feat: 接入 SSF 实时会话撤销

apps/api/docs/swagger.yaml

@@ -6073,6 +6073,57 @@ paths:
       summary: 创建或执行 AI 任务
       tags:
       - tasks
+  /api/v1/security-events/ssf:
+    post:
+      consumes:
+      - application/secevent+jwt
+      description: Optional endpoint. It validates a stream-specific Bearer before
+        parsing and verifying an ES256 SET. A committed event and a duplicate jti
+        both return an empty 202 response.
+      parameters:
+      - description: Bearer stream-specific-secret
+        in: header
+        name: Authorization
+        required: true
+        type: string
+      - description: Compact signed Security Event Token
+        in: body
+        name: set
+        required: true
+        schema:
+          type: string
+      produces:
+      - application/json
+      responses:
+        "202":
+          description: Accepted
+        "400":
+          description: Bad Request
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+        "401":
+          description: Unauthorized
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+        "403":
+          description: Forbidden
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+        "503":
+          description: Service Unavailable
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+      summary: Receive an SSF Security Event Token
+      tags:
+      - Security Events
   /api/v1/song/generations:
     post:
       consumes: