BCAI/easyai-ai-gateway
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

feat: 接入 SSF 实时会话撤销

Browse Source
This commit is contained in:
chengcheng
2026-07-14 17:06:41 +08:00
parent 30ad0e9f2c
commit f30aaeb2d4
28 changed files with 2597 additions and 91 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.env.example
+16
View File
@@ -35,6 +35,22 @@ OIDC_ACCEPT_LEGACY_HS256=true
OIDC_INTROSPECTION_ENABLED=false
OIDC_INTROSPECTION_CLIENT_ID=
OIDC_INTROSPECTION_CLIENT_SECRET=
# Optional SSF/CAEP real-time revocation receiver. Enabling it also requires
# the RFC 7662 credentials above so bootstrap and fail-closed fallback work.
OIDC_SECURITY_EVENTS_ENABLED=false
OIDC_SECURITY_EVENTS_TRANSMITTER_ISSUER=https://auth.51easyai.com/ssf
OIDC_SECURITY_EVENTS_RECEIVER_AUDIENCE=
OIDC_SECURITY_EVENTS_BEARER_SECRET=
# During zero-downtime rotation, set next before removing current.
OIDC_SECURITY_EVENTS_BEARER_SECRET_NEXT=
OIDC_SECURITY_EVENTS_PUBLIC_ENDPOINT=https://api.51easyai.com/api/v1/security-events/ssf
OIDC_SECURITY_EVENTS_STREAM_ID=
OIDC_SECURITY_EVENTS_MANAGEMENT_TOKEN_URL=
OIDC_SECURITY_EVENTS_MANAGEMENT_CLIENT_ID=
OIDC_SECURITY_EVENTS_MANAGEMENT_CLIENT_SECRET=
OIDC_SECURITY_EVENTS_HEARTBEAT_INTERVAL_SECONDS=60
OIDC_SECURITY_EVENTS_STALE_AFTER_SECONDS=180
OIDC_SECURITY_EVENTS_CLOCK_SKEW_SECONDS=60
# Controlled JIT is opt-in. When enabled, bind the validated Auth Center tid to
# one existing active Gateway tenant; tokens never create Gateway tenants.
OIDC_JIT_PROVISIONING_ENABLED=false