http客户端加密debug输出,版本升级

.github/workflows/nuget-publish.yml

@@ -9,16 +9,21 @@ jobs:
   publish:
     name: Publish Project to Nuget
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v4
       - name: Setup .NET Core
         uses: actions/setup-dotnet@v5
         with:
           dotnet-version: "10.x.x"
+      - name: NuGet login (OIDC → temp API key)
+        uses: NuGet/login@v1
+        id: login
+        with:
+          user: ${{ secrets.NUGET_USER }}
       - name: Publish
         run: |
           version=`git describe --tags`
           dotnet build --configuration release -p:Version=$version
-          dotnet nuget push bin/release/Simcu.SimApi.$version.nupkg -k ${NUGET_APIKEY} -s https://www.nuget.org/api/v2/package
-        env:
-          NUGET_APIKEY: ${{ secrets.NUGET_APIKEY }}
+          dotnet nuget push bin/release/Simcu.SimApi.$version.nupkg -k ${{steps.login.outputs.NUGET_API_KEY}} -s https://api.nuget.org/v3/index.json

.gitignore

@@ -434,3 +434,6 @@ MigrationBackup/
 # Ionide (cross platform F# VS Code tools) working folder
 .ionide/
 
+
+# BitFun snapshot data - auto managed
+.bitfun/

Attributes/SimApiAuthAttribute.cs

@@ -1,9 +1,11 @@
 using System;
 using System.Linq;
-using Microsoft.AspNetCore.Mvc;
 using Microsoft.AspNetCore.Mvc.Filters;
+using Microsoft.Extensions.DependencyInjection;
 using SimApi.Communications;
 using SimApi.Exceptions;
+using SimApi.Interfaces;
+using static SimApi.Helpers.SimApiError;
 
 namespace SimApi.Attributes;
 
@@ -37,17 +39,16 @@ public class SimApiAuthAttribute : ActionFilterAttribute
     public override void OnActionExecuting(ActionExecutingContext context)
     {
         var loginInfo = (SimApiLoginItem)context.HttpContext.Items["LoginInfo"]!;
-        //检测是否登录
-        if (loginInfo == null)
+        var token = (string)context.HttpContext.Items["LoginToken"]!;
+        ErrorWhenNull(loginInfo, 401);
+        var checkers = context.HttpContext.RequestServices.GetServices<ISimApiAuthChecker>();
+        foreach (var checker in checkers)
         {
-            throw new SimApiException(401);
+            checker.Run(loginInfo, token);
         }
 
         if (Types == null) return;
         //检测用户类型
-        if (!Types.Intersect(loginInfo.Type).Any())
-        {
-            throw new SimApiException(403);
-        }
+        ErrorWhenFalse(Types.Intersect(loginInfo.Type).Any(), 403);
     }
 }

Attributes/SimApiDocAttribute.cs

@@ -12,12 +12,12 @@ public class SimApiDocAttribute : SwaggerOperationAttribute
     /// <summary>
     /// 定义接口说明
     /// </summary>
-    /// <param name="tag">接口分组</param>
+    /// <param name="tags">接口分组列表</param>
     /// <param name="name">接口名称</param>
     /// <param name="description">接口描述</param>
-    public SimApiDocAttribute(string tag, string name, string? description = null)
+    public SimApiDocAttribute(string[] tags, string name, string? description = null)
     {
-        Tags = [tag];
+        Tags = tags;
         Summary = name;
         if (description != null)
         {
@@ -26,4 +26,14 @@ public class SimApiDocAttribute : SwaggerOperationAttribute
         // Consumes = new[] {"application/json"};
         // Produces = new[] {"application/json"};
     }
+
+    /// <summary>
+    /// 定义接口说明
+    /// </summary>
+    /// <param name="tag">接口分组</param>
+    /// <param name="name">接口名称</param>
+    /// <param name="description">接口描述</param>
+    public SimApiDocAttribute(string tag, string name, string? description = null) : this([tag], name, description)
+    {
+    }
 }

