+
+ {open && (
+
+ {(['light', 'dark', 'auto'] as Theme[]).map(t => (
+
+ ))}
+
+ )}
+
diff --git a/src/components/providers/ThemeProvider.tsx b/src/components/providers/ThemeProvider.tsx
index aa8fdf9..88704c4 100644
--- a/src/components/providers/ThemeProvider.tsx
+++ b/src/components/providers/ThemeProvider.tsx
@@ -1,33 +1,38 @@
'use client'
import { createContext, useContext, useEffect, useState, ReactNode } from 'react'
-type Theme = 'light' | 'dark'
-interface ThemeContextType { theme: Theme; toggleTheme: () => void }
-const ThemeContext = createContext({ theme: 'dark', toggleTheme: () => {} })
+type Theme = 'light' | 'dark' | 'auto'
+interface ThemeContextType { theme: Theme; setTheme: (t: Theme) => void }
+const ThemeContext = createContext({ theme: 'auto', setTheme: () => {} })
export function useTheme() { return useContext(ThemeContext) }
+function applyTheme(t: Theme) {
+ const root = document.documentElement
+ root.classList.remove('light', 'dark')
+ if (t === 'auto') {
+ const prefersDark = window.matchMedia('(prefers-color-scheme: dark)').matches
+ root.classList.add(prefersDark ? 'dark' : 'light')
+ } else {
+ root.classList.add(t)
+ }
+}
+
export function ThemeProvider({ children }: { children: ReactNode }) {
- const [theme, setTheme] = useState('dark')
+ const [theme, setThemeState] = useState('auto')
useEffect(() => {
- // Read initial theme from localStorage or system preference
const stored = localStorage.getItem('theme') as Theme | null
- const initial = stored || (window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light')
- setTheme(initial)
- document.documentElement.classList.toggle('dark', initial === 'dark')
- document.documentElement.classList.toggle('light', initial === 'light')
+ const initial = stored || 'auto'
+ setThemeState(initial)
+ applyTheme(initial)
}, [])
- const toggleTheme = () => {
- setTheme(prev => {
- const next = prev === 'dark' ? 'light' : 'dark'
- localStorage.setItem('theme', next)
- document.documentElement.classList.toggle('dark', next === 'dark')
- document.documentElement.classList.toggle('light', next === 'light')
- return next
- })
+ const setTheme = (t: Theme) => {
+ setThemeState(t)
+ localStorage.setItem('theme', t)
+ applyTheme(t)
}
- return {children}
+ return {children}
}
diff --git a/src/lib/oidc.ts b/src/lib/oidc.ts
new file mode 100644
index 0000000..f0390a7
--- /dev/null
+++ b/src/lib/oidc.ts
@@ -0,0 +1,47 @@
+import { Issuer } from 'openid-client'
+import crypto from 'crypto'
+
+const AUTHELIA_URL = process.env.AUTHELIA_URL || 'https://sso.tlyq.ai'
+const OIDC_CLIENT_ID = process.env.OIDC_CLIENT_ID || 'assets-oidc'
+const OIDC_CLIENT_SECRET = process.env.OIDC_CLIENT_SECRET || ''
+const OIDC_REDIRECT_URI = process.env.OIDC_REDIRECT_URI || 'https://assets.tlyq.ai/api/auth/callback'
+
+let oidcClient: any = null
+let lastDiscovery = 0
+const DISCOVERY_TTL = 3600000 // 1 小时
+
+export async function getOidcClient() {
+ const now = Date.now()
+ if (oidcClient && (now - lastDiscovery) < DISCOVERY_TTL) {
+ return oidcClient
+ }
+
+ try {
+ const issuer = await Issuer.discover(AUTHELIA_URL)
+ oidcClient = new issuer.Client({
+ client_id: OIDC_CLIENT_ID,
+ client_secret: OIDC_CLIENT_SECRET,
+ redirect_uris: [OIDC_REDIRECT_URI],
+ response_types: ['code'],
+ })
+ lastDiscovery = now
+ return oidcClient
+ } catch (error) {
+ console.error('OIDC discovery 失败:', error)
+ throw error
+ }
+}
+
+export function generatePKCE() {
+ const codeVerifier = crypto.randomBytes(32).toString('base64url')
+ const codeChallenge = crypto.createHash('sha256').update(codeVerifier).digest('base64url')
+ return { codeVerifier, codeChallenge }
+}
+
+export function generateState() {
+ return crypto.randomBytes(32).toString('base64url')
+}
+
+export function generateNonce() {
+ return crypto.randomBytes(32).toString('base64url')
+}
diff --git a/src/middleware.ts b/src/middleware.ts
index c5802f6..c3327ec 100644
--- a/src/middleware.ts
+++ b/src/middleware.ts
@@ -29,8 +29,18 @@ function isValidPayload(payload: Record | null): boolean {
export function middleware(request: NextRequest) {
const { pathname } = request.nextUrl
- // 登录/退出路径 + 内部 API 放行（自有 key 认证）
- if (pathname === '/login' || pathname.startsWith('/api/auth/login') || pathname === '/api/auth/logout' || pathname.startsWith('/api/internal/')) {
+ // 登录页：已登录用户自动跳转首页
+ if (pathname === '/login' || pathname.startsWith('/login')) {
+ const token = request.cookies.get('tlyq_session')?.value || request.cookies.get('session_assets')?.value
+ const payload = token ? decodeJwtPayload(token) : null
+ if (isValidPayload(payload)) {
+ return NextResponse.redirect(new URL('/dashboard', request.url))
+ }
+ return NextResponse.next()
+ }
+
+ // 退出路径 + 内部 API 放行（自有 key 认证）
+ if (pathname.startsWith('/api/auth/login') || pathname.startsWith('/api/auth/callback') || pathname === '/api/auth/logout' || pathname.startsWith('/api/internal/')) {
return NextResponse.next()
}