1C,CAAC;AAED;;GAEG;AACH,SAAgB,aAAa;IAC3B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,gBAAgB,GAAG;YACjB,OAAO,EAAE,UAAU,EAAE;YACrB,IAAI,EAAE;gBACJ,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,eAAe;gBACzD,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,OAAO;gBACnD,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,EAAE;gBAC1D,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,GAAG,EAAE,EAAE,CAAC;aACzE;SACF,CAAA;IACH,CAAC;IACD,OAAO,gBAAgB,CAAA;AACzB,CAAC;AAED;;GAEG;AACH,SAAgB,oBAAoB;IAClC,gBAAgB,GAAG,IAAI,CAAA;AACzB,CAAC"}
+{"version":3,"file":"mockConfig.js","sourceRoot":"","sources":["../../../server/mock/mockConfig.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;AAkBH,gCAEC;AAMD,sCAUC;AAtBD;;;GAGG;AACH,SAAgB,UAAU;IACxB,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,MAAM,CAAA;AAC1C,CAAC;AAED;;;GAGG;AACH,SAAgB,aAAa;IAC3B,OAAO;QACL,OAAO,EAAE,UAAU,EAAE;QACrB,IAAI,EAAE;YACJ,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,eAAe;YACzD,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,OAAO;YACnD,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,EAAE;YAC1D,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,GAAG,EAAE,EAAE,CAAC;SACzE;KACF,CAAA;AACH,CAAC"}

package/dist/server/mock/mockRoutes.d.ts

@@ -1,8 +1,18 @@
 /**
- * Mock OAuth 路由（替换 /api/oauth/* 下的真实路由）
+ * Mock OAuth 路由
  *
- * 在 OAUTH_MOCK=true 模式下挂载，替代真实 OAuth 流程。
- * PUT /token 会在响应中携带 isMock: true，web SDK 据此走纯前端 mock 路径。
+ * 始终注册，非 mock 模式下所有处理器调用 next() 透传到真实路由。
+ * PUT /token 在 mock 模式下响应中携带 isMock: true，web SDK 据此走纯前端 mock 路径。
+ *
+ * Mock API 路由（挂载到 /mock）
+ *
+ * mock 模式下提供给 web SDK 直接调用的接口，无需页面跳转。
+ *
+ * 路由列表：
+ *   POST /mock/login          - 签发 mock token，返回用户信息
+ *   POST /mock/logout         - 清除 mock token cookie
+ *   GET  /mock/avatar/:id     - 返回 404（mock 模式无头像服务）
+ *   GET  /mock/nav/:target    - 导航占位页（home/site/user/feedback）
  */
 declare const mockRoutes: import("express-serve-static-core").Router;
 export default mockRoutes;

package/dist/server/mock/mockRoutes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mockRoutes.d.ts","sourceRoot":"","sources":["../../../server/mock/mockRoutes.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAYH,QAAA,MAAM,UAAU,4CAAmB,CAAA;AAsFnC,eAAe,UAAU,CAAA"}
+{"version":3,"file":"mockRoutes.d.ts","sourceRoot":"","sources":["../../../server/mock/mockRoutes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AASH,QAAA,MAAM,UAAU,4CAAmB,CAAA;AASnC,eAAe,UAAU,CAAA"}

package/dist/server/mock/mockRoutes.js

@@ -1,97 +1,35 @@
 "use strict";
 /**
- * Mock OAuth 路由（替换 /api/oauth/* 下的真实路由）
+ * Mock OAuth 路由
  *
- * 在 OAUTH_MOCK=true 模式下挂载，替代真实 OAuth 流程。
- * PUT /token 会在响应中携带 isMock: true，web SDK 据此走纯前端 mock 路径。
+ * 始终注册，非 mock 模式下所有处理器调用 next() 透传到真实路由。
+ * PUT /token 在 mock 模式下响应中携带 isMock: true，web SDK 据此走纯前端 mock 路径。
+ *
+ * Mock API 路由（挂载到 /mock）
+ *
+ * mock 模式下提供给 web SDK 直接调用的接口，无需页面跳转。
+ *
+ * 路由列表：
+ *   POST /mock/login          - 签发 mock token，返回用户信息
+ *   POST /mock/logout         - 清除 mock token cookie
+ *   GET  /mock/avatar/:id     - 返回 404（mock 模式无头像服务）
+ *   GET  /mock/nav/:target    - 导航占位页（home/site/user/feedback）
  */
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 const express_1 = __importDefault(require("express"));
-const mockConfig_1 = require("./mockConfig");
-const mockTokenUtils_1 = require("./mockTokenUtils");
-const oauthTokenUtils_1 = require("../utils/oauthTokenUtils");
+const tokenController_1 = require("../controllers/mock/tokenController");
+const loginController_1 = require("../controllers/mock/loginController");
+const logoutController_1 = require("../controllers/mock/logoutController");
+const avatarController_1 = require("../controllers/mock/avatarController");
+const navController_1 = require("../controllers/mock/navController");
 const mockRoutes = express_1.default.Router();
-/**
- * PUT /token
- * 验证 mock token 并返回用户信息，响应中包含 isMock: true
- */
-mockRoutes.put('/token', (req, res) => {
-    const { user } = (0, mockConfig_1.getMockConfig)();
-    const cookies = parseCookies(req.headers.cookie);
-    const accessTokenRaw = cookies.access_token || '';
-    const refreshTokenRaw = cookies.refresh_token || '';
-    // 先验证 access_token
-    if (accessTokenRaw && (0, mockTokenUtils_1.isMockToken)(accessTokenRaw)) {
-        try {
-            const claims = (0, mockTokenUtils_1.verifyMockToken)(accessTokenRaw);
-            if (claims.sub) {
-                return res.json({
-                    code: 'OK',
-                    message: 'Token 仍然有效',
-                    data: {
-                        isMock: true,
-                        user: {
-                            id: claims.sub,
-                            isVerified: claims.isVerified ?? user.isVerified,
-                            roles: claims.roles ?? user.roles,
-                            permissions: claims.permissions ?? user.permissions
-                        }
-                    }
-                });
-            }
-        }
-        catch {
-            // access_token 过期，继续尝试 refresh_token
-        }
-    }
-    // 使用 refresh_token 重签 access_token
-    if (refreshTokenRaw && (0, mockTokenUtils_1.isMockToken)(refreshTokenRaw)) {
-        try {
-            (0, mockTokenUtils_1.verifyMockToken)(refreshTokenRaw);
-            const newAccessToken = (0, mockTokenUtils_1.generateMockAccessToken)(user);
-            (0, oauthTokenUtils_1.setOAuthTokenCookie)(res, newAccessToken, mockTokenUtils_1.MOCK_ACCESS_TOKEN_EXPIRES_IN, 'access');
-            return res.json({
-                code: 'OK',
-                message: 'Token 刷新成功',
-                data: {
-                    isMock: true,
-                    user: {
-                        id: user.userId,
-                        isVerified: user.isVerified,
-                        roles: user.roles,
-                        permissions: user.permissions
-                    }
-                }
-            });
-        }
-        catch {
-            // refresh_token 也过期了
-        }
-    }
-    // 未登录
-    return res.json({
-        code: 'OK',
-        message: '未登录',
-        data: {
-            isMock: true,
-            user: null
-        }
-    });
-});
-function parseCookies(cookieString) {
-    const cookies = {};
-    if (!cookieString)
-        return cookies;
-    cookieString.split(';').forEach(cookie => {
-        const [name, value] = cookie.split('=');
-        if (name && value) {
-            cookies[name.trim()] = value.trim();
-        }
-    });
-    return cookies;
-}
+mockRoutes.put('/token', tokenController_1.tokenController);
+mockRoutes.post('/mock/login', loginController_1.loginController);
+mockRoutes.post('/mock/logout', logoutController_1.logoutController);
+mockRoutes.get('/mock/avatar/:id', avatarController_1.avatarController);
+mockRoutes.get('/mock/nav/:target', navController_1.navController);
 exports.default = mockRoutes;
 //# sourceMappingURL=mockRoutes.js.map

package/dist/server/mock/mockRoutes.js.map

@@ -1 +1 @@
-{"version":3,"file":"mockRoutes.js","sourceRoot":"","sources":["../../../server/mock/mockRoutes.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;AAEH,sDAAoD;AACpD,6CAA4C;AAC5C,qDAKyB;AACzB,8DAA8D;AAE9D,MAAM,UAAU,GAAG,iBAAO,CAAC,MAAM,EAAE,CAAA;AAEnC;;;GAGG;AACH,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;IACvD,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,0BAAa,GAAE,CAAA;IAEhC,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAChD,MAAM,cAAc,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAA;IACjD,MAAM,eAAe,GAAG,OAAO,CAAC,aAAa,IAAI,EAAE,CAAA;IAEnD,mBAAmB;IACnB,IAAI,cAAc,IAAI,IAAA,4BAAW,EAAC,cAAc,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,gCAAe,EAAC,cAAc,CAAC,CAAA;YAC9C,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;gBACf,OAAO,GAAG,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,IAAI;oBACV,OAAO,EAAE,YAAY;oBACrB,IAAI,EAAE;wBACJ,MAAM,EAAE,IAAI;wBACZ,IAAI,EAAE;4BACJ,EAAE,EAAE,MAAM,CAAC,GAAG;4BACd,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU;4BAChD,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK;4BACjC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW;yBACpD;qBACF;iBACF,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;IACH,CAAC;IAED,mCAAmC;IACnC,IAAI,eAAe,IAAI,IAAA,4BAAW,EAAC,eAAe,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC;YACH,IAAA,gCAAe,EAAC,eAAe,CAAC,CAAA;YAEhC,MAAM,cAAc,GAAG,IAAA,wCAAuB,EAAC,IAAI,CAAC,CAAA;YACpD,IAAA,qCAAmB,EAAC,GAAG,EAAE,cAAc,EAAE,6CAA4B,EAAE,QAAQ,CAAC,CAAA;YAEhF,OAAO,GAAG,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,YAAY;gBACrB,IAAI,EAAE;oBACJ,MAAM,EAAE,IAAI;oBACZ,IAAI,EAAE;wBACJ,EAAE,EAAE,IAAI,CAAC,MAAM;wBACf,UAAU,EAAE,IAAI,CAAC,UAAU;wBAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,WAAW,EAAE,IAAI,CAAC,WAAW;qBAC9B;iBACF;aACF,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;IACH,CAAC;IAED,MAAM;IACN,OAAO,GAAG,CAAC,IAAI,CAAC;QACd,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,KAAK;QACd,IAAI,EAAE;YACJ,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,IAAI;SACX;KACF,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,SAAS,YAAY,CAAC,YAAqB;IACzC,MAAM,OAAO,GAA2B,EAAE,CAAA;IAC1C,IAAI,CAAC,YAAY;QAAE,OAAO,OAAO,CAAA;IACjC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;QACvC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACvC,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;QACrC,CAAC;IACH,CAAC,CAAC,CAAA;IACF,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,kBAAe,UAAU,CAAA"}
+{"version":3,"file":"mockRoutes.js","sourceRoot":"","sources":["../../../server/mock/mockRoutes.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;;;AAEH,sDAA6B;AAC7B,yEAAqE;AACrE,yEAAqE;AACrE,2EAAuE;AACvE,2EAAuE;AACvE,qEAAiE;AAEjE,MAAM,UAAU,GAAG,iBAAO,CAAC,MAAM,EAAE,CAAA;AAEnC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,iCAAe,CAAC,CAAA;AAEzC,UAAU,CAAC,IAAI,CAAC,aAAa,EAAE,iCAAe,CAAC,CAAA;AAC/C,UAAU,CAAC,IAAI,CAAC,cAAc,EAAE,mCAAgB,CAAC,CAAA;AACjD,UAAU,CAAC,GAAG,CAAC,kBAAkB,EAAE,mCAAgB,CAAC,CAAA;AACpD,UAAU,CAAC,GAAG,CAAC,mBAAmB,EAAE,6BAAa,CAAC,CAAA;AAElD,kBAAe,UAAU,CAAA"}

package/dist/server/routes.d.ts

@@ -1,7 +1,6 @@
 /**
  * Sumor OAuth 路由
- * 处理与 Sumor OAuth 服务器的交互以及相关操作
- * 当 OAUTH_MOCK=true 时，挂载 mock 路由替代真实 OAuth 流程
+ * 所有路由始终注册，在处理器内部根据 mock 模式决定具体行为。
  */
 declare const oauthRoutes: import("express-serve-static-core").Router;
 export default oauthRoutes;

package/dist/server/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../server/routes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH,QAAA,MAAM,WAAW,4CAAmB,CAAA;AA6BpC,eAAe,WAAW,CAAA"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../server/routes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,QAAA,MAAM,WAAW,4CAAmB,CAAA;AA0BpC,eAAe,WAAW,CAAA"}