AuthSDK/SimApiAuthCenter.cs

@@ -0,0 +1,226 @@
+using System.Collections.Generic;
+using System.Net.Http;
+using System.Net.Http.Json;
+using SimApi.Communications;
+using static SimApi.Helpers.SimApiError;
+
+namespace SimApi.AuthSDK;
+
+public class SimApiAuthCenter(SimApiAuthClient simapi)
+{
+    public SimApiAuthClient Client { get; } = simapi;
+
+    #region 公共
+
+    /// <summary>
+    /// 委托AuthCenter进行应用签名验证
+    /// </summary>
+    /// <param name="appId"></param>
+    /// <param name="timestamp"></param>
+    /// <param name="nonce"></param>
+    /// <param name="sign"></param>
+    public void VerifySign(string appId, string timestamp, string nonce, string sign)
+    {
+        var http = new HttpClient();
+        var url = $"{Client.Server}/api/auth/sign/verify?appId={appId}&timestamp={timestamp}&nonce={nonce}&sign={sign}";
+        var result = http.PostAsJsonAsync(url, new { }).Result;
+        var resp = result.Content.ReadFromJsonAsync<SimApiBaseResponse>().Result;
+        ErrorWhenNull(resp, 400, "签名验证失败");
+        ErrorWhenFalse(resp.Code == 200, 400, "签名验证失败");
+    }
+
+    #endregion
+
+
+    #region 群组相关
+
+    /// <summary>
+    /// 根据profileId获取群组列表
+    /// </summary>
+    /// <param name="profileId"></param>
+    /// <returns></returns>
+    public SimApiAuthCenterDto.GroupRelatedItem[]? GroupRelated(string profileId)
+    {
+        return Client.SignQuery<SimApiAuthCenterDto.GroupRelatedItem[]>("/api/auth/group/related", new { profileId });
+    }
+
+    /// <summary>
+    /// 根据关键字搜索群组,输入群组ID精准搜索
+    /// </summary>
+    /// <param name="keyword"></param>
+    /// <param name="skip"></param>
+    /// <param name="take"></param>
+    /// <returns></returns>
+    public SimApiAuthCenterDto.AppAndProfileItem[]? GroupSearch(string keyword, int skip = 0, int take = 20)
+    {
+        return Client.SignQuery<SimApiAuthCenterDto.AppAndProfileItem[]>("/api/auth/group/search",
+            new { keyword, skip, take });
+    }
+
+    /// <summary>
+    /// 使用组ID以及组内成员,管理员profile获取组的详细树结构
+    /// </summary>
+    /// <param name="profileId"></param>
+    /// <param name="groupId"></param>
+    /// <returns></returns>
+    public SimApiAuthCenterDto.GroupDetailTreeNode? GroupDetail(string groupId, string profileId)
+    {
+        return Client.SignQuery<SimApiAuthCenterDto.GroupDetailTreeNode>("/api/auth/group/detail",
+            new { profileId, groupId });
+    }
+
+    /// <summary>
+    /// 获取profile在本组的所有子组
+    /// </summary>
+    /// <param name="groupId"></param>
+    /// <param name="profileId"></param>
+    /// <returns></returns>
+    public string[]? GroupRelatedIndex(string groupId, string profileId)
+    {
+        return Client.SignQuery<string[]>("/api/auth/internal/group/related-group-ids", new { groupId, profileId });
+    }
+
+    #endregion
+
+    #region Profile相关
+
+    /// <summary>
+    /// 根据关键字,搜索用户Profile,参数支持精准ID,用户手机号,用户邮箱,Profile名称模糊搜索
+    /// </summary>
+    /// <param name="keyword"></param>
+    /// <param name="skip"></param>
+    /// <param name="take"></param>
+    /// <returns></returns>
+    public SimApiAuthCenterDto.AppAndProfileItem[]? ProfileSearch(string keyword, int skip = 0, int take = 20)
+    {
+        return Client.SignQuery<SimApiAuthCenterDto.AppAndProfileItem[]>("/api/auth/profile/search",
+            new { keyword, skip, take });
+    }
+
+    /// <summary>
+    /// 通过id,可以批量获取用户的基本信息
+    /// </summary>
+    /// <param name="ids"></param>
+    /// <returns></returns>
+    public SimApiAuthCenterDto.AppAndProfileItem[]? ProfileList(string[] ids)
+    {
+        return Client.SignQuery<SimApiAuthCenterDto.AppAndProfileItem[]>("/api/auth/profile/list", new { ids });
+    }
+
+    #endregion
+
