perf: 支持部署到中国移动CDN

fix: oidc 支持nonce
build: release
2026-04-25 13:17:25 +08:00 · 2025-12-04 00:46:25 +08:00 · 2025-12-03 22:00:35 +08:00 · 2025-12-03 10:09:24 +08:00 · 2025-12-03 07:34:48 +08:00 · 2025-12-03 01:01:31 +08:00
86 changed files with 1878 additions and 355 deletions
@@ -3,6 +3,35 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.37.14](https://github.com/certd/certd/compare/v1.37.13...v1.37.14) (2025-12-02)
+
+### Bug Fixes
+
+* 修复注销登录时，第三方登录注销请求失败的报错 ([677e110](https://github.com/certd/certd/commit/677e1101e6cf4451abd8a876cc1d0ddd26a10b88))
+
+## [1.37.13](https://github.com/certd/certd/compare/v1.37.12...v1.37.13) (2025-12-02)
+
+### Bug Fixes
+
+* 修复西部数据返回信息乱码问题 ([78b1650](https://github.com/certd/certd/commit/78b1650bdb071c858b3f90d53a700d11ee6de328))
+* 修复西部数码使用域名级别的key申请证书失败的问题 ([5edc72d](https://github.com/certd/certd/commit/5edc72d47550b8e3364dabda70a41cce75d87956))
+
+### Performance Improvements
+
+* 第三方登录允许选择logo ([bb3085e](https://github.com/certd/certd/commit/bb3085ef84201ccd2dc632ba8c5097cb00258be4))
+* 支持OIDC单点登录 ([fbf12f1](https://github.com/certd/certd/commit/fbf12f16b5eaa7676fd41923587bf6bd2595adba))
+
+## [1.37.12](https://github.com/certd/certd/compare/v1.37.11...v1.37.12) (2025-11-29)
+
+### Bug Fixes
+
+* 修复waf tls版本号小写 ([0adcc6a](https://github.com/certd/certd/commit/0adcc6a8d194469be0c26940ed4837fb34929b68))
+
+### Performance Improvements
+
+* 支持微信扫码登录 ([73325aa](https://github.com/certd/certd/commit/73325aaefb0e750a22aaac40929e7bf3f5864996))
+* 支持证书颁发机构 LiteSSL ([6be7591](https://github.com/certd/certd/commit/6be75913324e2828d9016eb307ff2d0abbbb2191))
+
 ## [1.37.11](https://github.com/certd/certd/compare/v1.37.10...v1.37.11) (2025-11-28)

 ### Bug Fixes
@@ -121,6 +121,7 @@ export default defineConfig({
                        {text: "ESXi", link: "/guide/use/ESXi/index.md"},
                        {text: "宝塔动态IP白名单", link: "/guide/use/baota/white_list.md"},
                        {text: "子域名托管", link: "/guide/use/cert/subdomain.md"},
+                        {text: "流水线有效期", link: "/guide/use/pipeline/valid.md"},
                    ]
                },
                {
@@ -3,6 +3,52 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.37.14](https://github.com/certd/certd/compare/v1.37.13...v1.37.14) (2025-12-02)
+
+### Bug Fixes
+
+* 修复注销登录时，第三方登录注销请求失败的报错 ([677e110](https://github.com/certd/certd/commit/677e1101e6cf4451abd8a876cc1d0ddd26a10b88))
+
+## [1.37.13](https://github.com/certd/certd/compare/v1.37.12...v1.37.13) (2025-12-02)
+
+### Bug Fixes
+
+* 修复西部数据返回信息乱码问题 ([78b1650](https://github.com/certd/certd/commit/78b1650bdb071c858b3f90d53a700d11ee6de328))
+* 修复西部数码使用域名级别的key申请证书失败的问题 ([5edc72d](https://github.com/certd/certd/commit/5edc72d47550b8e3364dabda70a41cce75d87956))
+
+### Performance Improvements
+
+* 第三方登录允许选择logo ([bb3085e](https://github.com/certd/certd/commit/bb3085ef84201ccd2dc632ba8c5097cb00258be4))
+* 支持OIDC单点登录 ([fbf12f1](https://github.com/certd/certd/commit/fbf12f16b5eaa7676fd41923587bf6bd2595adba))
+
+## [1.37.12](https://github.com/certd/certd/compare/v1.37.11...v1.37.12) (2025-11-29)
+
+### Bug Fixes
+
+* 修复waf tls版本号小写 ([0adcc6a](https://github.com/certd/certd/commit/0adcc6a8d194469be0c26940ed4837fb34929b68))
+
+### Performance Improvements
+
+* 支持微信扫码登录 ([73325aa](https://github.com/certd/certd/commit/73325aaefb0e750a22aaac40929e7bf3f5864996))
+* 支持证书颁发机构 LiteSSL ([6be7591](https://github.com/certd/certd/commit/6be75913324e2828d9016eb307ff2d0abbbb2191))
+
+## [1.37.11](https://github.com/certd/certd/compare/v1.37.10...v1.37.11) (2025-11-28)
+
+### Bug Fixes
+
+* 修复阿里云 waf tlsVersion参数缺失导致部署失败的问题 ([2fabee6](https://github.com/certd/certd/commit/2fabee647acf64afe689f5bea3603028cd0ba4a2))
+* 修复备注撑开表格行高的bug ([c7b298c](https://github.com/certd/certd/commit/c7b298c46f0d52b43bd2bb17b374e7970a446446))
+* 修复域名管理无法创建tencent-eo dns授权的bug ([3406bb5](https://github.com/certd/certd/commit/3406bb5a4a56bb310cddc1a1f410c70909fd129b))
+* openapi 成功后失败都返回msg ([6e735bb](https://github.com/certd/certd/commit/6e735bbd1e29712e939f775a4db974db70e3b4b0))
+
+### Performance Improvements
+
+*  ssh支持ppk格式私钥 ([575ae16](https://github.com/certd/certd/commit/575ae164c863d0b1f9fa0890549a2ee7472fb469))
+* 优化宝塔网站证书在并发部署时导致nginx配置文件错乱的问题 ([51cc084](https://github.com/certd/certd/commit/51cc08411fd2dbab66d769b495dc1b0bf2f2578c))
+* 优化天翼云cdn 等待5秒部署完成 ([53c88ad](https://github.com/certd/certd/commit/53c88ad5afe66a3f7c38b9b759747918913a4edc))
+* 支持oidc单点登录 ([ec75afb](https://github.com/certd/certd/commit/ec75afbc44139dbe9da534d8a8c08a5b91f86d3c))
+* ssl.com支持ecc ([b5ec047](https://github.com/certd/certd/commit/b5ec04723db48422f71041f4043002e7f5b450b1))
+
 ## [1.37.10](https://github.com/certd/certd/compare/v1.37.9...v1.37.10) (2025-11-19)

 ### Performance Improvements
@@ -72,7 +72,7 @@
 | 3.| **阿里云-部署证书至CDN** | 自动部署域名证书至阿里云CDN | 
 | 4.| **阿里云-部署证书至DCDN** | 依赖证书申请前置任务，自动部署域名证书至阿里云DCDN | 
 | 5.| **阿里云-部署证书至OSS** | 部署域名证书至阿里云OSS自定义域名，不是上传到阿里云oss | 
-| 6.| **阿里云-上传证书到阿里云CAS** | 上传证书到阿里云数字证书管理服务（CAS），注意：不会部署到任何应用上；如果不想在阿里云上同一份证书上传多次，可以把此任务作为前置任务，其他阿里云任务证书那一项选择此任务的输出 | 
+| 6.| **阿里云-上传证书到CAS** | 上传证书到阿里云证书管理服务（CAS），如果不想在阿里云上同一份证书上传多次，可以把此任务作为前置任务，其他阿里云任务证书那一项选择此任务的输出 | 
 | 7.| **阿里云-部署至阿里云WAF** | 部署证书到阿里云WAF | 
 | 8.| **阿里云-部署至ALB（应用负载均衡）** | ALB,更新监听器的默认证书 | 
 | 9.| **阿里云-部署至NLB（网络负载均衡）** | NLB,网络负载均衡,更新监听器的默认证书 | 
@@ -5,8 +5,10 @@

 配置环境变量
 ```shell
-ALIYUN_CLIENT_CONNECT_TIMEOUT=10000 # 连接超时，单位毫秒
-ALIYUN_CLIENT_READ_TIMEOUT=10000 #读取数据超时，单位毫秒
+# docker-compose.yaml
+environment:
+  - ALIYUN_CLIENT_CONNECT_TIMEOUT=16000 # 连接超时，单位毫秒
+  - ALIYUN_CLIENT_READ_TIMEOUT=16000 #读取数据超时，单位毫秒

 ```

@@ -0,0 +1,17 @@
+# 流水线有效期功能
+
+可以为流水线设置有效期，超过有效期后，流水线将停止运行
+
+## 1. 打开有效期开关
+
+![setting.png](images/setting.png)
+
+## 2. 设置有效期
+
+![valid.png](images/edit.png)
+
+![valid.png](images/edit2.png)
+
+## 3. 设置完成
+该流水线将在有效期结束后停止运行
+![valid.png](images/show.png)
@@ -9,5 +9,5 @@
    }
  },
  "npmClient": "pnpm",
-  "version": "1.37.11"
+  "version": "1.37.14"
 }
@@ -17,8 +17,8 @@
    "start:server": "cd ./packages/ui/certd-server && npm start",
    "devb": "lerna run dev-build",
    "i-all": "lerna link && lerna exec npm install  ",
-    "publish": "npm run prepublishOnly2  && lerna publish --force-publish=pro/plus-core --conventional-commits --create-release github && npm run afterpublishOnly && npm run commitAll",
-    "afterpublishOnly": "npm run plugin-doc-gen && npm run copylogs && time /t >trigger/build.trigger && git add ./trigger/build.trigger && git commit -m \"build: trigger build image\" && TIMEOUT /T 10 && git push",
+    "publish": "npm run prepublishOnly2  && lerna publish --force-publish=pro/plus-core --conventional-commits --create-release github && npm run afterpublishOnly ",
+    "afterpublishOnly": "npm run plugin-doc-gen && npm run copylogs && time /t >trigger/build.trigger && git add ./trigger/build.trigger && git commit -m \"build: trigger build image\" && TIMEOUT /T 10 && npm run commitAll",
    "transform-sql": "cd ./packages/ui/certd-server/db/ && node --experimental-json-modules transform.js",
    "plugin-doc-gen": "cd ./packages/ui/certd-server/ && npm run export-md",
    "commitAll": "git add . && git commit -m \"build: publish\" && git push && npm run commitPro",
@@ -3,6 +3,20 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.37.14](https://github.com/publishlab/node-acme-client/compare/v1.37.13...v1.37.14) (2025-12-02)
+
+**Note:** Version bump only for package @certd/acme-client
+
+## [1.37.13](https://github.com/publishlab/node-acme-client/compare/v1.37.12...v1.37.13) (2025-12-02)
+
+**Note:** Version bump only for package @certd/acme-client
+
+## [1.37.12](https://github.com/publishlab/node-acme-client/compare/v1.37.11...v1.37.12) (2025-11-29)
+
+### Performance Improvements
+
+* 支持证书颁发机构 LiteSSL ([6be7591](https://github.com/publishlab/node-acme-client/commit/6be75913324e2828d9016eb307ff2d0abbbb2191))
+
 ## [1.37.11](https://github.com/publishlab/node-acme-client/compare/v1.37.10...v1.37.11) (2025-11-28)

 ### Performance Improvements
@@ -3,7 +3,7 @@
    "description": "Simple and unopinionated ACME client",
    "private": false,
    "author": "nmorsman",
-    "version": "1.37.11",
+    "version": "1.37.14",
    "type": "module",
    "module": "scr/index.js",
    "main": "src/index.js",
@@ -18,7 +18,7 @@
        "types"
    ],
    "dependencies": {
-        "@certd/basic": "^1.37.11",
+        "@certd/basic": "^1.37.14",
        "@peculiar/x509": "^1.11.0",
        "asn1js": "^3.0.5",
        "axios": "^1.7.2",
@@ -70,5 +70,5 @@
    "bugs": {
        "url": "https://github.com/publishlab/node-acme-client/issues"
    },
-    "gitHead": "eb41a3655fe91af94f1c42a51aaa9122edfcf40e"
+    "gitHead": "ddb18e6c219d0f7a7acb4a3355be5db3fd9e096e"
 }
@@ -32,7 +32,11 @@ export const directory = {
      staging: 'https://acme.ssl.com/sslcom-dv-rsa',
      production: 'https://acme.ssl.com/sslcom-dv-rsa',
      ec: 'https://acme.ssl.com/sslcom-dv-ecc',
-    }
+    },
+    litessl: {
+        staging: 'https://acme.litessl.com/acme/v2/directory',
+        production: 'https://acme.litessl.com/acme/v2/directory',
+    },
 };

 export function getDirectoryUrl(opts) {
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.37.14](https://github.com/certd/certd/compare/v1.37.13...v1.37.14) (2025-12-02)
+
+**Note:** Version bump only for package @certd/basic
+
+## [1.37.13](https://github.com/certd/certd/compare/v1.37.12...v1.37.13) (2025-12-02)
+
+**Note:** Version bump only for package @certd/basic
+
+## [1.37.12](https://github.com/certd/certd/compare/v1.37.11...v1.37.12) (2025-11-29)
+
+**Note:** Version bump only for package @certd/basic
+
 ## [1.37.11](https://github.com/certd/certd/compare/v1.37.10...v1.37.11) (2025-11-28)

 ### Performance Improvements
@@ -1 +1 @@
-04:13
+00:57
@@ -1,7 +1,7 @@
 {
  "name": "@certd/basic",
  "private": false,
-  "version": "1.37.11",
+  "version": "1.37.14",
  "type": "module",
  "main": "./dist/index.js",
  "module": "./dist/index.js",
@@ -47,5 +47,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "eb41a3655fe91af94f1c42a51aaa9122edfcf40e"
+  "gitHead": "ddb18e6c219d0f7a7acb4a3355be5db3fd9e096e"
 }
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.37.14](https://github.com/certd/certd/compare/v1.37.13...v1.37.14) (2025-12-02)
+
+**Note:** Version bump only for package @certd/pipeline
+
+## [1.37.13](https://github.com/certd/certd/compare/v1.37.12...v1.37.13) (2025-12-02)
+
+**Note:** Version bump only for package @certd/pipeline
+
+## [1.37.12](https://github.com/certd/certd/compare/v1.37.11...v1.37.12) (2025-11-29)
+
+**Note:** Version bump only for package @certd/pipeline
+
 ## [1.37.11](https://github.com/certd/certd/compare/v1.37.10...v1.37.11) (2025-11-28)

 **Note:** Version bump only for package @certd/pipeline
@@ -1,7 +1,7 @@
 {
  "name": "@certd/pipeline",
  "private": false,
-  "version": "1.37.11",
+  "version": "1.37.14",
  "type": "module",
  "main": "./dist/index.js",
  "module": "./dist/index.js",
@@ -18,8 +18,8 @@
    "compile": "tsc --skipLibCheck --watch"
  },
  "dependencies": {
-    "@certd/basic": "^1.37.11",
-    "@certd/plus-core": "^1.37.11",
+    "@certd/basic": "^1.37.14",
+    "@certd/plus-core": "^1.37.14",
    "dayjs": "^1.11.7",
    "lodash-es": "^4.17.21",
    "reflect-metadata": "^0.1.13"
@@ -45,5 +45,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "eb41a3655fe91af94f1c42a51aaa9122edfcf40e"
+  "gitHead": "ddb18e6c219d0f7a7acb4a3355be5db3fd9e096e"
 }
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.37.14](https://github.com/certd/certd/compare/v1.37.13...v1.37.14) (2025-12-02)
+
+**Note:** Version bump only for package @certd/lib-huawei
+
+## [1.37.13](https://github.com/certd/certd/compare/v1.37.12...v1.37.13) (2025-12-02)
+
+**Note:** Version bump only for package @certd/lib-huawei
+
+## [1.37.12](https://github.com/certd/certd/compare/v1.37.11...v1.37.12) (2025-11-29)
+
+**Note:** Version bump only for package @certd/lib-huawei
+
 ## [1.37.11](https://github.com/certd/certd/compare/v1.37.10...v1.37.11) (2025-11-28)

 **Note:** Version bump only for package @certd/lib-huawei
@@ -1,7 +1,7 @@
 {
  "name": "@certd/lib-huawei",
  "private": false,
-  "version": "1.37.11",
+  "version": "1.37.14",
  "main": "./dist/bundle.js",
  "module": "./dist/bundle.js",
  "types": "./dist/d/index.d.ts",
@@ -24,5 +24,5 @@
    "prettier": "^2.8.8",
    "tslib": "^2.8.1"
  },
-  "gitHead": "eb41a3655fe91af94f1c42a51aaa9122edfcf40e"
+  "gitHead": "ddb18e6c219d0f7a7acb4a3355be5db3fd9e096e"
 }
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.37.14](https://github.com/certd/certd/compare/v1.37.13...v1.37.14) (2025-12-02)
+
+**Note:** Version bump only for package @certd/lib-iframe
+
+## [1.37.13](https://github.com/certd/certd/compare/v1.37.12...v1.37.13) (2025-12-02)
+
+**Note:** Version bump only for package @certd/lib-iframe
+
+## [1.37.12](https://github.com/certd/certd/compare/v1.37.11...v1.37.12) (2025-11-29)
+
+**Note:** Version bump only for package @certd/lib-iframe
+
 ## [1.37.11](https://github.com/certd/certd/compare/v1.37.10...v1.37.11) (2025-11-28)

 **Note:** Version bump only for package @certd/lib-iframe
@@ -1,7 +1,7 @@
 {
  "name": "@certd/lib-iframe",
  "private": false,
-  "version": "1.37.11",
+  "version": "1.37.14",
  "type": "module",
  "main": "./dist/index.js",
  "module": "./dist/index.js",
@@ -31,5 +31,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "eb41a3655fe91af94f1c42a51aaa9122edfcf40e"
+  "gitHead": "ddb18e6c219d0f7a7acb4a3355be5db3fd9e096e"
 }
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.37.14](https://github.com/certd/certd/compare/v1.37.13...v1.37.14) (2025-12-02)
+
+**Note:** Version bump only for package @certd/jdcloud
+
+## [1.37.13](https://github.com/certd/certd/compare/v1.37.12...v1.37.13) (2025-12-02)
+
+**Note:** Version bump only for package @certd/jdcloud
+
+## [1.37.12](https://github.com/certd/certd/compare/v1.37.11...v1.37.12) (2025-11-29)
+
+**Note:** Version bump only for package @certd/jdcloud
+
 ## [1.37.11](https://github.com/certd/certd/compare/v1.37.10...v1.37.11) (2025-11-28)

 ### Performance Improvements
@@ -1,6 +1,6 @@
 {
  "name": "@certd/jdcloud",
-  "version": "1.37.11",
+  "version": "1.37.14",
  "description": "jdcloud openApi sdk",
  "main": "./dist/bundle.js",
  "module": "./dist/bundle.js",
@@ -56,5 +56,5 @@
      "fetch"
    ]
  },
-  "gitHead": "eb41a3655fe91af94f1c42a51aaa9122edfcf40e"
+  "gitHead": "ddb18e6c219d0f7a7acb4a3355be5db3fd9e096e"
 }
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.37.14](https://github.com/certd/certd/compare/v1.37.13...v1.37.14) (2025-12-02)
+
+**Note:** Version bump only for package @certd/lib-k8s
+
+## [1.37.13](https://github.com/certd/certd/compare/v1.37.12...v1.37.13) (2025-12-02)
+
+**Note:** Version bump only for package @certd/lib-k8s
+
+## [1.37.12](https://github.com/certd/certd/compare/v1.37.11...v1.37.12) (2025-11-29)
+
+**Note:** Version bump only for package @certd/lib-k8s
+
 ## [1.37.11](https://github.com/certd/certd/compare/v1.37.10...v1.37.11) (2025-11-28)

 **Note:** Version bump only for package @certd/lib-k8s
@@ -1,7 +1,7 @@
 {
  "name": "@certd/lib-k8s",
  "private": false,
-  "version": "1.37.11",
+  "version": "1.37.14",
  "type": "module",
  "main": "./dist/index.js",
  "module": "./dist/index.js",
@@ -17,7 +17,7 @@
    "pub": "npm publish"
  },
  "dependencies": {
-    "@certd/basic": "^1.37.11",
+    "@certd/basic": "^1.37.14",
    "@kubernetes/client-node": "0.21.0"
  },
  "devDependencies": {
@@ -32,5 +32,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "eb41a3655fe91af94f1c42a51aaa9122edfcf40e"
+  "gitHead": "ddb18e6c219d0f7a7acb4a3355be5db3fd9e096e"
 }
@@ -3,6 +3,20 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.37.14](https://github.com/certd/certd/compare/v1.37.13...v1.37.14) (2025-12-02)
+
+**Note:** Version bump only for package @certd/lib-server
+
+## [1.37.13](https://github.com/certd/certd/compare/v1.37.12...v1.37.13) (2025-12-02)
+
+### Performance Improvements
+
+* 第三方登录允许选择logo ([bb3085e](https://github.com/certd/certd/commit/bb3085ef84201ccd2dc632ba8c5097cb00258be4))
+
+## [1.37.12](https://github.com/certd/certd/compare/v1.37.11...v1.37.12) (2025-11-29)
+
+**Note:** Version bump only for package @certd/lib-server
+
 ## [1.37.11](https://github.com/certd/certd/compare/v1.37.10...v1.37.11) (2025-11-28)

 ### Performance Improvements
@@ -1,6 +1,6 @@
 {
  "name": "@certd/lib-server",
-  "version": "1.37.11",
+  "version": "1.37.14",
  "description": "midway with flyway, sql upgrade way ",
  "private": false,
  "type": "module",
@@ -28,11 +28,11 @@
  ],
  "license": "AGPL",
  "dependencies": {
-    "@certd/acme-client": "^1.37.11",
-    "@certd/basic": "^1.37.11",
-    "@certd/pipeline": "^1.37.11",
-    "@certd/plugin-lib": "^1.37.11",
-    "@certd/plus-core": "^1.37.11",
+    "@certd/acme-client": "^1.37.14",
+    "@certd/basic": "^1.37.14",
+    "@certd/pipeline": "^1.37.14",
+    "@certd/plugin-lib": "^1.37.14",
+    "@certd/plus-core": "^1.37.14",
    "@midwayjs/cache": "3.14.0",
    "@midwayjs/core": "3.20.11",
    "@midwayjs/i18n": "3.20.13",
@@ -64,5 +64,5 @@
    "typeorm": "^0.3.11",
    "typescript": "^5.4.2"
  },
-  "gitHead": "eb41a3655fe91af94f1c42a51aaa9122edfcf40e"
+  "gitHead": "ddb18e6c219d0f7a7acb4a3355be5db3fd9e096e"
 }
@@ -65,6 +65,7 @@ export abstract class BaseAddon implements IAddon {
  http!: HttpClient;
  logger!: ILogger;

+  title!: string;



@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.37.14](https://github.com/certd/certd/compare/v1.37.13...v1.37.14) (2025-12-02)
+
+**Note:** Version bump only for package @certd/midway-flyway-js
+
+## [1.37.13](https://github.com/certd/certd/compare/v1.37.12...v1.37.13) (2025-12-02)
+
+**Note:** Version bump only for package @certd/midway-flyway-js
+
+## [1.37.12](https://github.com/certd/certd/compare/v1.37.11...v1.37.12) (2025-11-29)
+
+**Note:** Version bump only for package @certd/midway-flyway-js
+
 ## [1.37.11](https://github.com/certd/certd/compare/v1.37.10...v1.37.11) (2025-11-28)

 **Note:** Version bump only for package @certd/midway-flyway-js
@@ -1,6 +1,6 @@
 {
  "name": "@certd/midway-flyway-js",
-  "version": "1.37.11",
+  "version": "1.37.14",
  "description": "midway with flyway, sql upgrade way ",
  "private": false,
  "type": "module",
@@ -46,5 +46,5 @@
    "typeorm": "^0.3.11",
    "typescript": "^5.4.2"
  },
-  "gitHead": "eb41a3655fe91af94f1c42a51aaa9122edfcf40e"
+  "gitHead": "ddb18e6c219d0f7a7acb4a3355be5db3fd9e096e"
 }
@@ -3,6 +3,20 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.37.14](https://github.com/certd/certd/compare/v1.37.13...v1.37.14) (2025-12-02)
+
+**Note:** Version bump only for package @certd/plugin-cert
+
+## [1.37.13](https://github.com/certd/certd/compare/v1.37.12...v1.37.13) (2025-12-02)
+
+**Note:** Version bump only for package @certd/plugin-cert
+
+## [1.37.12](https://github.com/certd/certd/compare/v1.37.11...v1.37.12) (2025-11-29)
+
+### Performance Improvements
+
+* 支持证书颁发机构 LiteSSL ([6be7591](https://github.com/certd/certd/commit/6be75913324e2828d9016eb307ff2d0abbbb2191))
+
 ## [1.37.11](https://github.com/certd/certd/compare/v1.37.10...v1.37.11) (2025-11-28)

 ### Performance Improvements
@@ -1,7 +1,7 @@
 {
  "name": "@certd/plugin-cert",
  "private": false,
-  "version": "1.37.11",
+  "version": "1.37.14",
  "type": "module",
  "main": "./dist/index.js",
  "types": "./dist/index.d.ts",
@@ -17,10 +17,10 @@
    "compile": "tsc --skipLibCheck --watch"
  },
  "dependencies": {
-    "@certd/acme-client": "^1.37.11",
-    "@certd/basic": "^1.37.11",
-    "@certd/pipeline": "^1.37.11",
-    "@certd/plugin-lib": "^1.37.11",
+    "@certd/acme-client": "^1.37.14",
+    "@certd/basic": "^1.37.14",
+    "@certd/pipeline": "^1.37.14",
+    "@certd/plugin-lib": "^1.37.14",
    "@google-cloud/publicca": "^1.3.0",
    "dayjs": "^1.11.7",
    "jszip": "^3.10.1",
@@ -43,5 +43,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "eb41a3655fe91af94f1c42a51aaa9122edfcf40e"
+  "gitHead": "ddb18e6c219d0f7a7acb4a3355be5db3fd9e096e"
 }
@@ -136,6 +136,7 @@ export class CertApplyPlugin extends CertApplyBasePlugin {
        { value: "letsencrypt", label: "Let's Encrypt（免费，新手推荐）", icon: "simple-icons:letsencrypt" },
        { value: "google", label: "Google（免费）", icon: "flat-color-icons:google" },
        { value: "zerossl", label: "ZeroSSL（免费）", icon: "emojione:digit-zero" },
+        { value: "litessl", label: "litessl（免费）", icon: "roentgen:free" },
        { value: "sslcom", label: "SSL.com（仅主域名和www免费）", icon: "la:expeditedssl" },
        { value: "letsencrypt_staging", label: "Let's Encrypt测试环境（IP证书）", icon: "simple-icons:letsencrypt" },
      ],
@@ -250,6 +251,13 @@ export class CertApplyPlugin extends CertApplyBasePlugin {
  })
  sslcomCommonEabAccessId!: number;

+  @TaskInput({
+    title: "litessl公共EAB授权",
+    isSys: true,
+    show: false,
+  })
+  litesslCommonEabAccessId!: number;
+
  @TaskInput({
    title: "EAB授权",
    component: {
@@ -262,13 +270,15 @@ export class CertApplyPlugin extends CertApplyBasePlugin {
      "需要提供EAB授权" +
      "\nZeroSSL：请前往[zerossl开发者中心](https://app.zerossl.com/developer),生成 'EAB Credentials'" +
      "\nGoogle:请查看[google获取eab帮助文档](https://certd.docmirror.cn/guide/use/google/)，用过一次后会绑定邮箱，后续复用EAB要用同一个邮箱" +
-      "\nSSL.com:[SSL.com账号页面](https://secure.ssl.com/account),然后点击api credentials链接，然后点击编辑按钮，查看Secret key和HMAC key",
+      "\nSSL.com:[SSL.com账号页面](https://secure.ssl.com/account),然后点击api credentials链接，然后点击编辑按钮，查看Secret key和HMAC key" +
+      "\nlitessl:[litesslEAB页面](https://freessl.cn/automation/eab-manager),然后点击新增EAB",
    mergeScript: `
    return {
        show: ctx.compute(({form})=>{
            return (form.sslProvider === 'zerossl' && !form.zerosslCommonEabAccessId)
            || (form.sslProvider === 'google' && !form.googleCommonEabAccessId)
            || (form.sslProvider === 'sslcom' && !form.sslcomCommonEabAccessId)
+            || (form.sslProvider === 'litessl' && !form.litesslCommonEabAccessId)
        })
    }
    `,
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.37.14](https://github.com/certd/certd/compare/v1.37.13...v1.37.14) (2025-12-02)
+
+**Note:** Version bump only for package @certd/plugin-lib
+
+## [1.37.13](https://github.com/certd/certd/compare/v1.37.12...v1.37.13) (2025-12-02)
+
+**Note:** Version bump only for package @certd/plugin-lib
+
+## [1.37.12](https://github.com/certd/certd/compare/v1.37.11...v1.37.12) (2025-11-29)
+
+**Note:** Version bump only for package @certd/plugin-lib
+
 ## [1.37.11](https://github.com/certd/certd/compare/v1.37.10...v1.37.11) (2025-11-28)

 ### Performance Improvements
@@ -1,7 +1,7 @@
 {
  "name": "@certd/plugin-lib",
  "private": false,
-  "version": "1.37.11",
+  "version": "1.37.14",
  "type": "module",
  "main": "./dist/index.js",
  "types": "./dist/index.d.ts",
@@ -22,8 +22,8 @@
    "@alicloud/pop-core": "^1.7.10",
    "@alicloud/tea-util": "^1.4.10",
    "@aws-sdk/client-s3": "^3.787.0",
-    "@certd/basic": "^1.37.11",
-    "@certd/pipeline": "^1.37.11",
+    "@certd/basic": "^1.37.14",
+    "@certd/pipeline": "^1.37.14",
    "@kubernetes/client-node": "0.21.0",
    "ali-oss": "^6.22.0",
    "basic-ftp": "^5.0.5",
@@ -53,5 +53,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "eb41a3655fe91af94f1c42a51aaa9122edfcf40e"
+  "gitHead": "ddb18e6c219d0f7a7acb4a3355be5db3fd9e096e"
 }
@@ -3,6 +3,26 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.37.14](https://github.com/certd/certd/compare/v1.37.13...v1.37.14) (2025-12-02)
+
+### Bug Fixes
+
+* 修复注销登录时，第三方登录注销请求失败的报错 ([677e110](https://github.com/certd/certd/commit/677e1101e6cf4451abd8a876cc1d0ddd26a10b88))
+
+## [1.37.13](https://github.com/certd/certd/compare/v1.37.12...v1.37.13) (2025-12-02)
+
+### Performance Improvements
+
+* 第三方登录允许选择logo ([bb3085e](https://github.com/certd/certd/commit/bb3085ef84201ccd2dc632ba8c5097cb00258be4))
+* 支持OIDC单点登录 ([fbf12f1](https://github.com/certd/certd/commit/fbf12f16b5eaa7676fd41923587bf6bd2595adba))
+
+## [1.37.12](https://github.com/certd/certd/compare/v1.37.11...v1.37.12) (2025-11-29)
+
+### Performance Improvements
+
+* 支持微信扫码登录 ([73325aa](https://github.com/certd/certd/commit/73325aaefb0e750a22aaac40929e7bf3f5864996))
+* 支持证书颁发机构 LiteSSL ([6be7591](https://github.com/certd/certd/commit/6be75913324e2828d9016eb307ff2d0abbbb2191))
+
 ## [1.37.11](https://github.com/certd/certd/compare/v1.37.10...v1.37.11) (2025-11-28)

 ### Bug Fixes
@@ -1,6 +1,6 @@
 {
  "name": "@certd/ui-client",
-  "version": "1.37.11",
+  "version": "1.37.14",
  "private": true,
  "scripts": {
    "dev": "vite --open",
@@ -33,11 +33,11 @@
    "@aws-sdk/s3-request-presigner": "^3.535.0",
    "@certd/vue-js-cron-light": "^4.0.14",
    "@ctrl/tinycolor": "^4.1.0",
-    "@fast-crud/editor-code": "^1.27.4",
-    "@fast-crud/fast-crud": "^1.27.4",
-    "@fast-crud/fast-extends": "^1.27.4",
-    "@fast-crud/ui-antdv4": "^1.27.4",
-    "@fast-crud/ui-interface": "^1.27.4",
+    "@fast-crud/editor-code": "^1.27.6",
+    "@fast-crud/fast-crud": "^1.27.6",
+    "@fast-crud/fast-extends": "^1.27.6",
+    "@fast-crud/ui-antdv4": "^1.27.6",
+    "@fast-crud/ui-interface": "^1.27.6",
    "@iconify/tailwind": "^1.2.0",
    "@iconify/vue": "^4.1.1",
    "@manypkg/get-packages": "^2.2.2",
@@ -106,8 +106,8 @@
    "zod-defaults": "^0.1.3"
  },
  "devDependencies": {
-    "@certd/lib-iframe": "^1.37.11",
-    "@certd/pipeline": "^1.37.11",
+    "@certd/lib-iframe": "^1.37.14",
+    "@certd/pipeline": "^1.37.14",
    "@rollup/plugin-commonjs": "^25.0.7",
    "@rollup/plugin-node-resolve": "^15.2.3",
    "@types/chai": "^4.3.12",
@@ -47,11 +47,12 @@ function createService() {
        //如果不需要解包
        return dataAxios;
      }
-
+      //@ts-ignore
+      const showErrorNotify = response?.config?.showErrorNotify;
      // 这个状态码是和后端约定的
      if (dataAxios?.code === undefined) {
        // 如果没有 code 代表这不是项目后端开发的接口
-        errorCreate(`非标准返回：${dataAxios}， ${response.config.url}`);
+        errorCreate(`非标准返回：${dataAxios}， ${response.config.url}`, showErrorNotify);
        return dataAxios;
      }
      const { code } = dataAxios;
@@ -70,8 +71,6 @@ function createService() {
            // @ts-ignore
            response.config.onError(err);
          }
-          //@ts-ignore
-          const showErrorNotify = response?.config?.showErrorNotify;
          errorCreate(`${errorMessage}: ${response.config.url}`, showErrorNotify, dataAxios);
      }
    },
@@ -69,7 +69,7 @@ export function errorLog(error: any, notify = true) {
 * @description 创建一个错误
 */
 export function errorCreate(msg: string, notify = true, data?: any) {
-  const err = new CodeError(msg, data.code, data.data);
+  const err = new CodeError(msg, data?.code || 1, data?.data);
  console.error("errorCreate", err);
  if (notify) {
    uiContext.get().notification.error({ message: err.message });
@@ -84,4 +84,6 @@ export default {
  phoneNumber: "Phone Number",
  changePassword: "Change Password",
  updateProfile: "Update Profile",
+  oauthLoginTitle: "Other ways of login",
+  oauthOnlyLoginTitle: "Login",
 };
@@ -743,6 +743,8 @@ export default {
      paymentSetting: "Payment Settings",
      captchaSetting: "Captcha Setting",
      pipelineSetting: "Pipeline Settings",
+      oauthSetting: "OAuth2 Settings",
+
      showRunStrategy: "Show RunStrategy",
      showRunStrategyHelper: "Allow modify the run strategy of the task",

@@ -766,7 +768,18 @@ export default {
      oauthProviders: "OAuth2 Login Providers",
      oauthType: "OAuth2 Login Type",
      oauthConfig: "OAuth2 Login Config",
-      oauthProviderSelectorPlaceholder: "Please select OAuth2 login provider",
+      oauthProviderSelectorPlaceholder: "Not Configured",
+      oauthCallback: "Callback URL",
+      oauthCallbackHelper: "Copy this URL to the callback address of the OAuth2 login provider",
+      oauthCallbackCopy: "Copy Callback URL",
+      oauthAutoRegister: "Auto Register User",
+      oauthAutoRegisterCheckedText: "Auto Register",
+      oauthAutoRegisterUnCheckedText: "User Select",
+      oauthAutoRegisterHelper: "Whether to auto register user when login",
+      oauthAutoRedirect: "Auto Redirect to OAuth2 Login",
+      oauthAutoRedirectHelper: "Whether to auto redirect to OAuth2 login when login (using the first enabled OAuth2 login type)",
+      oauthOnly: "OAuth2 Login Only",
+      oauthOnlyHelper: "Whether to only allow OAuth2 login, disable password login",
    },
  },
  modal: {
@@ -85,4 +85,7 @@ export default {
  phoneNumber: "手机号",
  changePassword: "修改密码",
  updateProfile: "修改个人信息",
+
+  oauthLoginTitle: "其他登录方式",
+  oauthOnlyLoginTitle: "登录",
 };
@@ -743,6 +743,7 @@ export default {
      paymentSetting: "支付设置",
      captchaSetting: "验证码设置",
      pipelineSetting: "流水线设置",
+      oauthSetting: "第三方登录",

      showRunStrategy: "显示运行策略选择",
      showRunStrategyHelper: "任务设置中是否允许选择运行策略",
@@ -767,7 +768,18 @@ export default {
      oauthProviders: "第三方登录提供商",
      oauthType: "第三方登录类型",
      oauthConfig: "第三方登录配置",
-      oauthProviderSelectorPlaceholder: "请选择第三方登录提供商",
+      oauthProviderSelectorPlaceholder: "未配置",
+      oauthCallback: "回调地址",
+      oauthCallbackHelper: "复制回调地址，配置到对应提供商的回调地址中",
+      oauthCallbackCopy: "复制回调地址",
+      oauthAutoRegister: "自动注册用户",
+      oauthAutoRegisterHelper: "当第三方账户未绑定本站账号时，是否自动注册用户，默认由用户选择",
+      oauthAutoRegisterCheckedText: "自动注册",
+      oauthAutoRegisterUnCheckedText: "用户选择",
+      oauthAutoRedirect: "自动跳转第三方登录",
+      oauthAutoRedirectHelper: "是否自动跳转第三方登录（使用第一个已启用的第三方登录类型）",
+      oauthOnly: "仅使用第三方登录",
+      oauthOnlyHelper: "是否仅使用第三方登录，关闭密码登录（注意：请务必在测试第三方登录功能正常后再开启）",
    },
  },
  modal: {
@@ -62,6 +62,13 @@ export type SysPublicSetting = {

  // 第三方OAuth配置
  oauthEnabled?: boolean;
+  // 是否自动注册用户
+  oauthAutoRegister?: boolean;
+  // 是否自动跳转第三方登录
+  oauthAutoRedirect?: boolean;
+  // 是否仅允许使用第三方登录
+  oauthOnly?: boolean;
+  // 第三方OAuth登录提供者配置
  oauthProviders?: Record<
    string,
    {
@@ -100,3 +100,10 @@ export async function loginByTwoFactor(data: any) {
    data,
  });
 }
+
+export async function OauthProviders() {
+  return await request({
+    url: "/oauth/providers",
+    method: "post",
+  });
+}
@@ -14,6 +14,7 @@ import { mitter } from "/src/utils/util.mitt";
 import { resetAllStores, useAccessStore } from "/@/vben/stores";

 import { useUserStore as vbenUserStore } from "/@/vben/stores/modules/user";
+import { request } from "/@/api/service";

 interface UserState {
  userInfo: Nullable<UserInfoRes>;
@@ -116,15 +117,39 @@ export const useUserStore = defineStore({
     * @description: logout
     */
    async logout(goLogin = true, from401 = false) {
+      if (!from401 && this.getToken) {
+        try {
+          await UserApi.logout(); //主要是清空cookie
+        } catch (e) {
+          console.error("注销登录请求失败：", e);
+        }
+      }
+
      this.resetState();
      resetAllStores();
-      if (!from401) {
-        await UserApi.logout(); //主要是清空cookie
-      }
+      // 第三方登录注销
+      await this.oauthLogout();
      goLogin && router.push("/login");
      mitter.emit("app.logout");
    },

+    async oauthLogout() {
+      const providers = await UserApi.OauthProviders();
+      for (const provider of providers) {
+        if (provider.logoutUrl) {
+          try {
+            await request({
+              url: provider.logoutUrl,
+              method: "get",
+              withCredentials: true,
+              showErrorNotify: false,
+            });
+          } catch (e) {
+            console.error("注销第三方登录失败：", e);
+          }
+        }
+      }
+    },
    /**
     * @description: Confirm before logging out
     */
@@ -1,6 +1,6 @@
 <template>
  <div class="addon-selector">
-    <div class="flex-o w-100">
+    <div class="flex-o w-100 inner">
      <!--      <fs-dict-select class="flex-1" :value="modelValue" :dict="optionsDictRef" :disabled="disabled" :render-label="renderLabel" :slots="selectSlots" :allow-clear="true" v-bind="select" @update:value="onChange" />-->
      <span v-if="modelValue" class="mr-5 cd-flex-inline">
        <a-tag class="mr-5" color="green">{{ target?.name || modelValue }}</a-tag>
@@ -175,5 +175,9 @@ async function doRefresh() {
 <style lang="less">
 .addon-selector {
  width: 100%;
+  .inner {
+    display: flex;
+    align-items: center;
+  }
 }
 </style>
@@ -121,7 +121,14 @@ export function getCommonColumnDefine(crudExpose: any, typeRef: any, api: any, a
      },
      editForm: {
        component: {
-          disabled: false,
+          disabled: true,
+        },
+      },
+      addForm: {
+        component: {
+          disabled: compute(({ form }) => {
+            return form.type ? true : false;
+          }),
        },
      },
      form: {
@@ -40,6 +40,12 @@ export default function ({ crudExpose, context }: CreateCrudOptionsProps): Creat
        editRequest,
        delRequest,
      },
+      search: {
+        initialForm: {
+          addonType: addonType,
+          type: type,
+        },
+      },
      form: {
        labelCol: {
          //固定label宽度
@@ -16,10 +16,10 @@
        <a-descriptions-item :label="t('authentication.email')">{{ userInfo.email }}</a-descriptions-item>
        <a-descriptions-item :label="t('authentication.phoneNumber')">{{ userInfo.phoneCode }}{{ userInfo.mobile }}</a-descriptions-item>
        <a-descriptions-item v-if="settingStore.sysPublic.oauthEnabled && settingStore.isPlus" label="第三方账号绑定">
-          <div v-for="item in computedOauthBounds" :key="item.name" class="flex items-center gap-2">
+          <div v-for="item in computedOauthBounds" :key="item.name" class="flex items-center gap-2 mb-2">
            <fs-icon :icon="item.icon" class="mr-2 text-blue-500" />
            <span class="mr-2 w-36">{{ item.title }}</span>
-            <a-button v-if="item.bound" type="link" danger @click="unbind(item.name)">解绑</a-button>
+            <a-button v-if="item.bound" type="primary" danger @click="unbind(item.name)">解绑</a-button>
            <a-button v-else type="primary" @click="bind(item.name)">绑定</a-button>
          </div>
        </a-descriptions-item>
@@ -15,8 +15,9 @@ import GroupSelector from "/@/views/certd/pipeline/group/group-selector.vue";
 import { useCertViewer } from "/@/views/certd/pipeline/use";
 import { useI18n } from "/src/locales";
 import { GetDetail, GetObj } from "./api";
+import { groupDictRef } from "./group/dicts";

-export default function ({ crudExpose, context: { groupDictRef, selectedRowKeys } }: CreateCrudOptionsProps): CreateCrudOptionsRet {
+export default function ({ crudExpose, context: { selectedRowKeys } }: CreateCrudOptionsProps): CreateCrudOptionsRet {
  const router = useRouter();
  const lastResRef = ref();

@@ -495,6 +496,11 @@ export default function ({ crudExpose, context: { groupDictRef, selectedRowKeys
            component: {
              name: GroupSelector,
              vModel: "modelValue",
+              on: {
+                refresh: async () => {
+                  await groupDictRef.reloadDict();
+                },
+              },
            },
          },
          column: {
@@ -0,0 +1,7 @@
+import { dict } from "@fast-crud/fast-crud";
+
+export const groupDictRef = dict({
+  url: "/pi/pipeline/group/all",
+  value: "id",
+  label: "name",
+});
@@ -35,6 +35,7 @@
 <script setup lang="ts">
 import createCrudOptions from "./crud";
 import { dict, FsDictSelect } from "@fast-crud/fast-crud";
+import { groupDictRef } from "./dicts";

 const props = defineProps<{
  modelValue?: number;
@@ -43,11 +44,7 @@ const props = defineProps<{
 defineOptions({
  name: "GroupSelector",
 });
-const groupDictRef = dict({
-  url: "/pi/pipeline/group/all",
-  value: "id",
-  label: "name",
-});
+
 const emit = defineEmits(["refresh", "update:modelValue"]);
 function doRefresh() {
  emit("refresh");
@@ -35,19 +35,14 @@ import { useI18n } from "/src/locales";
 const { t } = useI18n();
 import ChangeNotification from "/@/views/certd/pipeline/components/change-notification.vue";
 import { useSettingStore } from "/@/store/settings";
+import { groupDictRef } from "./group/dicts";

 defineOptions({
  name: "PipelineManager",
 });

-const groupDictRef = dict({
-  url: "/pi/pipeline/group/all",
-  value: "id",
-  label: "name",
-});
 const selectedRowKeys = ref([]);
 const context: any = {
-  groupDictRef,
  selectedRowKeys,
 };
 const { crudBinding, crudRef, crudExpose } = useFs({ createCrudOptions, context });
@@ -2,71 +2,74 @@
  <div class="main login-page">
    <a-form v-if="!twoFactor.loginId" ref="formRef" class="user-layout-login" name="custom-validation" :model="formState" v-bind="layout" @finish="handleFinish" @finish-failed="handleFinishFailed">
      <!--      <div class="login-title">登录</div>-->
-      <a-tabs v-model:active-key="formState.loginType" :tab-bar-style="{ textAlign: 'center', borderBottom: 'unset' }">
-        <a-tab-pane key="password" :tab="t('authentication.passwordTab')" :disabled="sysPublicSettings.passwordLoginEnabled !== true">
-          <template v-if="formState.loginType === 'password'">
-            <!--      <div class="login-title">登录</div>-->
-            <a-form-item required has-feedback name="username" :rules="rules.username">
-              <a-input v-model:value="formState.username" :placeholder="t('authentication.usernamePlaceholder')" autocomplete="off" @keydown.enter="handleFinish">
-                <template #prefix>
-                  <fs-icon icon="ion:phone-portrait-outline"></fs-icon>
-                </template>
-              </a-input>
-            </a-form-item>
-            <a-form-item has-feedback name="password" :rules="rules.password">
-              <a-input-password v-model:value="formState.password" :placeholder="t('authentication.passwordPlaceholder')" autocomplete="off" @keyup.enter="handleFinish">
-                <template #prefix>
-                  <fs-icon icon="ion:lock-closed-outline"></fs-icon>
-                </template>
-              </a-input-password>
-            </a-form-item>
+      <template v-if="!isOauthOnly">
+        <a-tabs v-model:active-key="formState.loginType" :tab-bar-style="{ textAlign: 'center', borderBottom: 'unset' }">
+          <a-tab-pane key="password" :tab="t('authentication.passwordTab')" :disabled="sysPublicSettings.passwordLoginEnabled !== true">
+            <template v-if="formState.loginType === 'password'">
+              <!--      <div class="login-title">登录</div>-->
+              <a-form-item required has-feedback name="username" :rules="rules.username">
+                <a-input v-model:value="formState.username" :placeholder="t('authentication.usernamePlaceholder')" autocomplete="off" @keydown.enter="handleFinish">
+                  <template #prefix>
+                    <fs-icon icon="ion:phone-portrait-outline"></fs-icon>
+                  </template>
+                </a-input>
+              </a-form-item>
+              <a-form-item has-feedback name="password" :rules="rules.password">
+                <a-input-password v-model:value="formState.password" :placeholder="t('authentication.passwordPlaceholder')" autocomplete="off" @keyup.enter="handleFinish">
+                  <template #prefix>
+                    <fs-icon icon="ion:lock-closed-outline"></fs-icon>
+                  </template>
+                </a-input-password>
+              </a-form-item>

-            <a-form-item v-if="settingStore.sysPublic.captchaEnabled" has-feedback required name="captcha" :rules="rules.captcha">
-              <CaptchaInput v-model:model-value="formState.captcha" @keydown.enter="handleFinish"></CaptchaInput>
-            </a-form-item>
-          </template>
-        </a-tab-pane>
-        <a-tab-pane v-if="sysPublicSettings.smsLoginEnabled === true" key="sms" :tab="t('authentication.smsTab')">
-          <template v-if="formState.loginType === 'sms'">
-            <a-form-item has-feedback name="mobile" :rules="rules.mobile">
-              <a-input v-model:value="formState.mobile" :placeholder="t('authentication.mobilePlaceholder')" autocomplete="off">
-                <template #prefix>
-                  <fs-icon icon="ion:phone-portrait-outline"></fs-icon>
-                </template>
-              </a-input>
-            </a-form-item>
+              <a-form-item v-if="settingStore.sysPublic.captchaEnabled" has-feedback required name="captcha" :rules="rules.captcha">
+                <CaptchaInput v-model:model-value="formState.captcha" @keydown.enter="handleFinish"></CaptchaInput>
+              </a-form-item>
+            </template>
+          </a-tab-pane>
+          <a-tab-pane v-if="sysPublicSettings.smsLoginEnabled === true" key="sms" :tab="t('authentication.smsTab')">
+            <template v-if="formState.loginType === 'sms'">
+              <a-form-item has-feedback name="mobile" :rules="rules.mobile">
+                <a-input v-model:value="formState.mobile" :placeholder="t('authentication.mobilePlaceholder')" autocomplete="off">
+                  <template #prefix>
+                    <fs-icon icon="ion:phone-portrait-outline"></fs-icon>
+                  </template>
+                </a-input>
+              </a-form-item>