package/dist/server/routes.js

@@ -1,45 +1,37 @@
 "use strict";
 /**
  * Sumor OAuth 路由
- * 处理与 Sumor OAuth 服务器的交互以及相关操作
- * 当 OAUTH_MOCK=true 时，挂载 mock 路由替代真实 OAuth 流程
+ * 所有路由始终注册，在处理器内部根据 mock 模式决定具体行为。
  */
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 const express_1 = __importDefault(require("express"));
-const mockConfig_1 = require("./mock/mockConfig");
 const mockRoutes_1 = __importDefault(require("./mock/mockRoutes"));
-const mockApiRoutes_1 = __importDefault(require("./mock/mockApiRoutes"));
 const tokenRefreshController_1 = __importDefault(require("./controllers/tokenRefreshController"));
 const oauthCallbackController_1 = __importDefault(require("./controllers/oauthCallbackController"));
 const logoutController_1 = require("./controllers/logoutController");
 const oauthRoutes = express_1.default.Router();
-if ((0, mockConfig_1.isMockMode)()) {
-    /**
-     * Mock 模式：token 刷新由 mockRoutes 处理
-     * mock login/logout 挂载到 /mock 下（即 /api/oauth/mock/*）
-     */
-    oauthRoutes.use('/', mockRoutes_1.default);
-    oauthRoutes.use('/mock', mockApiRoutes_1.default);
-}
-else {
-    /**
-     * Token 刷新端点
-     * PUT /api/oauth/token
-     */
-    oauthRoutes.put('/token', tokenRefreshController_1.default);
-    /**
-     * OAuth 授权回调处理
-     * GET /api/oauth/callback
-     */
-    oauthRoutes.get('/callback', oauthCallbackController_1.default);
-    /**
-     * 用户登出 - 需要有效的 Token
-     * POST /api/oauth/logout
-     */
-    oauthRoutes.post('/logout', logoutController_1.logout);
-}
+/**
+ * Mock token 路由（PUT /token、GET /authorize 等）
+ * mock 模式下由 mockRoutes 处理，否则透传到后续真实路由
+ */
+oauthRoutes.use('/', mockRoutes_1.default);
+/**
+ * Token 刷新端点
+ * PUT /token
+ */
+oauthRoutes.put('/token', tokenRefreshController_1.default);
+/**
+ * OAuth 授权回调处理
+ * GET /callback
+ */
+oauthRoutes.get('/callback', oauthCallbackController_1.default);
+/**
+ * 用户登出
+ * POST /logout
+ */
+oauthRoutes.post('/logout', logoutController_1.logout);
 exports.default = oauthRoutes;
 //# sourceMappingURL=routes.js.map

package/dist/server/routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../server/routes.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;AAEH,sDAA6B;AAC7B,kDAA8C;AAC9C,mEAA0C;AAC1C,yEAAgD;AAChD,kGAAyE;AACzE,oGAA2E;AAC3E,qEAAuD;AAEvD,MAAM,WAAW,GAAG,iBAAO,CAAC,MAAM,EAAE,CAAA;AAEpC,IAAI,IAAA,uBAAU,GAAE,EAAE,CAAC;IACjB;;;OAGG;IACH,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,oBAAU,CAAC,CAAA;IAChC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,uBAAa,CAAC,CAAA;AACzC,CAAC;KAAM,CAAC;IACN;;;OAGG;IACH,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,gCAAsB,CAAC,CAAA;IAEjD;;;OAGG;IACH,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,iCAAuB,CAAC,CAAA;IAErD;;;OAGG;IACH,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,yBAAM,CAAC,CAAA;AACrC,CAAC;AAED,kBAAe,WAAW,CAAA"}
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../server/routes.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;AAEH,sDAA6B;AAC7B,mEAA0C;AAC1C,kGAAyE;AACzE,oGAA2E;AAC3E,qEAAuD;AAEvD,MAAM,WAAW,GAAG,iBAAO,CAAC,MAAM,EAAE,CAAA;AAEpC;;;GAGG;AACH,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,oBAAU,CAAC,CAAA;AAEhC;;;GAGG;AACH,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,gCAAsB,CAAC,CAAA;AAEjD;;;GAGG;AACH,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,iCAAuB,CAAC,CAAA;AAErD;;;GAGG;AACH,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,yBAAM,CAAC,CAAA;AAEnC,kBAAe,WAAW,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sumor",
-  "version": "3.3.2",
+  "version": "3.3.3",
   "description": "Sumor OAuth framework",
   "main": "dist/server/index.js",
   "types": "dist/server/index.d.ts",