+    #region AuthGate内部应用专用 - 注意: 只有内部应用可以调用
+
+    /// <summary>
+    /// 获取是否为App的拥有者
+    /// </summary>
+    /// <param name="profileId"></param>
+    /// <param name="applicationId"></param>
+    /// <returns></returns>
+    public bool CheckIsAppOwner(string profileId, string applicationId)
+    {
+        return Client.SignQuery<bool>("/api/auth/internal/app/check-owner", new
+        {
+            ProfileId = profileId,
+            AppId = applicationId,
+        });
+    }
+
+    /// <summary>
+    /// 获取应用列表,根据用户profileId 和 提供的appIds
+    /// </summary>
+    /// <param name="profileId"></param>
+    /// <param name="appIds"></param>
+    /// <returns></returns>
+    public SimApiAuthCenterDto.AppAndProfileItem[]? GetAppList(string profileId, IEnumerable<string> appIds)
+    {
+        return Client.SignQuery<SimApiAuthCenterDto.AppAndProfileItem[]>("/api/auth/internal/app/related", new
+        {
+            ProfileId = profileId,
+            AllowedAppIds = appIds,
+        });
+    }
+
+    #endregion
+
+    #region 系统登录
+
+    /// <summary>
+    /// 获取登录授权CODE
+    /// </summary>
+    /// <param name="scene"></param>
+    /// <param name="data"></param>
+    /// <param name="backUrl"></param>
+    /// <returns></returns>
+    public SimApiAuthCenterDto.GetCodeResponse GetLoginCode(string? scene = null,
+        Dictionary<string, object>? data = null,
+        string? backUrl = null)
+    {
+        var code = Client.SignQuery<string>("/api/auth/login/code",
+            new { scene, data, backUrl });
+        return new SimApiAuthCenterDto.GetCodeResponse()
+        {
+            Code = code!,
+            Server = Client.Server,
+            FullUrl = $"{Client.Server}/auth?code={code}"
+        };
+    }
+
+    /// <summary>
+    /// 使用code获取登录信息
+    /// </summary>
+    /// <param name="code"></param>
+    /// <param name="scene"></param>
+    /// <returns></returns>
+    public SimApiAuthCenterDto.LoginInfoResponse GetLoginInfo(string code, string? scene = null)
+    {
+        var resp = Client.SignQuery<SimApiAuthCenterDto.LoginInfoResponse>("/api/auth/login/get", new { code });
+        ErrorWhenNull(resp, 400232, "登录信息获取失败");
+        ErrorWhen(resp.Scene != scene, 403003, "登录场景不匹配");
+        return resp;
+    }
+
+    #endregion
+
+    #region 安全验证
+
+    /// <summary>
+    /// 获取安全验证代码
+    /// </summary>
+    /// <param name="scene"></param>
+    /// <param name="userId"></param>
+    /// <param name="data"></param>
+    /// <param name="backUrl"></param>
+    /// <returns></returns>
+    public SimApiAuthCenterDto.GetCodeResponse GetConfirmCode(string scene, string userId,
+        Dictionary<string, object>? data = null,
+        string? backUrl = null)
+    {
+        var code = Client.SignQuery<string>("/api/auth/confirm/code",
+            new { scene, data, backUrl, profileId = userId });
+        return new SimApiAuthCenterDto.GetCodeResponse()
+        {
+            Code = code!,
+            Server = Client.Server,
+            FullUrl = $"{Client.Server}/confirm?code={code}"
+        };
+    }
+
+    /// <summary>
+    /// 使用安全验证code 获取验证结果
+    /// </summary>
+    /// <param name="code"></param>
+    /// <param name="scene"></param>
+    /// <param name="userId"></param>
+    /// <returns></returns>
+    public SimApiAuthCenterDto.ConfirmResponse Confirm(string code, string scene, string? userId = null)
+    {
+        var resp = Client.SignQuery<SimApiAuthCenterDto.ConfirmResponse>("/api/auth/confirm/get", new { code });
+        ErrorWhenNull(resp, 403001, "安全确认码无效");
+        ErrorWhen(resp.ProfileId != userId, 403002, "安全确认身份不匹配");
+        ErrorWhen(resp.Scene != scene, 403003, "安全确认场景不匹配");
+        return resp;
+    }
+
+    #endregion
+}