-            <a-form-item has-feedback name="smsCaptcha">
-              <CaptchaInput v-model:model-value="formState.smsCaptcha" @keydown.enter="handleFinish"></CaptchaInput>
-            </a-form-item>
+              <a-form-item has-feedback name="smsCaptcha">
+                <CaptchaInput v-model:model-value="formState.smsCaptcha" @keydown.enter="handleFinish"></CaptchaInput>
+              </a-form-item>

-            <a-form-item name="smsCode" :rules="rules.smsCode">
-              <sms-code v-model:value="formState.smsCode" :captcha="formState.smsCaptcha" :mobile="formState.mobile" :phone-code="formState.phoneCode" @error="formState.smsCaptcha = null" />
-            </a-form-item>
-          </template>
-        </a-tab-pane>
-      </a-tabs>
-      <a-form-item>
-        <a-button type="primary" size="large" html-type="button" :loading="loading" class="login-button" @click="handleFinish">
-          {{ queryBindCode ? t("authentication.bindButton") : t("authentication.loginButton") }}
-        </a-button>
+              <a-form-item name="smsCode" :rules="rules.smsCode">
+                <sms-code v-model:value="formState.smsCode" :captcha="formState.smsCaptcha" :mobile="formState.mobile" :phone-code="formState.phoneCode" @error="formState.smsCaptcha = null" />
+              </a-form-item>
+            </template>
+          </a-tab-pane>
+        </a-tabs>
+        <a-form-item>
+          <a-button type="primary" size="large" html-type="button" :loading="loading" class="login-button" @click="handleFinish">
+            {{ queryBindCode ? t("authentication.bindButton") : t("authentication.loginButton") }}
+          </a-button>
+        </a-form-item>
+        <a-form-item>
+          <div class="mt-2 flex justify-between items-center">
+            <div class="flex items-center gap-2">
+              <language-toggle class="text-blue-500"></language-toggle>
+              <router-link v-if="!!settingStore.sysPublic.selfServicePasswordRetrievalEnabled && !queryBindCode" :to="{ name: 'forgotPassword' }">
+                {{ t("authentication.forgotPassword") }}
+              </router-link>
+            </div>

-        <div class="mt-2 flex justify-between items-center">
-          <div class="flex items-center gap-2">
-            <language-toggle class="text-blue-500"></language-toggle>
-            <router-link v-if="!!settingStore.sysPublic.selfServicePasswordRetrievalEnabled && !queryBindCode" :to="{ name: 'forgotPassword' }">
-              {{ t("authentication.forgotPassword") }}
+            <router-link v-if="hasRegisterTypeEnabled() && !queryBindCode" class="register" :to="{ name: 'register' }">
+              {{ t("authentication.registerLink") }}
            </router-link>
          </div>
-
-          <router-link v-if="hasRegisterTypeEnabled() && !queryBindCode" class="register" :to="{ name: 'register' }">
-            {{ t("authentication.registerLink") }}
-          </router-link>
-        </div>
-      </a-form-item>
+        </a-form-item>
+      </template>

      <div v-if="!queryBindCode && settingStore.sysPublic.oauthEnabled && settingStore.isPlus" class="w-full">
-        <oauth-footer></oauth-footer>
+        <oauth-footer :oauth-only="isOauthOnly"></oauth-footer>
      </div>
    </a-form>
    <a-form v-else ref="twoFactorFormRef" class="user-layout-login" :model="twoFactor" v-bind="layout">
@@ -89,7 +92,7 @@
  </div>
 </template>
 <script lang="ts">
-import { defineComponent, nextTick, reactive, ref, toRaw } from "vue";
+import { computed, defineComponent, nextTick, reactive, ref, toRaw } from "vue";
 import { useUserStore } from "/src/store/user";
 import { useSettingStore } from "/@/store/settings";
 import { utils } from "@fast-crud/fast-crud";
@@ -110,6 +113,7 @@ export default defineComponent({

    const queryBindCode = ref(route.query.bindCode as string | undefined);

+    const queryOauthOnly = route.query.oauthOnly as string;
    const urlLoginType = route.query.loginType as string | undefined;
    const verifyCodeInputRef = ref();
    const loading = ref(false);
@@ -231,6 +235,12 @@ export default defineComponent({
    const captchaInputRef = ref();
    const captchaInputForSmsCode = ref();

+    const isOauthOnly = computed(() => {
+      if (queryOauthOnly === "false" || queryOauthOnly === "0") {
+        return false;
+      }
+      return sysPublicSettings.oauthOnly && settingStore.isPlus && sysPublicSettings.oauthEnabled;
+    });
    return {
      t,
      loading,
@@ -238,6 +248,7 @@ export default defineComponent({
      formRef,
      rules,
      layout,
+      isOauthOnly,
      handleFinishFailed,
      handleFinish,
      resetForm,
@@ -266,6 +277,11 @@ export default defineComponent({
    //  font-size: 14px;
    //}

+    .fs-icon {
+      // color: rgba(0, 0, 0, 0.45);
+      margin-right: 4px;
+    }
+
    .login-title {
      font-size: 18px;
      text-align: center;
@@ -319,11 +335,6 @@ export default defineComponent({
      }
    }

-    .fs-icon {
-      color: rgba(0, 0, 0, 0.45);
-      margin-right: 4px;
-    }
-
    .ant-input-affix-wrapper {
      line-height: 1.8 !important;
      font-size: 14px !important;
@@ -2,13 +2,14 @@ import { request } from "/src/api/service";

 const apiPrefix = "/oauth";

-export async function OauthLogin(type: string, forType?: string) {
+export async function OauthLogin(type: string, forType?: string, from?: string) {
  return await request({
    url: apiPrefix + `/login`,
    method: "post",
    data: {
      type,
      forType: forType || "login",
+      from: from || "web",
    },
  });
 }
@@ -53,8 +53,13 @@ async function handleOauthToken() {
  }
  if (res.bindRequired) {
    //需要绑定
-    bindRequired.value = true;
    bindCode.value = res.validationCode;
+    //如果开启了自动注册，默认自动注册账号
+    if (settingStore.sysPublic.registerEnabled) {
+      autoRegister();
+    } else {
+      bindRequired.value = true;
+    }
  }
 }

@@ -64,7 +69,7 @@ onMounted(async () => {
  }

  if (forType === "bind") {
-    //绑定第三方账号
+    //从用户中心页面，进行第三方账号的绑定
    await api.BindUser(validationCode);
    notification.success({
      message: "绑定成功",
@@ -1,29 +1,54 @@
 <template>
  <div class="oauth-footer relative">
    <div class="oauth-title">
-      <div class="oauth-title-text">其他方式登录</div>
+      <div class="oauth-title-text">{{ computedTitle }}</div>
    </div>
-    <div v-for="item in oauthList" :key="item.type">
-      <div class="oauth-icon-button pointer" @click="goOauthLogin(item.name)">
-        <div><fs-icon :icon="item.icon" class="text-blue-600 text-40" /></div>
-        <div>{{ item.title }}</div>
-      </div>
+    <div class="flex justify-center items-center gap-4">
+      <template v-for="item in oauthProviderList" :key="item.type">
+        <div v-if="item.addonId" class="oauth-icon-button pointer" @click="goOauthLogin(item.name)">
+          <div><fs-icon :icon="item.icon" class="text-blue-600 text-40" /></div>
+          <div>{{ item.addonTitle || item.title }}</div>
+        </div>
+      </template>
    </div>
  </div>
 </template>
 <script setup lang="ts">
-import { onMounted, ref } from "vue";
+import { computed, onMounted, ref } from "vue";
 import * as api from "./api";
+import { useI18n } from "vue-i18n";
+import { useSettingStore } from "/@/store/settings";
+import { useRoute } from "vue-router";

-const oauthList = ref([]);
+const oauthProviderList = ref([]);
+const props = defineProps<{
+  oauthOnly?: boolean;
+}>();

+const { t } = useI18n();
+const computedTitle = computed(() => {
+  return props.oauthOnly ? t("authentication.oauthOnlyLoginTitle") : t("authentication.oauthLoginTitle");
+});
+
+const settingStore = useSettingStore();
+
+const route = useRoute();
+const queryOauthOnly = route.query.oauthOnly as string;
 onMounted(async () => {
-  oauthList.value = await api.GetOauthProviders();
+  oauthProviderList.value = await api.GetOauthProviders();
+  //如果开启了自动跳转登录
+  if (settingStore.sysPublic.oauthAutoRedirect && queryOauthOnly !== "false") {
+    const firstOauth = oauthProviderList.value.find(item => item.addonId > 0);
+    if (firstOauth) {
+      goOauthLogin(firstOauth.name);
+    }
+  }
 });

 async function goOauthLogin(type: string) {
  //获取第三方登录URL
-  const res = await api.OauthLogin(type);
+  const from = "web";
+  const res = await api.OauthLogin(type, from);
  const loginUrl = res.loginUrl;
  window.location.href = loginUrl;
 }
@@ -78,7 +103,8 @@ async function goOauthLogin(type: string) {
    border-radius: 100px;
    .fs-icon {
      font-size: 36px;
-      color: #006be6 !important;
+      color: #006be6;
+      margin: 0px !important;
    }
  }
 }
@@ -93,6 +93,7 @@ export type PluginConfigBean = {
 export type CertApplyPluginSysInput = {
  googleCommonEabAccessId?: number;
  zerosslCommonEabAccessId?: number;
+  litesslCommonEabAccessId?: number;
 };
 export type PluginSysSetting<T> = {
  sysSetting: {
@@ -26,6 +26,16 @@
          </div>
        </a-form-item>

+        <a-form-item label="公共litessl EAB授权" :name="['CertApply', 'sysSetting', 'input', 'litesslCommonEabAccessId']">
+          <access-selector v-model:model-value="formState.CertApply.sysSetting.input.litesslCommonEabAccessId" type="eab" from="sys"></access-selector>
+          <div class="helper">
+            <div>设置公共litessl EAB授权给用户使用，避免用户自己获取litessl EAB授权</div>
+            <div>
+              <a href="https://freessl.cn/automation/eab-manager">litessl EAB授权管理 </a>
+            </div>
+          </div>
+        </a-form-item>
+
        <a-form-item :wrapper-col="{ offset: 8, span: 16 }">
          <a-button :loading="saveLoading" type="primary" html-type="submit">保存</a-button>
        </a-form-item>
@@ -114,7 +114,7 @@ export async function GetSmsTypeDefine(type: string) {

 export async function GetOauthProviders() {
  return await request({
-    url: apiPrefix + "/oauth/providers",
+    url: "/oauth/providers",
    method: "post",
  });
 }
@@ -11,6 +11,9 @@
        <a-tab-pane key="register" :tab="t('certd.sys.setting.registerSetting')">
          <SettingRegister v-if="activeKey === 'register'" />
        </a-tab-pane>
+        <a-tab-pane key="oauth" :tab="t('certd.sys.setting.oauthSetting')">
+          <SettingOauth v-if="activeKey === 'oauth'" />
+        </a-tab-pane>
        <a-tab-pane v-if="settingsStore.isComm" key="payment" :tab="t('certd.sys.setting.paymentSetting')">
          <SettingPayment v-if="activeKey === 'payment'" />
        </a-tab-pane>
@@ -35,6 +38,7 @@ import SettingPayment from "/@/views/sys/settings/tabs/payment.vue";
 import SettingSafe from "/@/views/sys/settings/tabs/safe.vue";
 import SettingCaptcha from "/@/views/sys/settings/tabs/captcha.vue";
 import SettingPipeline from "/@/views/sys/settings/tabs/pipeline.vue";
+import SettingOauth from "/@/views/sys/settings/tabs/oauth.vue";
 import { useRoute, useRouter } from "vue-router";
 import { ref } from "vue";
 import { useSettingStore } from "/@/store/settings";
@@ -47,9 +51,7 @@ const settingsStore = useSettingStore();
 const activeKey = ref("base");
 const route = useRoute();
 const router = useRouter();
-if (route.query.tab) {
-  activeKey.value = (route.query.tab as string) || "base";
-}
+activeKey.value = (route.query.tab as string) || "base";

 function onChange(value: string) {
  // activeKey.value = value;
@@ -0,0 +1,151 @@
+<template>
+  <div class="sys-settings-form sys-settings-oauth">
+    <a-form :model="formState" name="register" :label-col="{ span: 8 }" :wrapper-col="{ span: 16 }" autocomplete="off" @finish="onFinish">
+      <a-form-item :label="t('certd.sys.setting.enableOauth')" :name="['public', 'oauthEnabled']">
+        <div class="flex-o">
+          <a-switch v-model:checked="formState.public.oauthEnabled" :disabled="!settingsStore.isPlus" :title="t('certd.plusFeature')" />
+          <vip-button class="ml-5" mode="button"></vip-button>
+        </div>
+      </a-form-item>
+      <a-form-item v-if="formState.public.oauthEnabled" :label="t('certd.sys.setting.oauthProviders')" :name="['public', 'oauthProviders']">
+        <div class="flex flex-wrap">
+          <table class="w-full table-auto border-collapse border border-gray-400">
+            <thead>
+              <tr>
+                <th class="border border-gray-300 px-4 py-2 w-1/3">{{ t("certd.sys.setting.oauthType") }}</th>
+                <th class="border border-gray-300 px-4 py-2 w-1/3">{{ t("certd.sys.setting.oauthCallback") }}</th>
+                <th class="border border-gray-300 px-4 py-2 w-1/3">{{ t("certd.sys.setting.oauthConfig") }}</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr v-for="(item, key) of oauthProviders" :key="key">
+                <td class="border border-gray-300 px-4 py-2">
+                  <div class="flex items-center" :title="item.desc">
+                    <fs-icon :icon="item.icon" class="mr-2 text-blue-600" />
+                    {{ item.title }}
+                  </div>
+                </td>
+                <td class="border border-gray-300 px-4 py-2 overflow-ellipsis" :title="t('certd.sys.setting.oauthCallbackHelper')">
+                  <fs-copyable :model-value="buildCallbackUrl(item.name)">
+                    {{ t("certd.sys.setting.oauthCallbackCopy") }}
+                  </fs-copyable>
+                </td>
+                <td class="border border-gray-300 px-4 py-2">
+                  <AddonSelector v-model:model-value="item.addonId" addon-type="oauth" from="sys" :type="item.name" :placeholder="t('certd.sys.setting.oauthProviderSelectorPlaceholder')" />
+                </td>
+              </tr>
+            </tbody>
+          </table>
+        </div>
+      </a-form-item>
+      <a-form-item v-if="formState.public.oauthEnabled" :label="t('certd.sys.setting.oauthOnly')" :name="['public', 'oauthOnly']">
+        <div class="flex-o">
+          <a-switch v-model:checked="formState.public.oauthOnly" :disabled="!settingsStore.isPlus" :title="t('certd.plusFeature')" />
+        </div>
+        <div class="helper">{{ t("certd.sys.setting.oauthOnlyHelper") }}</div>
+      </a-form-item>
+      <a-form-item v-if="formState.public.oauthEnabled" :label="t('certd.sys.setting.oauthAutoRedirect')" :name="['public', 'oauthAutoRedirect']">
+        <div class="flex-o">
+          <a-switch v-model:checked="formState.public.oauthAutoRedirect" :disabled="!settingsStore.isPlus" :title="t('certd.plusFeature')" />
+        </div>
+        <div class="helper">{{ t("certd.sys.setting.oauthAutoRedirectHelper") }}</div>
+      </a-form-item>
+      <a-form-item v-if="formState.public.oauthEnabled" :label="t('certd.sys.setting.oauthAutoRegister')" :name="['public', 'oauthAutoRegister']">
+        <div class="flex-o">
+          <a-switch
+            v-model:checked="formState.public.oauthAutoRegister"
+            :checked-children="t('certd.sys.setting.oauthAutoRegisterCheckedText')"
+            :un-checked-children="t('certd.sys.setting.oauthAutoRegisterUnCheckedText')"
+            :disabled="!settingsStore.isPlus"
+            :title="t('certd.plusFeature')"
+          />
+        </div>
+        <div class="helper">{{ t("certd.sys.setting.oauthAutoRegisterHelper") }}</div>
+      </a-form-item>
+      <a-form-item label=" " :colon="false" :wrapper-col="{ span: 16 }">
+        <a-button :loading="saveLoading" type="primary" html-type="submit">{{ t("certd.saveButton") }}</a-button>
+      </a-form-item>
+    </a-form>
+  </div>
+</template>
+
+<script setup lang="tsx">
+import { notification } from "ant-design-vue";
+import { merge } from "lodash-es";
+import { reactive, ref, Ref } from "vue";
+import AddonSelector from "../../../certd/addon/addon-selector/index.vue";
+import { useSettingStore } from "/@/store/settings";
+import * as api from "/@/views/sys/settings/api";
+import { SysSettings } from "/@/views/sys/settings/api";
+import { useI18n } from "/src/locales";
+const { t } = useI18n();
+
+defineOptions({
+  name: "SettingOauth",
+});
+
+const formState = reactive<Partial<SysSettings>>({
+  public: {},
+  private: {},
+});
+
+const oauthProviders = ref([]);
+async function loadOauthProviders() {
+  oauthProviders.value = await api.GetOauthProviders();
+}
+
+function fillOauthProviders(form: any) {
+  const providers: any = {};
+  for (const item of oauthProviders.value) {
+    const type = item.name;
+    providers[type] = {
+      type: type,
+      title: item.title,
+      icon: item.icon,
+      addonId: item.addonId || null,
+    };
+  }
+  form.public.oauthProviders = providers;
+  return providers;
+}
+
+async function loadSysSettings() {
+  const data: any = await api.SysSettingsGet();
+  merge(formState, data);
+
+  await loadOauthProviders();
+}
+
+const saveLoading = ref(false);
+loadSysSettings();
+const settingsStore = useSettingStore();
+const onFinish = async (form: any) => {
+  try {
+    saveLoading.value = true;
+    fillOauthProviders(form);
+    await api.SysSettingsSave(form);
+    await settingsStore.loadSysSettings();
+    notification.success({
+      message: t("certd.saveSuccess"),
+    });
+    await loadOauthProviders();
+  } finally {
+    saveLoading.value = false;
+  }
+};
+
+function buildCallbackUrl(type: string) {
+  return `${window.location.origin}/api/oauth/callback/${type}`;
+}
+</script>
+<style lang="less">
+.sys-settings-oauth {
+  width: 1000px !important;
+
+  .addon-selector {
+    .inner {
+      justify-content: space-between;
+    }
+  }
+}
+</style>
@@ -55,39 +55,6 @@
          </a-form-item>
        </template>
      </template>
-
-      <a-form-item :label="t('certd.sys.setting.enableOauth')" :name="['public', 'oauthEnabled']">
-        <div class="flex-o">
-          <a-switch v-model:checked="formState.public.oauthEnabled" :disabled="!settingsStore.isPlus" :title="t('certd.plusFeature')" />
-          <vip-button class="ml-5" mode="button"></vip-button>
-        </div>
-      </a-form-item>
-      <a-form-item v-if="formState.public.oauthEnabled" :label="t('certd.sys.setting.oauthProviders')" :name="['public', 'oauthProviders']">
-        <div class="flex flex-wrap">
-          <table class="w-full table-auto border-collapse border border-gray-400">
-            <thead>
-              <tr>
-                <th class="border border-gray-300 px-4 py-2 w-1/2">{{ t("certd.sys.setting.oauthType") }}</th>
-                <th class="border border-gray-300 px-4 py-2 w-1/2">{{ t("certd.sys.setting.oauthConfig") }}</th>
-              </tr>
-            </thead>
-            <tbody>
-              <tr v-for="(item, key) of oauthProviders" :key="key">
-                <td class="border border-gray-300 px-4 py-2">
-                  <div class="flex items-center" :title="item.desc">
-                    <fs-icon :icon="item.icon" class="mr-2 text-blue-600" />
-                    {{ item.title }}
-                  </div>
-                </td>
-                <td class="border border-gray-300 px-4 py-2">
-                  <AddonSelector v-model:model-value="item.addonId" addon-type="oauth" from="sys" :type="item.name" :placeholder="t('certd.sys.setting.oauthProviderSelectorPlaceholder')" />
-                </td>
-              </tr>
-            </tbody>
-          </table>
-        </div>
-      </a-form-item>
-
      <a-form-item label=" " :colon="false" :wrapper-col="{ span: 16 }">
        <a-button :loading="saveLoading" type="primary" html-type="submit">{{ t("certd.saveButton") }}</a-button>
      </a-form-item>
@@ -96,14 +63,13 @@
 </template>

 <script setup lang="tsx">
-import { computed, reactive, ref, Ref } from "vue";
-import { GetSmsTypeDefine, SysSettings } from "/@/views/sys/settings/api";
-import * as api from "/@/views/sys/settings/api";
-import { merge } from "lodash-es";
-import { useSettingStore } from "/@/store/settings";
 import { notification } from "ant-design-vue";
+import { merge } from "lodash-es";
+import { reactive, ref, Ref } from "vue";
+import { useSettingStore } from "/@/store/settings";
+import * as api from "/@/views/sys/settings/api";
+import { SysSettings } from "/@/views/sys/settings/api";
 import { useI18n } from "/src/locales";
-import AddonSelector from "../../../certd/addon/addon-selector/index.vue";
 const { t } = useI18n();

 defineOptions({
@@ -190,34 +156,6 @@ async function loadTypeDefine(type: string) {
  smsTypeDefineInputs.value = inputs;
 }

-const oauthProviders = ref([]);
-async function loadOauthProviders() {
-  let list: any = await api.GetOauthProviders();
-  oauthProviders.value = list;
-  for (const item of list) {
-    const type = item.name;
-    const provider = formState.public.oauthProviders?.[type];
-    if (provider) {
-      item.addonId = provider.addonId;
-    }
-  }
-}
-
-function fillOauthProviders(form: any) {
-  const providers: any = {};
-  for (const item of oauthProviders.value) {
-    const type = item.name;
-    providers[type] = {
-      type: type,
-      title: item.title,
-      icon: item.icon,
-      addonId: item.addonId || null,
-    };
-  }
-  form.public.oauthProviders = providers;
-  return providers;
-}
-
 async function loadSysSettings() {
  const data: any = await api.SysSettingsGet();
  merge(formState, data);
@@ -232,7 +170,6 @@ async function loadSysSettings() {
  if (!settingsStore.isComm) {
    formState.public.smsLoginEnabled = false;
  }
-  await loadOauthProviders();
 }

 const saveLoading = ref(false);
@@ -241,7 +178,6 @@ const settingsStore = useSettingStore();
 const onFinish = async (form: any) => {
  try {
    saveLoading.value = true;
-    fillOauthProviders(form);
    await api.SysSettingsSave(form);
    await settingsStore.loadSysSettings();
    notification.success({
@@ -253,6 +189,13 @@ const onFinish = async (form: any) => {
 };
 </script>
 <style lang="less">
-.sys-settings-site {
+.sys-settings-register {
+  width: 1000px !important;
+
+  .addon-selector {
+    .inner {
+      justify-content: space-between;
+    }
+  }
 }
 </style>
@@ -3,6 +3,32 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.37.14](https://github.com/certd/certd/compare/v1.37.13...v1.37.14) (2025-12-02)
+
+**Note:** Version bump only for package @certd/ui-server
+
+## [1.37.13](https://github.com/certd/certd/compare/v1.37.12...v1.37.13) (2025-12-02)
+
+### Bug Fixes
+
+* 修复西部数据返回信息乱码问题 ([78b1650](https://github.com/certd/certd/commit/78b1650bdb071c858b3f90d53a700d11ee6de328))
+* 修复西部数码使用域名级别的key申请证书失败的问题 ([5edc72d](https://github.com/certd/certd/commit/5edc72d47550b8e3364dabda70a41cce75d87956))
+
+### Performance Improvements
+
+* 第三方登录允许选择logo ([bb3085e](https://github.com/certd/certd/commit/bb3085ef84201ccd2dc632ba8c5097cb00258be4))
+* 支持OIDC单点登录 ([fbf12f1](https://github.com/certd/certd/commit/fbf12f16b5eaa7676fd41923587bf6bd2595adba))
+
+## [1.37.12](https://github.com/certd/certd/compare/v1.37.11...v1.37.12) (2025-11-29)
+
+### Bug Fixes
+
+* 修复waf tls版本号小写 ([0adcc6a](https://github.com/certd/certd/commit/0adcc6a8d194469be0c26940ed4837fb34929b68))
+
+### Performance Improvements
+
+* 支持微信扫码登录 ([73325aa](https://github.com/certd/certd/commit/73325aaefb0e750a22aaac40929e7bf3f5864996))
+
 ## [1.37.11](https://github.com/certd/certd/compare/v1.37.10...v1.37.11) (2025-11-28)

 ### Bug Fixes
@@ -1,6 +1,6 @@
 {
  "name": "@certd/ui-server",
-  "version": "1.37.11",
+  "version": "1.37.14",
  "description": "fast-server base midway",
  "private": true,
  "type": "module",
@@ -45,20 +45,20 @@
    "@aws-sdk/client-cloudfront": "^3.699.0",
    "@aws-sdk/client-iam": "^3.699.0",
    "@aws-sdk/client-s3": "^3.705.0",
-    "@certd/acme-client": "^1.37.11",
-    "@certd/basic": "^1.37.11",
-    "@certd/commercial-core": "^1.37.11",
+    "@certd/acme-client": "^1.37.14",
+    "@certd/basic": "^1.37.14",
+    "@certd/commercial-core": "^1.37.14",
    "@certd/cv4pve-api-javascript": "^8.4.2",
-    "@certd/jdcloud": "^1.37.11",
-    "@certd/lib-huawei": "^1.37.11",
-    "@certd/lib-k8s": "^1.37.11",
-    "@certd/lib-server": "^1.37.11",
-    "@certd/midway-flyway-js": "^1.37.11",
-    "@certd/pipeline": "^1.37.11",
-    "@certd/plugin-cert": "^1.37.11",
-    "@certd/plugin-lib": "^1.37.11",
-    "@certd/plugin-plus": "^1.37.11",
-    "@certd/plus-core": "^1.37.11",
+    "@certd/jdcloud": "^1.37.14",
+    "@certd/lib-huawei": "^1.37.14",
+    "@certd/lib-k8s": "^1.37.14",
+    "@certd/lib-server": "^1.37.14",
+    "@certd/midway-flyway-js": "^1.37.14",
+    "@certd/pipeline": "^1.37.14",
+    "@certd/plugin-cert": "^1.37.14",
+    "@certd/plugin-lib": "^1.37.14",
+    "@certd/plugin-plus": "^1.37.14",
+    "@certd/plus-core": "^1.37.14",
    "@huaweicloud/huaweicloud-sdk-cdn": "^3.1.120",
    "@huaweicloud/huaweicloud-sdk-core": "^3.1.120",
    "@koa/cors": "^5.0.0",
@@ -1,15 +1,15 @@
-import { addonRegistry, BaseController, Constants, SysInstallInfo, SysSettingsService } from "@certd/lib-server";
-import { ALL, Body, Controller, Get, Inject, Param, Post, Provide, Query } from "@midwayjs/core";
-import { AddonGetterService } from "../../../modules/pipeline/service/addon-getter-service.js";
-import { IOauthProvider } from "../../../plugins/plugin-oauth/api.js";
-import { LoginService } from "../../../modules/login/service/login-service.js";
-import { CodeService } from "../../../modules/basic/service/code-service.js";
-import { UserService } from "../../../modules/sys/authority/service/user-service.js";
-import { UserEntity } from "../../../modules/sys/authority/entity/user.js";
 import { logger, simpleNanoId, utils } from "@certd/basic";
-import { OauthBoundService } from "../../../modules/login/service/oauth-bound-service.js";
-import { OauthBoundEntity } from "../../../modules/login/entity/oauth-bound.js";
+import { addonRegistry, AddonService, BaseController, Constants, SysInstallInfo, SysSettingsService } from "@certd/lib-server";
 import { checkPlus } from "@certd/plus-core";
+import { ALL, Body, Controller, Get, Inject, Param, Post, Provide, Query } from "@midwayjs/core";
+import { CodeService } from "../../../modules/basic/service/code-service.js";
+import { OauthBoundEntity } from "../../../modules/login/entity/oauth-bound.js";
+import { LoginService } from "../../../modules/login/service/login-service.js";
+import { OauthBoundService } from "../../../modules/login/service/oauth-bound-service.js";
+import { AddonGetterService } from "../../../modules/pipeline/service/addon-getter-service.js";
+import { UserEntity } from "../../../modules/sys/authority/entity/user.js";
+import { UserService } from "../../../modules/sys/authority/service/user-service.js";
+import { IOauthProvider } from "../../../plugins/plugin-oauth/api.js";

 /**
 */
@@ -31,6 +31,9 @@ export class ConnectController extends BaseController {
  @Inject()
  oauthBoundService: OauthBoundService;

+  @Inject()
+  addonService: AddonService;
+


  private async getOauthProvider(type: string) {
@@ -51,14 +54,14 @@ export class ConnectController extends BaseController {
  }

  @Post('/login', { summary: Constants.per.guest })
-  public async login(@Body(ALL) body: { type: string, forType?:string }) {
+  public async login(@Body(ALL) body: { type: string, forType?:string ,from?:string }) {

    const addon = await this.getOauthProvider(body.type);
    const installInfo = await this.sysSettingsService.getSetting<SysInstallInfo>(SysInstallInfo);
    const bindUrl = installInfo?.bindUrl || "";
    //构造登录url
    const redirectUrl = `${bindUrl}api/oauth/callback/${body.type}`;
-    const { loginUrl, ticketValue } = await addon.buildLoginUrl({ redirectUri: redirectUrl, forType: body.forType });
+    const { loginUrl, ticketValue } = await addon.buildLoginUrl({ redirectUri: redirectUrl, forType: body.forType ,from: body.from || "web" });
    const ticket = this.codeService.setValidationValue(ticketValue)
    this.ctx.cookies.set("oauth_ticket", ticket, {
      httpOnly: true,
@@ -118,6 +121,14 @@ export class ConnectController extends BaseController {

  }

+  @Post('/getLogoutUrl', { summary: Constants.per.guest })
+  public async logout(@Body(ALL) body: any) {
+    checkPlus()
+    const addon = await this.getOauthProvider(body.type);
+    const { logoutUrl } = await addon.buildLogoutUrl(body);
+    return this.ok({ logoutUrl });
+  }
+

  @Post('/token', { summary: Constants.per.guest })
  public async token(@Body(ALL) body: { validationCode: string, type: string }) {
@@ -217,10 +228,41 @@ export class ConnectController extends BaseController {
    return this.ok(bounds);
  }

-  @Post('/providers', { summary: Constants.per.guest })
+
+   @Post('/providers', { summary: Constants.per.guest })
  public async providers() {
-    const list = addonRegistry.getDefineList("oauth");
+    const defineList = addonRegistry.getDefineList("oauth");
+
+    const publicSetting = await this.sysSettingsService.getPublicSettings();
+    const oauthProviders = publicSetting.oauthProviders || {};
+    const list = [];
+
+    for (const item of defineList) {
+      const type = item.name 
+      const conf = oauthProviders[type];
+      const provider:any = {
+        ...item,
+      }
+      delete provider.input
+      if (conf && conf.addonId) {
+        const addonEntity = await this.addonService.info(conf.addonId);
+        if (addonEntity) {
+          provider.addonId = conf.addonId;
+          provider.addonTitle = addonEntity.name;
+
+          const addon = await this.addonGetterService.getAddonById(conf.addonId,true,0);
+          const {logoutUrl} = await addon.buildLogoutUrl();
+          if (logoutUrl){
+            provider.logoutUrl = logoutUrl;
+          }
+          if(addon.icon){
+            provider.icon = addon.icon;
+          }
+        }
+      }
+      list.push(provider);
+    }
+
    return this.ok(list);
  }
-
 }
@@ -39,3 +39,4 @@ export * from './plugin-captcha/index.js'
 export * from './plugin-xinnet/index.js'
 export * from './plugin-xinnetconnet/index.js'
 export * from './plugin-oauth/index.js'
+export * from './plugin-cmcc/index.js'
@@ -93,13 +93,13 @@ export class AliyunDeployCertToWaf extends AbstractTaskPlugin {

  @TaskInput({
    title: 'TLS版本',
-    value: 'TLSv1.2',
+    value: 'tlsv1.2',
    component: {
      name: 'a-select',
      options: [
-        { value: 'TLSv1', label: 'TLSv1' },
-        { value: 'TLSv1.1', label: 'TLSv1.1' },
-        { value: 'TLSv1.2', label: 'TLSv1.2' },
+        { value: 'tlsv1', label: 'TLSv1' },
+        { value: 'tlsv1.1', label: 'TLSv1.1' },
+        { value: 'tlsv1.2', label: 'TLSv1.2' },
      ],
    },
    required: true,
@@ -192,7 +192,7 @@ export class AliyunDeployCertToWaf extends AbstractTaskPlugin {
        Redirect: JSON.stringify(redirect),
        Listen: JSON.stringify(listen),
        Domain: siteDomain,
-        TLSVersion: this.tlsVersion || 'TLSv1.2',
+        TLSVersion: this.tlsVersion || 'tlsv1.2',
        EnableTLSv3: this.enableTLSv3 ?? true,
      };
      const res = await client.request('ModifyDomain', updateParams);
@@ -0,0 +1,66 @@
+import { AccessInput, BaseAccess, IsAccess } from "@certd/pipeline";
+import { CmccClient } from "./cmcc-client.js";
+
+/**
+ * 
+ *  tenantId: string;
+  tenantKey: string;
+  endpoint?: string;
+ */
+@IsAccess({
+  name: "cmcc",
+  title: "中国移动CND授权",
+  desc: "",
+  icon: "clarity:plugin-line"
+})
+export class CmccAccess extends BaseAccess {
+
+  @AccessInput({
+    title: 'TenantID',
+    component: {
+      placeholder: 'TenantID',
+    },
+    required: true,
+  })
+  tenantId = '';
+
+
+  @AccessInput({
+    title: 'TenantKey',
+    component: {
+      placeholder: 'TenantKey',
+    },
+    required: true,
+    encrypt: true,
+  })
+  tenantKey = '';
+
+
+  @AccessInput({
+    title: "测试",
+    component: {
+      name: "api-test",
+      action: "TestRequest"
+    },
+    helper: "点击测试接口是否正常"
+  })
+  testRequest = true;
+
+  async onTestRequest() {
+    const client = await this.getCmccClient()
+    await client.getDomainList({})
+    return "ok"
+  }
+
+  async getCmccClient() {
+    return new CmccClient({
+      tenantId: this.tenantId,
+      tenantKey: this.tenantKey,
+      http: this.ctx.http,
+      logger: this.ctx.logger,
+    })
+  }
+}
+
+
+new CmccAccess();
@@ -0,0 +1,405 @@
+import { HttpClient, ILogger } from '@certd/basic';
+import { CertInfo, CertReader } from '@certd/plugin-cert';
+import * as crypto from 'crypto';
+export interface CmcdnConfig {
+  tenantId: string;
+  tenantKey: string;
+  endpoint?: string;
+
+  http: HttpClient;
+  logger: ILogger;
+}
+/**
+ * 移动CDN平台SDK
+ */
+export class CmccClient {
+  private config: Required<CmcdnConfig>;
+  private token: string | null = null;
+  private tokenExpiresAt: number | null = null;
+  private http: HttpClient;
+  private logger: ILogger;
+
+  /**
+   * 构造函数
+   * @param config 配置信息
+   */
+  constructor(config: CmcdnConfig) {
+    this.config = {
+      endpoint: 'https://p.cdn.10086.cn/',
+      ...config,
+    };
+    this.http = config.http
+    this.logger = config.logger;
+
+    if (!this.config.tenantId) {
+      throw new Error('tenantId is required');
+    }
+
+    if (!this.config.tenantKey) {
+      throw new Error('tenantKey is required');
+    }
+  }
+
+  /**
+   * 生成SHA256哈希
+   * @param data 输入数据
+   * @returns SHA256哈希值
+   */
+  private sha256Hex(data: string): string {
+    return crypto.createHash('sha256').update(data).digest('hex');
+  }
+
+  /**
+   * 获取当前ISO8601格式时间
+   * @returns ISO8601时间字符串
+   */
+  private getCurrentIsoTime(): string {
+    return new Date().toISOString();
+  }
+
+  /**
+   * 生成认证请求签名
+   * @param datetime 请求时间
+   * @returns 签名
+   */
+  private generateAuthSign(datetime: string): string {
+    const signData = `${this.config.tenantId}${datetime}${this.config.tenantKey}`;
+    return this.sha256Hex(signData);
+  }
+
+  /**
+   * 生成API请求签名
+   * @param body 请求体
+   * @param token 认证token
+   * @returns 签名
+   */
+  private generateApiSign(body: any, token: string): string {
+    const bodyStr = body ? JSON.stringify(body) : '';
+    return this.sha256Hex(bodyStr + token);
+  }
+
+  /**
+   * 检查token是否有效
+   * @returns token是否有效
+   */
+  private isTokenValid(): boolean {
+    if (!this.token || !this.tokenExpiresAt) {
+      return false;
+    }
+    return Date.now() < this.tokenExpiresAt;
+  }
+
+
+
+  /**
+   * 获取认证token
+   * @returns 认证token
+   */
+  async getToken(): Promise<string> {
+    // 检查是否有有效的token
+    if (this.isTokenValid()) {
+      return this.token!;
+    }
+
+    const datetime = this.getCurrentIsoTime();
+    const sign = this.generateAuthSign(datetime);
+
+    const authRequest = {
+      datetime,
+      authorization: {
+        tenant_id: this.config.tenantId,
+        sign,
+      },
+    };
+
+    const response = await this.http.request({
+      baseURL: this.config.endpoint,
+      url: '/api/authentication',
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json',
+        'Accept': 'application/json',
+      },
+      data: authRequest,
+      skipSslVerify: true,
+      logParams: false,
+      logRes: false,
+      logData: false
+    });
+
+    this.token = response.token;
+    // Token有效期为12小时
+    this.tokenExpiresAt = Date.now() + 12 * 60 * 60 * 1000;
+    return this.token;
+  }
+
+  /**
+   * 调用API
+   * @param req 请求选项
+   * @returns API响应
+   */
+  async doRequest(req: any): Promise<any> {
+    // 获取有效的token
+    const token = await this.getToken();
+
+    // 设置默认headers
+    const defaultHeaders: Record<string, string> = {
+      'Content-Type': 'application/json',
+      'Accept': 'application/vnd.cmcdn+json',
+      'CMCDN-Auth-Token': token,
+    };
+
+    // 生成签名
+    if (req.method === 'POST' || req.method === 'PUT') {
+      const signature = this.generateApiSign(req.data, token);
+      defaultHeaders['HTTP-X-CMCDN-Signature'] = signature;
+    } else {
+      const signature = this.sha256Hex(token);
+      defaultHeaders['HTTP-X-CMCDN-Signature'] = signature;
+    }
+
+    // 合并自定义headers
+    const headers = { ...defaultHeaders, ...req.headers };
+
+    // 发送请求
+    try {
+      const response = await this.http.request({
+        baseURL: this.config.endpoint,
+        url: req.url,
+        method: req.method,
+        headers: headers,
+        data: req.data,
+        skipSslVerify: true,
+        logParams: false,
+        logRes: false,
+        logData: false
+      });
+      if (response.error_code != 0) {
+        this.logger.error(`接口请求失败,${JSON.stringify(response)}`);
+        throw new Error(response.error_msg || "接口请求失败");
+      }
+
+      return response.data;
+    } catch (error) {
+      this.logger.error(`接口请求失败,${error.response?.data?.error_msg || error.message}`);
+      throw new Error(error.response?.data?.error_msg || error.message);
+    }
+  }
+  /**
+   * 清除token
+   */
+  clearToken(): void {
+    this.token = null;
+    this.tokenExpiresAt = null;
+  }
+
+  /**
+   * 获取当前token
+   * @returns 当前token
+   */
+  getCurrentToken(): string | null {
+    return this.token;
+  }
+
+  /**
+   * 
+  域名列表查询
+  本接口由 CDN 运营平台提供 ，所有外部 EC 客户使用。该接口为客户提供该客户各状态域名列表查询。本接口仅支持 JSON 结构。
+  
+  7.1  目录信息
+  
+  
+  /api/domain_list?domainName =${domainName}&domainStatus =${domainStatus}
+  
+  
+  
+  7.2  请求方法
+  
+  GET
+  
+  
+  
+  7.3  响应状态码
+  
+  请求接收成功 ：201 ， body 内容详见下一节；
+  授权错误 ：403；
+  请求错误 ：400；
+  其他 ：见 1.2.5 状态码。
+  
+  
+  7.4  JSON 结构规范
+  7.4.1 请求 URI 参数
+  
+  序号	父元素	元素名称	约束	类型	长度	描述
+  1		domainName	?	String		域名模糊匹配过滤
+  
+  
+  
+  2		domainStatus	?	String		域名状态过滤online：启用
+  offline：停用
+  configuring：配置中
+  configure_failed ：配置失败
+  
+  
+  7.4.2 请求 URI 示例
+  GET： http://xxx.com/api/domain_list?domainName=www.test.com&domainStatus=online
+  
+  
+  
+  7.4.3  响应数据体
+  
+  
+  
+  序号	父元	元素名称	约束	类型	长度	描述
+  1		data	1	array		查询结果
+  2	data	domainName	1	String		加速域名名称
+  3	data	createTime	1	datetime		加速域名创建时间(2017-07-25  17:45:52)
+  4	data	cname	*	String		加速域名对应的 CNAME 域名
+  5	data	type	*	String		域名产品类型：
+  demand:点播产品(视音频/网页、下载);
+  live:直播产品
+  6	data	status	*	String		域名状态：启用
+  停用
+  配置中
+  配置失败待分发
+  已生效启用中
+  删除中
+  
+  
+  7.4.4  响应报文示例
+  
+  
+  {
+  "data": [{
+  "createTime": "2017-07-25 17:45:52",
+  "domainName": "www.ponshine.com",
+  "cname": "www.ponshine.com.cmcdn.cdn.10086.cn", "type ": "demand"
+  },
+  {
+  "createTime": "2018-11-07 22:09:41",
+  "domainName": "www.testcustom.com",
+  "cname": "www.testcustom.com.cmcdn.cdn.10086.cn", "type ": "live"
+  }
+  ]
+  }
+   */
+  async getDomainList(req: { domainName?: string, domainStatus?: string }) {
+
+    const res = await this.doRequest({
+      url: "/api/domain_list",
+      method: "GET",
+      params: {
+        domainName: req.domainName,
+        domainStatus: req.domainStatus,
+      }
+    })
+
+    this.logger.info("getDomainList", res);
+
+    return res.data;
+  }
+
+  /**
+   * /api/config/action?commandType =saveCrt&version =1
+  12.1.2 请求方法
+  新增 POST
+  修改 PUT
+  12.1.3 响应状态码
+  请求接收成功： 200/201 ， body内容详见下一节；
+  授权错误 ：403；
+  请求错误 ：400；
+  其他 ：见1.2.5状态码。
+  12.1.4 JSON 结构规范
+  12.1.4.1请求数据体
+  
+  参数	说明	类型	约束
+  
+  
+  
+  certificate	证书 ，仅支持 PEM 格式，
+  证书内的换行符使用字符串“\n”代替
+  内容如需加密传输可使用
+  PBEWith MD5And DES 加密 ，秘钥将私下
+  提供	
+  
+  
+  string	
+  
+  
+  必选
+  
+  
+  
+  private_key	私钥 ，仅支持 PEM 格式，
+  私钥内的换行符使用字符串“\n”代替
+  内容如需加密传输可使用
+  PBEWith MD5And DES 加密 ，秘钥将私下
+  提供	
+  
+  
+  string	
+  
+  
+  必选
+  
+  crt_name	证书名称 ，不支持修改 ，有传 unique_id
+  时不需要
+  (仅支持英文字母、数字、下划线 ，最大长	
+  string	
+  必选
+  
+  
+  
+    度为 32 个字符)		
+  
+  unique_id	证书唯一 id ，修改证书时该项必选；
+  修改证书时 ，如历史证书已绑定域名，
+  修改后证书也需支持对应域名	
+  string	
+  修改必选
+  contact_name	证书联系人	string	可选
+  contact_mobile	证书联系人手机号	string	可选
+  contact_email	证书联系人邮箱	string	可选
+  
+  12.1.4.2请求报文示例
+   */
+  async uploadCert(req: { cert: CertInfo }) {
+
+    const certReader = new CertReader(req.cert);
+    const res = await this.doRequest({
+      url: "/api/config/action?commandType=saveCrt&version=1",
+      method: "POST",
+      data: {
+        certificate: req.cert.crt,
+        private_key: req.cert.key,
+        crt_name: certReader.buildCertName(),
+      }
+    })
+
+    this.logger.info("uploadCert", res);
+
+    return res;
+  }
+
+  /**
+   * 
+   * @param req 
+   */
+  async deployCertToCdn(req: { domainNames: string[], certId: string }) {
+    // /api/config/action?commandType = manageDomainBaseConfig&version = 1
+    const res = await this.doRequest({
+      url: "/api/config/action?commandType=manageDomainBaseConfig&version=1",
+      method: "PUT",
+      data: {
+        modify_type: 0,
+        domains: req.domainNames,
+        https_enable: true,
+        unique_id: req.certId,
+      }
+    })
+    this.logger.info("deployCertToCdn", res);
+
+    return res.data;
+  }
+
+}
@@ -0,0 +1,2 @@
+export * from './access.js'
+export * from './plugin-deploy-to-cdn.js'
@@ -0,0 +1,126 @@
+import {
+  IsTaskPlugin,
+  PageSearch,
+  pluginGroups,
+  RunStrategy,
+  TaskInput
+} from "@certd/pipeline";
+import { CertApplyPluginNames, CertInfo } from "@certd/plugin-cert";
+import { createCertDomainGetterInputDefine, createRemoteSelectInputDefine } from "@certd/plugin-lib";
+import { AbstractPlusTaskPlugin } from "@certd/plugin-plus";
+import { CmccAccess } from "./access.js";
+
+@IsTaskPlugin({
+  //命名规范，插件类型+功能（就是目录plugin-demo中的demo），大写字母开头，驼峰命名
+  name: "CmccDeployCertToCdn",
+  title: "中国移动-部署证书到CDN",
+  desc: "中国移动自动部署证书到CDN",
+  icon: "svg:icon-lucky",
+  //插件分组
+  group: pluginGroups.cdn.key,
+  needPlus: true,
+  default: {
+    //默认值配置照抄即可
+    strategy: {
+      runStrategy: RunStrategy.SkipWhenSucceed
+    }
+  }
+})
+//类名规范，跟上面插件名称（name）一致
+export class CmccDeployCertToCdn extends AbstractPlusTaskPlugin {
+  //证书选择，此项必须要有
+  @TaskInput({
+    title: "域名证书",
+    helper: "请选择前置任务输出的域名证书",
+    component: {
+      name: "output-selector",
+      from: [...CertApplyPluginNames]
+    }
+    // required: true, // 必填
+  })
+  cert!: CertInfo;
+
+  @TaskInput(createCertDomainGetterInputDefine({ props: { required: false } }))
+  certDomains!: string[];
+
+  //授权选择框
+  @TaskInput({
+    title: "中国移动-授权",
+    component: {
+      name: "access-selector",
+      type: "cmcc" //固定授权类型
+    },
+    required: true //必填
+  })
+  accessId!: string;
+  //
+
+  @TaskInput(
+    createRemoteSelectInputDefine({
+      title: "加速域名",
+      helper: "要更新的中国移动CDN域名",
+      action: CmccDeployCertToCdn.prototype.onGetDomainList.name,
+      pager: false,
+      search: false
+    })
+  )
+  domainList!: string[];
+
+  //插件实例化时执行的方法
+  async onInstance() {
+  }
+
+  //插件执行方法
+  async execute(): Promise<void> {
+    const access = await this.getAccess<CmccAccess>(this.accessId);
+
+    const client = await access.getCmccClient();
+    this.logger.info(`----------- 开始更新证书：${this.domainList}`);
+
+
+    const newCert = await client.uploadCert({
+      cert: this.cert
+    })
+
+    const certId = newCert.unique_id
+    this.logger.info(`----------- 上传证书成功,证书ID:${certId}`);
+
+    await client.deployCertToCdn({
+      certId: certId,
+      domainNames: this.domainList
+    });
+    this.logger.info(`----------- 更新证书${this.domainList}成功,等待10s`);
+    await this.ctx.utils.sleep(10000);
+    this.logger.info("部署完成");
+  }
+
+  async onGetDomainList(data: PageSearch = {}) {
+    const access = await this.getAccess<CmccAccess>(this.accessId);
+    const client= await access.getCmccClient();
+    const res = await client.getDomainList({})
+    const list = res || []
+    if (!list || list.length === 0) {
+      throw new Error("没有找到加速域名");
+    }
+
+
+    /**
+     * certificate-id
+     * name
+     * dns-names
+     */
+    const options = list.map((item: any) => {
+      return {
+        label: `${item.domainName}`,
+        value: item.domainName,
+        domain: item.domainName
+      };
+    });
+    return {
+      list: this.ctx.utils.options.buildGroupOptions(options, this.certDomains),
+    };
+  }
+}
+
+//实例化一下，注册插件
+new CmccDeployCertToCdn();
@@ -37,7 +37,21 @@ export type LoginUrlReply = {
    ticketValue: any;
 }

+export type BuildLoginUrlReq = {
+    redirectUri: string;
+    forType?: string;
+    from?:string;
+}
+
+export type BuildLogoutUrlReq = {
+}
+
+export type LogoutUrlReply = {
+    logoutUrl?: string;
+}
+
 export interface IOauthProvider {
-    buildLoginUrl: (params: { redirectUri: string, forType?: string }) => Promise<LoginUrlReply>;
+    buildLoginUrl: (params: BuildLoginUrlReq) => Promise<LoginUrlReply>;
    onCallback: (params: OnCallbackReq) => Promise<OauthToken>;
+    buildLogoutUrl: (params: BuildLogoutUrlReq) => Promise<LogoutUrlReply>;
 }
@@ -1,2 +1,3 @@
 export * from './api.js'
 export * from './oidc/plugin-oidc.js'
+export * from './wx/plugin-wx.js'
@@ -1,16 +1,26 @@
 import { AddonInput, BaseAddon, IsAddon } from "@certd/lib-server";
-import { IOauthProvider, OnCallbackReq } from "../api.js";
+import { BuildLoginUrlReq, BuildLogoutUrlReq, IOauthProvider, OnCallbackReq } from "../api.js";

@IsAddon({
  addonType: "oauth",
  name: 'oidc',
  title: 'OIDC认证',
  desc: 'OpenID Connect 认证，统一认证服务',
-  icon:"simple-icons:fusionauth",
+  icon:"simple-icons:fusionauth:#006be6",
  showTest: false,
 })
 export class OidcOauthProvider extends BaseAddon implements IOauthProvider {

+  @AddonInput({
+    title: "自定义图标",
+    component: {
+      name:"fs-icon-selector",
+      vModel:"modelValue"
+    },
+    required: false,
+  })
+  icon = "";
+
  @AddonInput({
    title: "ClientId",
    helper: "ClientId / appId",
@@ -29,7 +39,7 @@ export class OidcOauthProvider extends BaseAddon implements IOauthProvider {

  @AddonInput({
    title: "服务地址",
-    helper: "Issuer地址，去掉/.well-known/openid-configuration的服务发现地址",
+    helper: "Issuer地址，服务发现地址去掉/.well-known/openid-configuration",
    component: {
      placeholder: "https://oidc.example.com/oidc",
    },
@@ -56,7 +66,7 @@ export class OidcOauthProvider extends BaseAddon implements IOauthProvider {
    }
  }
  
-  async buildLoginUrl(params: { redirectUri: string, forType?: string }) {
+  async buildLoginUrl(params: BuildLoginUrlReq) {
    const { config, client } = await this.getClient()

    let redirect_uri = new URL(params.redirectUri)
@@ -80,24 +90,16 @@ export class OidcOauthProvider extends BaseAddon implements IOauthProvider {
      code_challenge,
      code_challenge_method: 'S256',
      state,
+      nonce: client.randomNonce(),
    }

-    // if (!config.serverMetadata().supportsPKCE()) {
-    //     /**
-    //      * We cannot be sure the server supports PKCE so we're going to use state too.
-    //      * Use of PKCE is backwards compatible even if the AS doesn't support it which
-    //      * is why we're using it regardless. Like PKCE, random state must be generated
-    //      * for every redirect to the authorization_endpoint.
-    //      */
-    //     parameters.state = client.randomState()
-    // }
-
    let redirectTo = client.buildAuthorizationUrl(config, parameters)
    return {
      loginUrl: redirectTo.href,
      ticketValue: {
        codeVerifier: code_verifier,
        state,
+        nonce: parameters.nonce,
      },
    };
  }
@@ -110,8 +112,9 @@ export class OidcOauthProvider extends BaseAddon implements IOauthProvider {
      config,
      req.currentURL,
      {
-        expectedState: client.skipStateCheck ,
+        expectedState: req.ticketValue.state,
        pkceCodeVerifier: req.ticketValue.codeVerifier,
+        expectedNonce: req.ticketValue.nonce,
      }
    )

@@ -129,4 +132,12 @@ export class OidcOauthProvider extends BaseAddon implements IOauthProvider {
      },
    }
  };
+
+  async buildLogoutUrl(params: BuildLogoutUrlReq) {
+    const { config } = await this.getClient()
+    let logoutUrl =  config.serverMetadata().end_session_endpoint
+    return {
+      logoutUrl: logoutUrl,
+    };
+  }
 }
@@ -0,0 +1,133 @@
+import { AddonInput, BaseAddon, IsAddon } from "@certd/lib-server";
+import { BuildLoginUrlReq, BuildLogoutUrlReq, IOauthProvider, OnCallbackReq } from "../api.js";
+
+@IsAddon({
+  addonType: "oauth",
+  name: 'wx',
+  title: '微信登录',
+  desc: '微信网站应用登录',
+  icon: "ion:logo-wechat:green",
+  showTest: false,
+})
+export class WxOauthProvider extends BaseAddon implements IOauthProvider {
+
+  @AddonInput({
+    title: "AppId",
+    required: true,
+    helper: "在[微信开放平台](https://open.weixin.qq.com/cgi-bin/index)注册网站应用后获取",
+  })
+  appId = "";
+
+  @AddonInput({
+    title: "AppSecretKey",
+    component: {
+      placeholder: "AppSecretKey",
+    },
+    required: true,
+  })
+  appSecretKey = "";
+
+
+  wxAccessToken?: { access_token: string, expires_at: number }
+
+  async buildLoginUrl(params: BuildLoginUrlReq) {
+
+    const from = params.from || "web";
+    const appId = this.appId;
+    const redirect_uri = encodeURIComponent(params.redirectUri);
+    let state: any = {
+      forType: params.forType,
+      from
+    }
+    state = this.ctx.utils.hash.base64(JSON.stringify(state))
+    let scope = "snsapi_userinfo";
+    let loginUrl = `https://open.weixin.qq.com/connect/oauth2/authorize?appid=${appId}&redirect_uri=${redirect_uri}&response_type=code&scope=${scope}&state=${state}#wechat_redirect`
+    if (from === "web") {
+      scope = "snsapi_login";
+      loginUrl = `https://open.weixin.qq.com/connect/qrconnect?appid=${appId}&redirect_uri=${redirect_uri}&response_type=code&scope=${scope}&state=${state}#wechat_redirect`
+    }
+
+    return {
+      loginUrl,
+      ticketValue: {
+        state,
+      },
+    };
+  }
+
+  // async getWxAccessToken() {
+  //   if (this.wxAccessToken && this.wxAccessToken.expires_at > Date.now()) {
+  //     return this.wxAccessToken
+  //   }
+  //   const res = await this.http.request({
+  //     url: "https://api.weixin.qq.com/cgi-bin/token",
+  //     method: "GET",
+  //     params: {
+  //       appid: this.appId,
+  //       secret: this.appSecretKey,
+  //       grant_type: "client_credential",
+  //     },
+  //   })
+  //   this.checkRet(res)
+  //   this.wxAccessToken = {
+  //     access_token: res.access_token,
+  //     expires_at: Date.now() + res.expires_in * 1000,
+  //   }
+  //   return this.wxAccessToken
+  // }
+
+  checkRet(res: any) {
+    if (res.errcode) {
+      throw new Error(res.errmsg)
+    }
+  }
+
+  async onCallback(req: OnCallbackReq) {
+
+
+    // GET https://api.weixin.qq.com/sns/oauth2/access_token?appid=wx520c15f417810387&secret=SECRET&code=CODE&grant_type=authorization_code
+    const res = await this.http.request({
+      url: "https://api.weixin.qq.com/sns/oauth2/access_token",
+      method: "GET",
+      params: {
+        appid: this.appId,
+        secret: this.appSecretKey,
+        code: req.code,
+        grant_type: "authorization_code",
+      },
+    })
+    this.checkRet(res)
+    const accessToken = res.access_token
+
+
+    // GET https://api.weixin.qq.com/sns/userinfo?access_token=ACCESS_TOKEN&openid=OPENID&lang=zh_CN
+    const userInfoRes = await this.http.request({
+      url: "https://api.weixin.qq.com/sns/userinfo",
+      method: "GET",
+      params: {
+        access_token:accessToken,
+        openid: res.openid,
+        lang: "zh_CN",
+      },
+    })
+    this.checkRet(userInfoRes)
+
+    return {
+      token: {
+        accessToken: res.access_token,
+        refreshToken: res.refresh_token,
+        expiresIn: res.expires_in,
+      },
+      userInfo: {
+        openId: res.unionid || res.openid,
+        nickName: userInfoRes.nickname || "",
+        avatar: userInfoRes.headimgurl,
+      },
+    }
+  };
+
+
+  async buildLogoutUrl(params: BuildLogoutUrlReq) {
+    return {};
+  }
+}
@@ -1,6 +1,7 @@
 import { HttpRequestConfig } from '@certd/basic';
 import { IsAccess, AccessInput, BaseAccess } from '@certd/pipeline';
 import qs from 'qs';
+import iconv from 'iconv-lite';
 /**
 * 这个注解将注册一个授权配置
 * 在certd的后台管理系统中，用户可以选择添加此类型的授权
@@ -91,6 +92,27 @@ export class WestAccess extends BaseAccess {
  apidomainkey = '';


+   /**
+   * 授权属性配置
+   */
+  @AccessInput({
+    title: '域名',
+    component: {
+      placeholder: '域名级别的key对应的域名',
+    },
+    encrypt: false,
+    required: false,
+    mergeScript: `
+    return {
+      show:ctx.compute(({form})=>{
+        return form.access.scope === 'domain'
+      })
+    }
+    `,
+  })
+  domain = '';
+
+
  @AccessInput({
    title: "测试",
    component: {
@@ -102,10 +124,44 @@ export class WestAccess extends BaseAccess {
  testRequest = true;

  async onTestRequest() {
+
+    if(this.scope === 'domain'){
+      if(!this.domain){
+        throw new Error('domain 必填');
+      }
+      await this.getDomainRecordList({limit:1});
+      return "ok";
+    }
+
    await this.getDomainList();
    return "ok";
  }

+  async getDomainRecordList(req:{limit:number}){
+     // 获取域名解析记录列表
+    return await this.doDoimainApiRequest('https://api.west.cn/API/v2/domain/dns/',{
+      act:'dnsrec.list',
+      domain:this.domain,
+      limit: req.limit || 10,
+     })
+  }
+
+
+  async doDoimainApiRequest(url: string, data: any = null, method = 'post') {
+    data.apidomainkey = this.apidomainkey;
+    const res = await this.ctx.http.request<any, any>({
+      url,
+      method,
+      data,
+      headers: {
+        'Content-Type': 'application/x-www-form-urlencoded',
+      },
+    });
+    if (res.msg !== 'success') {
+      throw new Error(`${JSON.stringify(res.msg)}`);
+    }
+    return res;
+  }

  async getDomainList() {
    const res = await this.doRequest({
@@ -158,7 +214,7 @@ token=md5(zhangsan + 5dh232kfg!* + 1554691950854)=cfcd208495d565ef66e7dff9f98764
    const headers = {}
    const body: any = {}
    if (method.toUpperCase() === 'POST') {
-      headers['Content-Type'] = 'application/x-www-form-urlencoded';
+      headers['Content-Type'] = 'application/x-www-form-urlencoded; charset=UTF-8';
      body.data = data
    } else if (method.toUpperCase() === 'GET') {
      let queryString = '';
@@ -175,6 +231,25 @@ token=md5(zhangsan + 5dh232kfg!* + 1554691950854)=cfcd208495d565ef66e7dff9f98764
      method,
      ...body,
      headers,
+      responseType: 'arraybuffer', // 关键：获取原始二进制数据
+      transformResponse: [
+        function(data, headers) { // headers 参数包含响应头
+          try {
+            const contentType = headers['content-type'] || '';
+            // 判断是否是 GB2312/GBK 编码
+            if (contentType.includes('gb2312') || contentType.includes('gbk')) {
+              // 使用 iconv-lite 解码
+              data = iconv.decode(data, 'gb2312');
+            }else{
+              // 默认按 UTF-8 处理
+              data = data.toString('utf-8');
+            }
+          } catch (error) {
+            console.error('解码失败:', error);
+          }
+          return JSON.parse(data);
+        }
+      ]
    });
    this.ctx.logger.info(`request ${url} ${method} res:${JSON.stringify(res)}`);
    if (res.msg !== 'success' && res.result!= 200) {
@@ -0,0 +1,91 @@
+import { AbstractDnsProvider, CreateRecordOptions, RemoveRecordOptions } from '@certd/plugin-cert';
+
+import { WestAccess } from './access.js';
+
+type westRecord = {
+  // 这里定义Record记录的数据结构，跟对应云平台接口返回值一样即可，一般是拿到id就行，用于删除txt解析记录，清理申请痕迹
+  code: number;
+  msg: string;
+  body: {
+    record_id: number;
+  };
+};
+
+
+export class WestDnsProviderDomain extends AbstractDnsProvider<westRecord> {
+  access!: WestAccess;
+
+  async onInstance() {
+    this.access = this.ctx.access as WestAccess
+    // 也可以通过ctx成员变量传递context
+    this.logger.debug('access:', this.access);
+    //初始化的操作
+    //...
+  }
+
+  /**
+   * 创建dns解析记录，用于验证域名所有权
+   */
+  async createRecord(options: CreateRecordOptions): Promise<any> {
+    /**
+     * options 参数说明
+     * fullRecord: '_acme-challenge.example.com',
+     * value: 一串uuid
+     * type: 'TXT',
+     * domain: 'example.com'
+     */
+    const { fullRecord, value, type, domain } = options;
+    this.logger.info('添加域名解析：', fullRecord, value, type, domain);
+
+    // 准备要发送到API的请求体
+    const requestBody = {
+      act: 'dnsrec.add', // API动作类型
+      domain: domain, // 域名
+      record_type: 'TXT', // DNS记录类型
+      hostname: fullRecord, // 完整的记录名
+      record_value: value, // 记录的值
+      record_line: '', // 记录线路
+      record_ttl: 60, // TTL (生存时间)，设置为60秒
+    };
+
+    const url = 'https://api.west.cn/API/v2/domain/dns/';
+    const res = await this.access.doDoimainApiRequest(url, requestBody);
+    const record = res as westRecord;
+    this.logger.info(`添加域名解析成功:fullRecord=${fullRecord},value=${value}`);
+    this.logger.info(`dns解析记录:${JSON.stringify(record)}`);
+    // 西部数码生效较慢 增加90秒等待 提高成功率
+    this.logger.info('等待解析生效:wait 90s');
+    await new Promise(resolve => setTimeout(resolve, 90000));
+    return record;
+  }
+
+  /**
+   *  删除dns解析记录,清理申请痕迹
+   * @param options
+   */
+  async removeRecord(options: RemoveRecordOptions<westRecord>): Promise<void> {
+    const { fullRecord, value, domain } = options.recordReq;
+    const record = options.recordRes;
+    this.logger.info('删除域名解析：', fullRecord, value, record);
+    if (!record) {
+      this.logger.info('record不存在');
+      return;
+    }
+    //这里调用删除txt dns解析记录接口
+
+    // 准备要发送到API的请求体
+    const requestBody = {
+      act: 'dnsrec.remove', // API动作类型
+      domain: domain, // 域名
+      record_id: record.body.record_id,
+      hostname: fullRecord, // 完整的记录名
+      record_type: 'TXT', // DNS记录类型
+      record_line: '', // 记录线路
+    };
+
+    const url = 'https://api.west.cn/API/v2/domain/dns/';
+    const res = await this.access.doDoimainApiRequest(url, requestBody);
+    const result = res.result;
+    this.logger.info('删除域名解析成功:', fullRecord, value, JSON.stringify(result));
+  }
+}
@@ -1,5 +1,5 @@
 import { AbstractDnsProvider, CreateRecordOptions, IsDnsProvider, RemoveRecordOptions } from '@certd/plugin-cert';
-
+import { WestDnsProviderDomain } from './dns-provider-domain.js';
 import { WestAccess } from './access.js';

 type westRecord = {
@@ -31,10 +31,26 @@ export class WestDnsProvider extends AbstractDnsProvider<westRecord> {
    //...
  }

