feat: add stable OIDC authentication

Dockerfile

@@ -1,9 +1,11 @@
-# syntax=docker/dockerfile:1.7
-
 ARG GO_VERSION=1.26.3
 ARG NODE_VERSION=22
+ARG GO_BUILD_IMAGE=golang:${GO_VERSION}-alpine
+ARG API_RUNTIME_IMAGE=alpine:3.22
+ARG NODE_BUILD_IMAGE=node:${NODE_VERSION}-alpine
+ARG WEB_RUNTIME_IMAGE=nginx:1.27-alpine
 
-FROM --platform=$BUILDPLATFORM golang:${GO_VERSION}-alpine AS api-builder
+FROM --platform=$BUILDPLATFORM ${GO_BUILD_IMAGE} AS api-builder
 ARG TARGETOS=linux
 ARG TARGETARCH=amd64
 ARG GOPROXY=https://goproxy.cn,direct
@@ -32,7 +34,7 @@ RUN --mount=type=cache,target=/go/pkg/mod \
     CGO_ENABLED=0 GOOS=$TARGETOS GOARCH=$TARGETARCH go build -trimpath -ldflags="-s -w" -o /out/easyai-ai-gateway ./cmd/gateway && \
     CGO_ENABLED=0 GOOS=$TARGETOS GOARCH=$TARGETARCH go build -trimpath -ldflags="-s -w" -o /out/easyai-ai-gateway-migrate ./cmd/migrate
 
-FROM alpine:3.22 AS api
+FROM ${API_RUNTIME_IMAGE} AS api
 
 RUN apk add --no-cache ca-certificates tzdata wget && \
     adduser -D -H -u 10001 appuser
@@ -54,7 +56,7 @@ ENV APP_ENV=production \
 
 CMD ["/app/easyai-ai-gateway"]
 
-FROM --platform=$BUILDPLATFORM node:${NODE_VERSION}-alpine AS web-builder
+FROM --platform=$BUILDPLATFORM ${NODE_BUILD_IMAGE} AS web-builder
 
 WORKDIR /src
 RUN npm install -g pnpm@10.18.1
@@ -69,10 +71,20 @@ COPY packages packages
 COPY apps/web apps/web
 
 ARG VITE_GATEWAY_API_BASE_URL=/gateway-api
+ARG VITE_OIDC_ENABLED=false
+ARG VITE_OIDC_ISSUER=
+ARG VITE_OIDC_CLIENT_ID=
+ARG VITE_OIDC_REDIRECT_URI=
+ARG VITE_BASE_PATH=/
 ENV VITE_GATEWAY_API_BASE_URL=$VITE_GATEWAY_API_BASE_URL
+ENV VITE_OIDC_ENABLED=$VITE_OIDC_ENABLED \
+    VITE_OIDC_ISSUER=$VITE_OIDC_ISSUER \
+    VITE_OIDC_CLIENT_ID=$VITE_OIDC_CLIENT_ID \
+    VITE_OIDC_REDIRECT_URI=$VITE_OIDC_REDIRECT_URI \
+    VITE_BASE_PATH=$VITE_BASE_PATH
 RUN pnpm --filter @easyai-ai-gateway/web build
 
-FROM nginx:1.27-alpine AS web
+FROM ${WEB_RUNTIME_IMAGE} AS web
 
 COPY docker/nginx.conf /etc/nginx/conf.d/default.conf
 COPY --from=web-builder /src/apps/web/dist /usr/share/nginx/html