AuthSDK/SimApiAuthCenterDto.cs

@@ -0,0 +1,61 @@
+using System;
+using System.Collections.Generic;
+
+namespace SimApi.AuthSDK;
+
+public class SimApiAuthCenterDto
+{
+    public class AppAndProfileItem
+    {
+        public required string Id { get; set; }
+        public required string Name { get; set; }
+        public string? Image { get; set; }
+        public string? Description { get; set; }
+    }
+
+    public class ConfirmResponse
+    {
+        public required string ApplicationId { get; set; }
+        public required string ProfileId { get; set; }
+        public string? Scene { get; set; }
+        public Dictionary<string, object>? Data { get; set; }
+    }
+
+    public class LoginInfoResponse
+    {
+        public string? Scene { get; set; }
+        public Dictionary<string, object>? Data { get; set; }
+        public required string ProfileId { get; set; }
+        public required string Name { get; set; }
+        public string? Image { get; set; }
+        public string? Description { get; set; }
+    }
+
+    public class GetCodeResponse
+    {
+        public required string Code { get; set; }
+        public required string Server { get; set; }
+        public required string FullUrl { get; set; }
+    }
+
+    public class GroupRelatedItem
+    {
+        public required string Id { get; set; }
+        public required string Name { get; set; }
+        public string? Image { get; set; }
+        public string? Description { get; set; }
+        public bool IsOwner { get; set; }
+        public bool IsAdmin { get; set; }
+        public bool IsMember { get; set; }
+    }
+
+    public class GroupDetailTreeNode
+    {
+        public required string Id { get; set; }
+        public required string Name { get; set; }
+        public string? Image { get; set; }
+        public string? Description { get; set; }
+        public int Sort { get; set; }
+        public List<GroupDetailTreeNode> Children { get; set; } = [];
+    }
+}

AuthSDK/SimApiAuthCenterMiddleware.cs

@@ -0,0 +1,34 @@
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
+using Microsoft.Extensions.Logging;
+using SimApi.Communications;
+using SimApi.Configurations;
+using SimApi.Helpers;
+
+namespace SimApi.AuthSDK;
+
+public class SimApiAuthCenterMiddleware(RequestDelegate next, ILogger<SimApiAuthCenterMiddleware> logger)
+{
+    public Task Invoke(HttpContext httpContext, SimApiOptions simApiOptions)
+    {
+        if (httpContext.Request.Headers.TryGetValue("X-SimApi-Gate-Auth", out var auth) &&
+            httpContext.Request.Headers.TryGetValue("X-SimApi-Gate-Time", out var time) &&
+            httpContext.Request.Headers.TryGetValue("X-SimApi-Gate-Sign", out var sign))
+        {
+            var signStr =
+                $"appId={simApiOptions.SimApiAuthCenterOptions.AppId}&auth={auth}&time={time}&appKey={simApiOptions.SimApiAuthCenterOptions.AppKey}";
+            logger.LogDebug($"签名字符串 => {signStr}");
+            if (SimApiUtil.Md5(signStr) == sign && !string.IsNullOrEmpty(auth))
+            {
+                var login = SimApiUtil.Base64Decode<SimApiLoginItem>(auth!);
+                httpContext.Items.Add("LoginInfo", login);
+            }
+            else
+            {
+                logger.LogDebug("签名不匹配");
+            }
+        }
+
+        return next(httpContext);
+    }
+}