+  getDomainProvider(){
+    const provider = new WestDnsProviderDomain();
+    provider.access = this.access;
+    provider.logger = this.logger;
+    provider.ctx = this.ctx;
+    provider.http = this.http;
+    return provider;
+  }
+
  /**
   * 创建dns解析记录，用于验证域名所有权
   */
  async createRecord(options: CreateRecordOptions): Promise<any> {
+
+    if(this.access.scope === 'domain'){
+      //如果是域名级别的，走老接口
+      const provider = this.getDomainProvider();
+      return provider.createRecord(options);
+    }
+
    /**
     * options 参数说明
     * fullRecord: '_acme-challenge.example.com',
@@ -77,6 +93,12 @@ export class WestDnsProvider extends AbstractDnsProvider<westRecord> {
   * @param options
   */
  async removeRecord(options: RemoveRecordOptions<westRecord>): Promise<void> {
+    if(this.access.scope === 'domain'){
+      //如果是域名级别的，走老接口
+      const provider = this.getDomainProvider();
+      return provider.removeRecord(options as any);
+    }
+
    const { fullRecord, value, domain } = options.recordReq;
    const record = options.recordRes;
    this.logger.info('删除域名解析：', fullRecord, value, record);
@@ -46,7 +46,7 @@ importers:
  packages/core/acme-client:
    dependencies:
      '@certd/basic':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../basic
      '@peculiar/x509':
        specifier: ^1.11.0
@@ -210,10 +210,10 @@ importers:
  packages/core/pipeline:
    dependencies:
      '@certd/basic':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../basic
      '@certd/plus-core':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../pro/plus-core
      dayjs:
        specifier: ^1.11.7
@@ -409,7 +409,7 @@ importers:
  packages/libs/lib-k8s:
    dependencies:
      '@certd/basic':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../core/basic
      '@kubernetes/client-node':
        specifier: 0.21.0
@@ -449,19 +449,19 @@ importers:
  packages/libs/lib-server:
    dependencies:
      '@certd/acme-client':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../core/acme-client
      '@certd/basic':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../core/basic
      '@certd/pipeline':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../core/pipeline
      '@certd/plugin-lib':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../plugins/plugin-lib
      '@certd/plus-core':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../pro/plus-core
      '@midwayjs/cache':
        specifier: 3.14.0
@@ -607,16 +607,16 @@ importers:
  packages/plugins/plugin-cert:
    dependencies:
      '@certd/acme-client':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../core/acme-client
      '@certd/basic':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../core/basic
      '@certd/pipeline':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../core/pipeline
      '@certd/plugin-lib':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../plugin-lib
      '@google-cloud/publicca':
        specifier: ^1.3.0
@@ -695,10 +695,10 @@ importers:
        specifier: ^3.787.0
        version: 3.810.0(aws-crt@1.26.2)
      '@certd/basic':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../core/basic
      '@certd/pipeline':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../core/pipeline
      '@kubernetes/client-node':
        specifier: 0.21.0
@@ -783,19 +783,19 @@ importers:
  packages/pro/commercial-core:
    dependencies:
      '@certd/basic':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../core/basic
      '@certd/lib-server':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../libs/lib-server
      '@certd/pipeline':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../core/pipeline
      '@certd/plugin-plus':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../plugin-plus
      '@certd/plus-core':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../plus-core
      '@midwayjs/core':
        specifier: 3.20.11
@@ -880,22 +880,22 @@ importers:
        specifier: ^1.0.2
        version: 1.0.3
      '@certd/basic':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../core/basic
      '@certd/lib-k8s':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../libs/lib-k8s
      '@certd/pipeline':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../core/pipeline
      '@certd/plugin-cert':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../plugins/plugin-cert
      '@certd/plugin-lib':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../plugins/plugin-lib
      '@certd/plus-core':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../plus-core
      ali-oss:
        specifier: ^6.21.0
@@ -998,7 +998,7 @@ importers:
  packages/pro/plus-core:
    dependencies:
      '@certd/basic':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../core/basic
      dayjs:
        specifier: ^1.11.7
@@ -1080,20 +1080,20 @@ importers:
        specifier: ^4.1.0
        version: 4.1.0
      '@fast-crud/editor-code':
-        specifier: ^1.27.4
-        version: 1.27.4
+        specifier: ^1.27.6
+        version: 1.27.6
      '@fast-crud/fast-crud':
-        specifier: ^1.27.4
-        version: 1.27.4(vue@3.5.14(typescript@5.8.3))
+        specifier: ^1.27.6
+        version: 1.27.6(vue@3.5.14(typescript@5.8.3))
      '@fast-crud/fast-extends':
-        specifier: ^1.27.4
-        version: 1.27.4(aws-crt@1.26.2)(vue@3.5.14(typescript@5.8.3))
+        specifier: ^1.27.6
+        version: 1.27.6(aws-crt@1.26.2)(vue@3.5.14(typescript@5.8.3))
      '@fast-crud/ui-antdv4':
-        specifier: ^1.27.4
-        version: 1.27.4
+        specifier: ^1.27.6
+        version: 1.27.6
      '@fast-crud/ui-interface':
-        specifier: ^1.27.4
-        version: 1.27.4
+        specifier: ^1.27.6
+        version: 1.27.6
      '@iconify/tailwind':
        specifier: ^1.2.0
        version: 1.2.0
@@ -1294,10 +1294,10 @@ importers:
        version: 0.1.3(zod@3.24.4)
    devDependencies:
      '@certd/lib-iframe':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../libs/lib-iframe
      '@certd/pipeline':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../core/pipeline
      '@rollup/plugin-commonjs':
        specifier: ^25.0.7
@@ -1480,46 +1480,46 @@ importers:
        specifier: ^3.705.0
        version: 3.810.0(aws-crt@1.26.2)
      '@certd/acme-client':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../core/acme-client
      '@certd/basic':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../core/basic
      '@certd/commercial-core':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../pro/commercial-core
      '@certd/cv4pve-api-javascript':
        specifier: ^8.4.2
        version: 8.4.2
      '@certd/jdcloud':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../libs/lib-jdcloud
      '@certd/lib-huawei':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../libs/lib-huawei
      '@certd/lib-k8s':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../libs/lib-k8s
      '@certd/lib-server':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../libs/lib-server
      '@certd/midway-flyway-js':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../libs/midway-flyway-js
      '@certd/pipeline':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../core/pipeline
      '@certd/plugin-cert':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../plugins/plugin-cert
      '@certd/plugin-lib':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../plugins/plugin-lib
      '@certd/plugin-plus':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../pro/plugin-plus
      '@certd/plus-core':
-        specifier: ^1.37.10
+        specifier: ^1.37.12
        version: link:../../pro/plus-core
      '@huaweicloud/huaweicloud-sdk-cdn':
        specifier: ^3.1.120
@@ -3411,20 +3411,20 @@ packages:
    resolution: {integrity: sha512-Ys+3g2TaW7gADOJzPt83SJtCDhMjndcDMFVQ/Tj9iA1BfJzFKD9mAUXT3OenpuPHbI6P/myECxRJrofUsDx/5g==}
    engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}

-  '@fast-crud/editor-code@1.27.4':
-    resolution: {integrity: sha512-syuSxpNc/So5xoGGZkiC4Iqa8MdrQpeHJRqs6/A8pRUDh9UEN1iBFm8PPxmSluHc7sFXZdt0IIRfJE6sDBhRiA==}
+  '@fast-crud/editor-code@1.27.6':
+    resolution: {integrity: sha512-ynEfltaR11wVDwZjwMDlgKa7B/oudyEG5rgX8uUQbCcFb13tXArz/3KButB3+kaqQWK/jNakPhb/oM1lUkjv7g==}

-  '@fast-crud/fast-crud@1.27.4':
-    resolution: {integrity: sha512-wwTqwETgcgBa8v2P/C2MGFfAxZGvAPDFiyrg3b9k+6eMePR//RbY9+M1knsTVaHTTkabAmgwZ+OnnCJzpmnK/A==}
+  '@fast-crud/fast-crud@1.27.6':
+    resolution: {integrity: sha512-V4sma2wWFLnivJT/vxEsSX5A80IRRppD6oSq935BlQ4a8tTuZ26QNNplmhL1L6Hp5NWDBDSxKfBIuJmTMBzm4A==}

-  '@fast-crud/fast-extends@1.27.4':
-    resolution: {integrity: sha512-GVWmwondzouPsDD2mCLmxbR7RV5Cf1pJQS0nracQZfrwKsJdNcKlIZ3F3SULklAELMtW01hFbwt7VC+ZehjvAQ==}
+  '@fast-crud/fast-extends@1.27.6':
+    resolution: {integrity: sha512-85Eu7JuAQN9eRHi9vL9gunIApgayBrK9z6RIcPp0jY41nq5pKZA0DEQoU7jy1PL0bhvbtj9E22bDaA7rXqbTcw==}

-  '@fast-crud/ui-antdv4@1.27.4':
-    resolution: {integrity: sha512-WcDYmlc06/BIpOnpfN7cZuWqW2kxZC5EfazVw1IaY+kxx3eLRdWX1dShh23oZEsKdwKwGcgY7xeiptFgEpel+Q==}
+  '@fast-crud/ui-antdv4@1.27.6':
+    resolution: {integrity: sha512-Eszzn6KgLy9TrjsJOfe3FFu2yMFF/oslCwiy8jknbuiZs/PUOhIhdQgQAn5hwmqTas/T62C/9pje5DVbgOUbNA==}

-  '@fast-crud/ui-interface@1.27.4':
-    resolution: {integrity: sha512-hZJiABhXOZma6kaxes9waKMdVEjaEMUtEGZ7TIXXJuExynNOMK1AVtfgACSP5uwTj8mKxUEa7iBKx2vr9EcfFA==}
+  '@fast-crud/ui-interface@1.27.6':
+    resolution: {integrity: sha512-T6Fgwe1WUWoYMsK0uIZu4fbtaxN5IngUy/nikPREwHTePHS6br9vQTFefG8bZv5e+L381TIETXzfU70RoSJLGg==}

  '@fidm/asn1@1.0.4':
    resolution: {integrity: sha512-esd1jyNvRb2HVaQGq2Gg8Z0kbQPXzV9Tq5Z14KNIov6KfFD6PTaRIO8UpcsYiTNzOqJpmyzWgVTrUwFV3UF4TQ==}
@@ -15325,14 +15325,14 @@ snapshots:

  '@eslint/js@8.57.0': {}

-  '@fast-crud/editor-code@1.27.4':
+  '@fast-crud/editor-code@1.27.6':
    dependencies:
      js-yaml: 4.1.0
      lodash-es: 4.17.21
      monaco-editor: 0.52.2
      monaco-yaml: 5.4.0(monaco-editor@0.52.2)

-  '@fast-crud/fast-crud@1.27.4(vue@3.5.14(typescript@5.8.3))':
+  '@fast-crud/fast-crud@1.27.6(vue@3.5.14(typescript@5.8.3))':
    dependencies:
      '@iconify/types': 2.0.0
      file-saver: 2.0.5
@@ -15342,7 +15342,7 @@ snapshots:
    transitivePeerDependencies:
      - vue

-  '@fast-crud/fast-extends@1.27.4(aws-crt@1.26.2)(vue@3.5.14(typescript@5.8.3))':
+  '@fast-crud/fast-extends@1.27.6(aws-crt@1.26.2)(vue@3.5.14(typescript@5.8.3))':
    dependencies:
      '@aws-sdk/client-s3': 3.810.0(aws-crt@1.26.2)
      '@aws-sdk/s3-request-presigner': 3.810.0
@@ -15372,9 +15372,9 @@ snapshots:
      - utf-8-validate
      - vue

-  '@fast-crud/ui-antdv4@1.27.4': {}
+  '@fast-crud/ui-antdv4@1.27.6': {}

-  '@fast-crud/ui-interface@1.27.4':
+  '@fast-crud/ui-interface@1.27.6':
    dependencies:
      lodash-es: 4.17.21

@@ -20394,13 +20394,13 @@ snapshots:
      resolve: 1.22.10
      semver: 6.3.1

-  eslint-plugin-prettier@3.4.1(eslint-config-prettier@8.10.0(eslint@7.32.0))(eslint@7.32.0)(prettier@2.8.8):
+  eslint-plugin-prettier@3.4.1(eslint-config-prettier@8.10.0(eslint@8.57.0))(eslint@7.32.0)(prettier@2.8.8):
    dependencies:
      eslint: 7.32.0
      prettier: 2.8.8
      prettier-linter-helpers: 1.0.0
    optionalDependencies:
-      eslint-config-prettier: 8.10.0(eslint@7.32.0)
+      eslint-config-prettier: 8.10.0(eslint@8.57.0)

  eslint-plugin-prettier@4.2.1(eslint-config-prettier@8.10.0(eslint@8.57.0))(eslint@8.57.0)(prettier@2.8.8):
    dependencies:
@@ -22810,7 +22810,7 @@ snapshots:
      eslint: 7.32.0
      eslint-config-prettier: 8.10.0(eslint@7.32.0)
      eslint-plugin-node: 11.1.0(eslint@7.32.0)
-      eslint-plugin-prettier: 3.4.1(eslint-config-prettier@8.10.0(eslint@7.32.0))(eslint@7.32.0)(prettier@2.8.8)
+      eslint-plugin-prettier: 3.4.1(eslint-config-prettier@8.10.0(eslint@8.57.0))(eslint@7.32.0)(prettier@2.8.8)
      execa: 5.1.1
      inquirer: 7.3.3
      json5: 2.2.3
@@ -1 +1 @@
-23:54
+01:01
@@ -1 +1 @@
-23:57
+10:09
Author	SHA1	Message	Date
xiaojunnuo	43513049be	perf: 支持部署到中国移动CDN	2025-12-04 00:46:25 +08:00
xiaojunnuo	a5ca41131b	fix: oidc 支持nonce	2025-12-03 22:00:35 +08:00
xiaojunnuo	2ea3810980	build: release	2025-12-03 10:09:24 +08:00
xiaojunnuo	c9cb54e8b2	build: release	2025-12-03 07:34:48 +08:00
xiaojunnuo	23dd3db50b	build: publish	2025-12-03 01:01:31 +08:00
xiaojunnuo	179c46914d	build: trigger build image	2025-12-03 01:01:20 +08:00
xiaojunnuo	ddb18e6c21	v1.37.14	2025-12-03 00:59:54 +08:00
xiaojunnuo	d2e147ba51	build: prepare to build	2025-12-03 00:57:50 +08:00
xiaojunnuo	b63033f846	build: release	2025-12-03 00:57:37 +08:00
xiaojunnuo	677e1101e6	fix: 修复注销登录时，第三方登录注销请求失败的报错	2025-12-03 00:57:17 +08:00
xiaojunnuo	3abc2ccfbb	build: 1	2025-12-03 00:48:21 +08:00
xiaojunnuo	827d28f1cd	build: publish	2025-12-03 00:41:16 +08:00
xiaojunnuo	59d12a1bbe	build: trigger build image	2025-12-03 00:40:59 +08:00
xiaojunnuo	8134172301	v1.37.13	2025-12-03 00:39:32 +08:00
xiaojunnuo	8d983aa561	build: prepare to build	2025-12-03 00:36:47 +08:00
xiaojunnuo	bb3085ef84	perf: 第三方登录允许选择logo	2025-12-03 00:35:17 +08:00
xiaojunnuo	78b1650bdb	fix: 修复西部数据返回信息乱码问题	2025-12-02 16:37:26 +08:00
xiaojunnuo	5edc72d475	fix: 修复西部数码使用域名级别的key申请证书失败的问题	2025-12-02 16:11:33 +08:00
xiaojunnuo	1df32c9dfa	docs: 阿里云超时配置	2025-12-01 19:10:47 +08:00
xiaojunnuo	bedb1ff7f9	docs: 流水线有效期	2025-12-01 11:48:57 +08:00
xiaojunnuo	fbf12f16b5	perf: 支持OIDC单点登录	2025-12-01 00:40:46 +08:00
xiaojunnuo	22a5f34e1f	build: release	2025-11-30 02:53:41 +08:00
xiaojunnuo	e1a8b08619	build: publish	2025-11-30 02:32:23 +08:00
xiaojunnuo	466d30fb74	build: trigger build image	2025-11-30 02:32:06 +08:00
xiaojunnuo	7a1c6d2918	v1.37.12	2025-11-30 02:30:29 +08:00
xiaojunnuo	9fcc0dc8e7	build: prepare to build	2025-11-30 02:28:22 +08:00
xiaojunnuo	286f244caf	build: prepare to build	2025-11-30 02:18:12 +08:00
xiaojunnuo	52ebeab90b	chore: group dict刷新	2025-11-30 02:16:04 +08:00
xiaojunnuo	6be7591332	perf: 支持证书颁发机构 LiteSSL https://github.com/certd/certd/issues/590	2025-11-30 01:30:47 +08:00
xiaojunnuo	73325aaefb	perf: 支持微信扫码登录	2025-11-30 01:13:55 +08:00
xiaojunnuo	0adcc6a8d1	fix: 修复waf tls版本号小写	2025-11-29 12:15:58 +08:00
xiaojunnuo	93fb6acd1d	build: release	2025-11-29 04:30:52 +08:00
xiaojunnuo	77d52b323d	build: publish	2025-11-29 04:17:51 +08:00
xiaojunnuo	ca8e8bf6ef	build: trigger build image	2025-11-29 04:17:34 +08:00
@@ -1 +1 @@
 :13
 :57
@@ -1 +1 @@
 :54
 :01
@@ -1 +1 @@
 :57
 :09