package/dist/server/mock/mockApiRoutes.d.ts

@@ -1,14 +0,0 @@
-/**
- * Mock API 路由（挂载到 /api/oauth/mock）
- *
- * 提供给 web SDK 在 mock 模式下直接调用的接口，无需页面跳转。
- *
- * 路由列表：
- *   POST /api/oauth/mock/login          - 签发 mock token，返回用户信息
- *   POST /api/oauth/mock/logout         - 清除 mock token cookie
- *   GET  /api/oauth/mock/avatar/:id     - 返回 404（mock 模式无头像服务）
- *   GET  /api/oauth/mock/nav/:target    - 导航占位页（home/site/user/feedback）
- */
-declare const mockApiRoutes: import("express-serve-static-core").Router;
-export default mockApiRoutes;
-//# sourceMappingURL=mockApiRoutes.d.ts.map

package/dist/server/mock/mockApiRoutes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mockApiRoutes.d.ts","sourceRoot":"","sources":["../../../server/mock/mockApiRoutes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAYH,QAAA,MAAM,aAAa,4CAAmB,CAAA;AA0ItC,eAAe,aAAa,CAAA"}

package/dist/server/mock/mockApiRoutes.js

@@ -1,149 +0,0 @@
-"use strict";
-/**
- * Mock API 路由（挂载到 /api/oauth/mock）
- *
- * 提供给 web SDK 在 mock 模式下直接调用的接口，无需页面跳转。
- *
- * 路由列表：
- *   POST /api/oauth/mock/login          - 签发 mock token，返回用户信息
- *   POST /api/oauth/mock/logout         - 清除 mock token cookie
- *   GET  /api/oauth/mock/avatar/:id     - 返回 404（mock 模式无头像服务）
- *   GET  /api/oauth/mock/nav/:target    - 导航占位页（home/site/user/feedback）
- */
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const express_1 = __importDefault(require("express"));
-const mockConfig_1 = require("./mockConfig");
-const mockTokenUtils_1 = require("./mockTokenUtils");
-const oauthTokenUtils_1 = require("../utils/oauthTokenUtils");
-const mockApiRoutes = express_1.default.Router();
-/**
- * POST /api/oauth/mock/login
- * 直接签发 mock token，写入 HttpOnly Cookie，并返回用户信息
- * web SDK 拿到用户信息后直接更新 store，无需页面跳转
- */
-mockApiRoutes.post('/login', (_req, res) => {
-    const { user } = (0, mockConfig_1.getMockConfig)();
-    const accessToken = (0, mockTokenUtils_1.generateMockAccessToken)(user);
-    const refreshToken = (0, mockTokenUtils_1.generateMockRefreshToken)(user);
-    (0, oauthTokenUtils_1.setOAuthTokenCookie)(res, accessToken, mockTokenUtils_1.MOCK_ACCESS_TOKEN_EXPIRES_IN, 'access');
-    (0, oauthTokenUtils_1.setOAuthTokenCookie)(res, refreshToken, mockTokenUtils_1.MOCK_REFRESH_TOKEN_EXPIRES_IN, 'refresh');
-    return res.json({
-        code: 'OK',
-        message: '登录成功',
-        data: {
-            isMock: true,
-            user: {
-                id: user.userId,
-                isVerified: user.isVerified,
-                roles: user.roles,
-                permissions: user.permissions
-            }
-        }
-    });
-});
-/**
- * POST /api/oauth/mock/logout
- * 清除 mock token cookie
- */
-mockApiRoutes.post('/logout', (_req, res) => {
-    res.clearCookie('access_token');
-    res.clearCookie('refresh_token');
-    return res.json({ code: 'OK', message: '登出成功' });
-});
-/**
- * GET /api/oauth/mock/avatar/:id
- * mock 模式无头像服务，直接返回 404
- */
-mockApiRoutes.get('/avatar/:id', (_req, res) => {
-    res.status(404).end();
-});
-const NAV_LABELS = {
-    home: '首页',
-    site: '站点管理',
-    user: '用户中心',
-    feedback: '意见反馈'
-};
-/**
- * GET /api/oauth/mock/nav/:target
- * mock 模式导航占位页，展示目标页面名称并提供回退按钮
- */
-mockApiRoutes.get('/nav/:target', (req, res) => {
-    const target = req.params['target'];
-    const label = NAV_LABELS[target] || target;
-    res.setHeader('Content-Type', 'text/html; charset=utf-8');
-    res.send(`<!DOCTYPE html>
-<html lang="zh-CN">
-<head>
-  <meta charset="UTF-8" />
-  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-  <title>[Mock] ${label}</title>
-  <style>
-    *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
-    body {
-      min-height: 100vh;
-      display: flex;
-      align-items: center;
-      justify-content: center;
-      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
-      background: #f5f5f5;
-      color: #333;
-    }
-    .card {
-      background: #fff;
-      border-radius: 12px;
-      box-shadow: 0 4px 24px rgba(0,0,0,.08);
-      padding: 48px 56px;
-      text-align: center;
-      max-width: 420px;
-      width: 90%;
-    }
-    .badge {
-      display: inline-block;
-      background: #fff3cd;
-      color: #856404;
-      font-size: 12px;
-      font-weight: 600;
-      letter-spacing: .5px;
-      padding: 3px 10px;
-      border-radius: 99px;
-      margin-bottom: 20px;
-    }
-    h1 {
-      font-size: 24px;
-      font-weight: 700;
-      margin-bottom: 8px;
-    }
-    p {
-      font-size: 14px;
-      color: #888;
-      margin-bottom: 32px;
-      line-height: 1.6;
-    }
-    button {
-      background: #333;
-      color: #fff;
-      border: none;
-      border-radius: 8px;
-      padding: 10px 28px;
-      font-size: 14px;
-      cursor: pointer;
-      transition: background .15s;
-    }
-    button:hover { background: #555; }
-  </style>
-</head>
-<body>
-  <div class="card">
-    <span class="badge">MOCK</span>
-    <h1>${label}</h1>
-    <p>当前处于 Mock 模式，此页面为占位页。<br/>真实环境中将跳转到 OAuth 服务的「${label}」页面。</p>
-    <button onclick="history.back()">返回上一页</button>
-  </div>
-</body>
-</html>`);
-});
-exports.default = mockApiRoutes;
-//# sourceMappingURL=mockApiRoutes.js.map

package/dist/server/mock/mockApiRoutes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mockApiRoutes.js","sourceRoot":"","sources":["../../../server/mock/mockApiRoutes.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;;AAEH,sDAAoD;AACpD,6CAA4C;AAC5C,qDAKyB;AACzB,8DAA8D;AAE9D,MAAM,aAAa,GAAG,iBAAO,CAAC,MAAM,EAAE,CAAA;AAEtC;;;;GAIG;AACH,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;IAC5D,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,0BAAa,GAAE,CAAA;IAEhC,MAAM,WAAW,GAAG,IAAA,wCAAuB,EAAC,IAAI,CAAC,CAAA;IACjD,MAAM,YAAY,GAAG,IAAA,yCAAwB,EAAC,IAAI,CAAC,CAAA;IAEnD,IAAA,qCAAmB,EAAC,GAAG,EAAE,WAAW,EAAE,6CAA4B,EAAE,QAAQ,CAAC,CAAA;IAC7E,IAAA,qCAAmB,EAAC,GAAG,EAAE,YAAY,EAAE,8CAA6B,EAAE,SAAS,CAAC,CAAA;IAEhF,OAAO,GAAG,CAAC,IAAI,CAAC;QACd,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,MAAM;QACf,IAAI,EAAE;YACJ,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE;gBACJ,EAAE,EAAE,IAAI,CAAC,MAAM;gBACf,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B;SACF;KACF,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF;;;GAGG;AACH,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;IAC7D,GAAG,CAAC,WAAW,CAAC,cAAc,CAAC,CAAA;IAC/B,GAAG,CAAC,WAAW,CAAC,eAAe,CAAC,CAAA;IAEhC,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;AAClD,CAAC,CAAC,CAAA;AAEF;;;GAGG;AACH,aAAa,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;IAChE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;AACvB,CAAC,CAAC,CAAA;AAEF,MAAM,UAAU,GAA2B;IACzC,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,MAAM;CACjB,CAAA;AAED;;;GAGG;AACH,aAAa,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;IAChE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAW,CAAA;IAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,MAAM,CAAA;IAE1C,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAA;IACzD,GAAG,CAAC,IAAI,CAAC;;;;;kBAKO,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UA2Db,KAAK;uDACwC,KAAK;;;;QAIpD,CAAC,CAAA;AACT,CAAC,CAAC,CAAA;AAEF,kBAAe,aAAa,CAAA"}