AuthSDK/SimApiAuthClient.cs

@@ -0,0 +1,13 @@
+using Microsoft.Extensions.Logging;
+using SimApi.Configurations;
+using SimApi.Helpers;
+
+namespace SimApi.AuthSDK;
+
+public class SimApiAuthClient(SimApiOptions apiOptions, ILogger<SimApiAuthClient> logger)
+    : SimApiHttpClient(apiOptions, logger)
+{
+    public override string Server { get; init; } = apiOptions.SimApiAuthCenterOptions.Server ?? string.Empty;
+    public override string AppId { get; init; } = apiOptions.SimApiAuthCenterOptions.AppId ?? string.Empty;
+    public override string AppKey { get; init; } = apiOptions.SimApiAuthCenterOptions.AppKey ?? string.Empty;
+}

AuthSDK/SimApiAuthIam.cs

@@ -0,0 +1,47 @@
+using Microsoft.Extensions.Logging;
+using static SimApi.Helpers.SimApiError;
+
+namespace SimApi.AuthSDK;
+
+public class SimApiAuthIam(SimApiAuthClient simapi, ILogger<SimApiAuthIam> logger)
+{
+    /// <summary>
+    /// 向Iam注册权限
+    /// </summary>
+    /// <param name="permissions"></param>
+    public void RegisterPermissions(SimApiAuthIamDto.PermissionItem[] permissions)
+    {
+        var log = $"检测到 {permissions.Length} 个权限接口，正在注册..: ";
+        foreach (var permission in permissions)
+        {
+            log += $"\n |- {permission.Identifier} => [{permission.Group}]{permission.Name} ({permission.Description})";
+        }
+
+        logger.LogInformation(log);
+        simapi.SignQuery<string>("/api/iam/permission/register", new { permissions });
+        logger.LogInformation("权限注册完成");
+    }
+
+    /// <summary>
+    /// 获取拥有的权限标识数组
+    /// </summary>
+    /// <param name="profileId"></param>
+    /// <param name="groupId"></param>
+    /// <returns></returns>
+    public string[] GetPermissionOwned(string profileId, string? groupId = null)
+    {
+        return simapi.SignQuery<string[]>("/api/iam/permission/owned", new { profileId, groupId }) ?? [];
+    }
+
+    /// <summary>
+    /// 检测profileId是否有这个权限
+    /// </summary>
+    /// <param name="profileId"></param>
+    /// <param name="permission"></param>
+    /// <param name="groupId"></param>
+    public void CheckPermission(string profileId, string permission, string? groupId = null)
+    {
+        var ok = simapi.SignQuery<bool>("/api/iam/permission/check", new { profileId, permission, groupId });
+        ErrorWhen(!ok, 403, "没有该权限");
+    }
+}

AuthSDK/SimApiAuthIamDto.cs

@@ -0,0 +1,12 @@
+namespace SimApi.AuthSDK;
+
+public class SimApiAuthIamDto
+{
+    public class PermissionItem
+    {
+        public required string Identifier { get; init; }
+        public required string Name { get; init; }
+        public required string Group { get; init; }
+        public required string Description { get; init; }
+    }
+}

