feat: add stable OIDC authentication

docker-compose.yml

@@ -6,8 +6,18 @@ x-api-environment: &api-environment
   AI_GATEWAY_DATABASE_URL: ${AI_GATEWAY_COMPOSE_DATABASE_URL:-postgresql://easyai:easyai2025@postgres:5432/easyai_ai_gateway?sslmode=disable}
   CONFIG_JWT_SECRET: ${CONFIG_JWT_SECRET:-this is a very secret secret}
   IDENTITY_MODE: ${AI_GATEWAY_COMPOSE_IDENTITY_MODE:-hybrid}
+  OIDC_ENABLED: ${OIDC_ENABLED:-false}
+  OIDC_ISSUER: ${OIDC_ISSUER:-}
+  OIDC_AUDIENCE: ${OIDC_AUDIENCE:-}
+  OIDC_TENANT_ID: ${OIDC_TENANT_ID:-}
+  OIDC_ROLE_PREFIX: ${OIDC_ROLE_PREFIX:-gateway.}
+  OIDC_REQUIRED_SCOPES: ${OIDC_REQUIRED_SCOPES:-gateway.access}
+  OIDC_JWKS_CACHE_TTL_SECONDS: ${OIDC_JWKS_CACHE_TTL_SECONDS:-300}
+  OIDC_ACCEPT_LEGACY_HS256: ${OIDC_ACCEPT_LEGACY_HS256:-true}
   SERVER_MAIN_BASE_URL: ${AI_GATEWAY_COMPOSE_SERVER_MAIN_BASE_URL:-http://host.docker.internal:3000}
   SERVER_MAIN_INTERNAL_TOKEN: ${SERVER_MAIN_INTERNAL_TOKEN:-change-me}
+  SERVER_MAIN_INTERNAL_KEY: ${SERVER_MAIN_INTERNAL_KEY:-gateway}
+  SERVER_MAIN_INTERNAL_SECRET: ${SERVER_MAIN_INTERNAL_SECRET:-${SERVER_MAIN_INTERNAL_TOKEN:-change-me}}
   TASK_PROGRESS_CALLBACK_ENABLED: ${AI_GATEWAY_COMPOSE_TASK_PROGRESS_CALLBACK_ENABLED:-false}
   TASK_PROGRESS_CALLBACK_URL: ${AI_GATEWAY_COMPOSE_TASK_PROGRESS_CALLBACK_URL:-http://host.docker.internal:3000/internal/platform/task-progress-callbacks}
   TASK_PROGRESS_CALLBACK_TIMEOUT_MS: ${TASK_PROGRESS_CALLBACK_TIMEOUT_MS:-5000}
@@ -46,6 +56,8 @@ services:
       target: api
       args:
         GOPROXY: ${AI_GATEWAY_GO_PROXY:-https://goproxy.cn,direct}
+        GO_BUILD_IMAGE: ${AI_GATEWAY_GO_BUILD_IMAGE:-golang:1.26.3-alpine}
+        API_RUNTIME_IMAGE: ${AI_GATEWAY_API_RUNTIME_IMAGE:-alpine:3.22}
     command: ["/app/easyai-ai-gateway-migrate"]
     environment: *api-environment
     extra_hosts:
@@ -64,6 +76,8 @@ services:
       target: api
       args:
         GOPROXY: ${AI_GATEWAY_GO_PROXY:-https://goproxy.cn,direct}
+        GO_BUILD_IMAGE: ${AI_GATEWAY_GO_BUILD_IMAGE:-golang:1.26.3-alpine}
+        API_RUNTIME_IMAGE: ${AI_GATEWAY_API_RUNTIME_IMAGE:-alpine:3.22}
     environment: *api-environment
     ports:
       - "${AI_GATEWAY_API_PORT:-8088}:8088"
@@ -91,6 +105,13 @@ services:
       target: web
       args:
         VITE_GATEWAY_API_BASE_URL: ${AI_GATEWAY_WEB_API_BASE_URL:-/gateway-api}
+        NODE_BUILD_IMAGE: ${AI_GATEWAY_NODE_BUILD_IMAGE:-node:22-alpine}
+        WEB_RUNTIME_IMAGE: ${AI_GATEWAY_WEB_RUNTIME_IMAGE:-nginx:1.27-alpine}
+        VITE_OIDC_ENABLED: ${OIDC_ENABLED:-false}
+        VITE_OIDC_ISSUER: ${OIDC_ISSUER:-}
+        VITE_OIDC_CLIENT_ID: ${OIDC_CLIENT_ID:-}
+        VITE_OIDC_REDIRECT_URI: ${OIDC_REDIRECT_URI:-}
+        VITE_BASE_PATH: ${AI_GATEWAY_WEB_BASE_PATH:-/}
     ports:
       - "${AI_GATEWAY_WEB_PORT:-5178}:80"
     volumes: