feat: 将 Gateway Web 迁移到 BFF 会话

浏览器只通过 HttpOnly Cookie 恢复统一认证状态，不再访问认证中心 Token Endpoint 或保存 OIDC Token。同步更新错误提示、部署配置和接入文档。
2026-07-13 19:09:57 +08:00
parent c5c82bb528
commit 46bac51703
15 changed files with 143 additions and 287 deletions
@@ -20,9 +20,10 @@ describe('auth storage', () => {
    expect(window.sessionStorage.getItem('easyai_ai_gateway_oidc_access_token')).toBeNull();
  });

-  it('reads a legacy OIDC session token only for one-time cookie migration', () => {
+  it('removes and never reads a legacy OIDC browser token', () => {
    window.sessionStorage.setItem('easyai_ai_gateway_oidc_access_token', 'legacy-oidc-token');
-    expect(readStoredAccessToken()).toBe('legacy-oidc-token');
+    expect(readStoredAccessToken()).toBe('');
+    expect(window.sessionStorage.getItem('easyai_ai_gateway_oidc_access_token')).toBeNull();
  });

  it('clears both token stores on logout', () => {