CoceSdk/CoceApp.cs

@@ -1,235 +0,0 @@
-using System.Collections.Generic;
-using System.Linq;
-using System.Net.Http;
-using System.Net.Http.Json;
-using System.Text;
-using System.Text.Json;
-using Microsoft.Extensions.Caching.Distributed;
-using Microsoft.Extensions.Logging;
-using SimApi.Communications;
-using SimApi.Configurations;
-using SimApi.Helpers;
-
-namespace SimApi.CoceSdk;
-
-public class CoceApp(SimApiOptions simApiOptions, ILogger<CoceApp> logger, IDistributedCache cache)
-{
-    
-    /// <summary>
-    /// 获取Level Token
-    /// </summary>
-    /// <param name="lv1Token"></param>
-    /// <param name="level"></param>
-    /// <returns></returns>
-    public LevelTokenResponse? GetLevelToken(string lv1Token, int level = 5)
-    {
-        var dict = new Dictionary<string, object>
-        {
-            { "lv1Token", lv1Token },
-            { "time", (int)SimApiUtil.TimestampNow },
-            { "appId", simApiOptions.CoceSdkOptions.AppId! },
-            { "level", level }
-        };
-        return QueryAppApi<LevelTokenResponse>("/api/app/token", dict);
-    }
-
-    /// <summary>
-    /// 通过用户手机号搜索用户
-    /// </summary>
-    /// <param name="phone"></param>
-    /// <returns></returns>
-    public UserInfo? SearchUserByPhone(string phone)
-    {
-        var dict = new Dictionary<string, object>
-        {
-            { "cell", phone },
-            { "time", (int)SimApiUtil.TimestampNow },
-            { "appId", simApiOptions.CoceSdkOptions.AppId! },
-        };
-        return QueryAppApi<UserInfo>("/api/app/user/search-by-phone", dict);
-    }
-
-    /// <summary>
-    /// 通过给出的UserId列表获取用户信息
-    /// </summary>
-    /// <param name="userIds"></param>
-    /// <returns></returns>
-    public UserInfo[]? SearchUserByIds(IEnumerable<string> userIds)
-    {
-        var dict = new Dictionary<string, object>
-        {
-            { "ids", string.Join(",", userIds) },
-            { "time", (int)SimApiUtil.TimestampNow },
-            { "appId", simApiOptions.CoceSdkOptions.AppId! },
-        };
-        return QueryAppApi<UserInfo[]>("/api/app/user/search-by-ids", dict);
-    }
-
-    /// <summary>
-    /// 向用户发送消息
-    /// </summary>
-    /// <param name="userId"></param>
-    /// <param name="title"></param>
-    /// <param name="content"></param>
-    /// <returns></returns>
-    public bool SendUserMessage(string userId, string title, string content)
-    {
-        var dict = new Dictionary<string, object>
-        {
-            { "time", (int)SimApiUtil.TimestampNow },
-            { "appId", simApiOptions.CoceSdkOptions.AppId! },
-            { "userId", userId },
-            { "type", "text" },
-            { "title", title },
-            { "text", content }
-        };
-        return QueryAppApiNoResp("/api/app/message", dict);
-    }
-
-    /// <summary>
-    /// 创建交易订单号
-    /// </summary>
-    /// <param name="name"></param>
-    /// <param name="amount"></param>
-    /// <param name="ext"></param>
-    /// <returns></returns>
-    public string? TradeCreate(string name, int amount, string ext)
-    {
-        var dict = new Dictionary<string, object>
-        {
-            { "time", (int)SimApiUtil.TimestampNow },
-            { "appId", simApiOptions.CoceSdkOptions.AppId! },
-            { "amount", amount },
-            { "ext", ext },
-            { "name", name }
-        };
-        return QueryAppApi<string>("/api/app/trade/create", dict);
-    }
-
-    /// <summary>
-    /// 查询订单状态
-    /// </summary>
-    /// <param name="tradeNo"></param>
-    /// <returns></returns>
-    public CheckTradeResponse? TradeCheck(string tradeNo)
-    {
-        var dict = new Dictionary<string, object>
-        {
-            { "time", (int)SimApiUtil.TimestampNow },
-            { "appId", simApiOptions.CoceSdkOptions.AppId! },
-            { "tradeNo", tradeNo }
-        };
-        return QueryAppApi<CheckTradeResponse>("/api/app/trade/result", dict);
-    }
-
-    /// <summary>
-    /// 对订单进行退款
-    /// </summary>
-    /// <param name="tradeNo"></param>
-    /// <returns></returns>
-    public bool TradeRefund(string tradeNo)
-    {
-        var dict = new Dictionary<string, object>
-        {
-            { "time", (int)SimApiUtil.TimestampNow },
-            { "appId", simApiOptions.CoceSdkOptions.AppId! },
-            { "tradeNo", tradeNo }
-        };
-        return QueryAppApiNoResp("/api/app/trade/refund", dict);
-    }
-
-
-    private T? QueryAppApi<T>(string endpoint, Dictionary<string, object> request)
-    {
-        var response = QueryAppApi(endpoint, request);
-        var result = response.Content.ReadFromJsonAsync<SimApiBaseResponse<T>>().Result!;
-        if (result.Code == 200) return result.Data;
-        logger.LogDebug("发生错误: {Code} => {Message}", result.Code, result.Message);
-        return default;
-    }
-
-    private bool QueryAppApiNoResp(string endpoint, Dictionary<string, object> request)
-    {
-        var response = QueryAppApi(endpoint, request);
-        var result = response.Content.ReadFromJsonAsync<SimApiBaseResponse>().Result!;
-        return result.Code == 200;
-    }
-
-    private HttpResponseMessage QueryAppApi(string endpoint, Dictionary<string, object> request)
-    {
-        var platUrl = simApiOptions.CoceSdkOptions.ApiEndpoint + endpoint;
-        var sorted = request.OrderBy(x => x.Key);
-        var signStr = sorted.Aggregate("", (current, item) => current + $"{item.Key}={item.Value}&").TrimEnd('&');
-        logger.LogDebug("签名的字符串: {SignStr}", signStr);
-        var sign = SimApiUtil.Md5(signStr + simApiOptions.CoceSdkOptions.AppKey);
-        logger.LogDebug("签名: {Sign}", sign);
-        request.Add("sign", sign);
-        logger.LogDebug("请求地址: {PlatUrl} => {Data}", platUrl, JsonSerializer.Serialize(request));
-        var http = new HttpClient();
-        return http.PostAsJsonAsync(platUrl, request).Result;
-    }
-
-
-    /// <summary>
-    /// 获取用户的群组信息
-    /// </summary>
-    /// <param name="token">Level >=2 的Token</param>
-    /// <returns></returns>
-    public IEnumerable<GroupInfo>? GetUserGroups(string token)
-    {
-        const string uri = "/api/lv2/user/groups";
-        var resp = ProxyQuery<GroupInfo[]>(uri, token,"{}");
-        return resp;
-    }
-
-    /// <summary>
-    /// 获取用户信息
-    /// </summary>
-    /// <param name="token"></param>
-    /// <returns></returns>
-    public UserInfo? GetUserInfo(string token)
-    {
-        const string uri = "/api/lv1/user/info";
-        return ProxyQuery<UserInfo>(uri, token);
-    }
-
-    public void SaveToken(string userId, string levelToken)
-    {
-        cache.SetString($"LEVEL:TOKEN:{userId}", levelToken);
-    }
-
-    public string? GetToken(string userId)
-    {
-        return cache.GetString($"LEVEL:TOKEN:{userId}");
-    }
-
-
-    public dynamic? ProxyQuery(string uri, string token, string json) => ProxyQuery<dynamic>(uri, token, json);
-
-    public dynamic? ProxyQueue(string uri, string token, object data) =>
-        ProxyQuery<dynamic>(uri, token, JsonSerializer.Serialize(data));
-
-    public T? ProxyQueue<T>(string uri, string token, object data) =>
-        ProxyQuery<T>(uri, token, JsonSerializer.Serialize(data));
-
-    public T? ProxyQuery<T>(string uri, string token, string json = "{}")
-    {
-        var http = new HttpClient();
-        http.DefaultRequestHeaders.Add("Token", token);
-        var realUrl = simApiOptions.CoceSdkOptions.ApiEndpoint + uri;
-        var response = http.PostAsync(realUrl, new StringContent(json, Encoding.UTF8, "application/json"))
-            .Result;
-        var resp = response.Content.ReadFromJsonAsync<SimApiBaseResponse<T>>().Result!;
-        if (resp.Code != 200)
-        {
-            logger.LogDebug("请求发生错误: {RespCode} => {RespMessage}", resp.Code, resp.Message);
-        }
-
-        return resp.Code == 200 ? resp.Data : default;
-    }
-
-    public ConfigResponse GetConfig()
-    {
-        return new ConfigResponse(simApiOptions.CoceSdkOptions.AppId!, simApiOptions.CoceSdkOptions.AuthEndpoint);
-    }
-}

CoceSdk/CoceAppSdkOption.cs

@@ -1,15 +0,0 @@
-namespace SimApi.CoceSdk;
-
-public class CoceAppSdkOption
-{
-    /**
-     * 中心API服务器地址
-     */
-    public string ApiEndpoint { get; set; } = "https://api.coce.cc";
-
-    public string AuthEndpoint { get; set; } = "https://home.coce.cc";
-
-    public string? AppId { get; set; }
-
-    public string? AppKey { get; set; }
-}

CoceSdk/CoceController.cs

@@ -1,51 +0,0 @@
-using System;
-using System.Collections.Generic;
-using System.Linq;
-using Microsoft.AspNetCore.Mvc;
-using Microsoft.Extensions.DependencyInjection;
-using SimApi.Attributes;
-using SimApi.Communications;
-using SimApi.Controllers;
-using SimApi.Helpers;
-
-namespace SimApi.CoceSdk;
-
-public class CoceController(CoceApp coce, SimApiAuth auth, IServiceProvider sp) : SimApiBaseController
-{
-    [HttpPost]
-    public SimApiBaseResponse<ConfigResponse> GetConfig()
-    {
-        return new SimApiBaseResponse<ConfigResponse>(coce.GetConfig());
-    }
-
-    [HttpPost]
-    public SimApiBaseResponse<string> Login([FromBody] SimApiOneFieldRequest<string> request)
-    {
-        var data = coce.GetLevelToken(request.Data!);
-        ErrorWhenNull(data, 400);
-        coce.SaveToken(data!.UserId, data.Token);
-        var userinfo = coce.GetUserInfo(data!.Token);
-        var meta = new Dictionary<string, string>
-        {
-            { "name", userinfo!.Name },
-            { "image", userinfo.Image }
-        };
-        var groups = coce.GetUserGroups(data.Token!)!;
-        var loginItem = new SimApiLoginItem
-        {
-            Id = data.UserId,
-            Meta = meta,
-        };
-        var processor = sp.GetService<ICoceLoginProcessor>();
-        processor?.Process(loginItem, groups.ToArray());
-        return new SimApiBaseResponse<string>(auth.Login(loginItem));
-    }
-
-    [HttpPost, SimApiAuth]
-    public SimApiBaseResponse<GroupInfo[]> ListGroups()
-    {
-        var levelToken = coce.GetToken(LoginInfo.Id!);
-        var groups = coce.GetUserGroups(levelToken!)!;
-        return new SimApiBaseResponse<GroupInfo[]>(groups.ToArray());
-    }
-}

CoceSdk/CoceModels.cs

@@ -1,43 +0,0 @@
-using System;
-
-namespace SimApi.CoceSdk;
-
-public record ConfigResponse(string AppId, string AuthUrl);
-
-public record LevelTokenResponse(string Token, string UserId, int TokenLevel);
-
-public record GroupInfo(string Id, string Name, string Image, string Description, string Role);
-
-public record UserInfo(string UserId, string Name, string Image);
-
-public record CheckTradeResponse(
-    string TradeNo,
-    int Amount,
-    int Fee,
-    string Name,
-    string? Ext,
-    string Status,
-    DateTime CreatedAt,
-    DateTime? FinishedAt,
-    DateTime? RefundAt,
-    DateTime? CloseAt);
-
-public class UserInfoWithGroup
-{
-    public string? UserId { get; set; }
-
-    public string? Name { get; set; }
-
-    public string? LevelToken { get; set; }
-
-    public UserGroupItem[]? UserGroupItems { get; set; }
-}
-
-public class UserGroupItem
-{
-    public string? GroupId { get; set; }
-
-    public string? GroupName { get; set; }
-
-    public string? GroupRole { get; set; }
-}

CoceSdk/ICoceLoginProcessor.cs

@@ -1,9 +0,0 @@
-using System.Collections.Generic;
-using SimApi.Communications;
-
-namespace SimApi.CoceSdk;
-
-public interface ICoceLoginProcessor
-{
-    SimApiLoginItem Process(SimApiLoginItem loginItem, GroupInfo[] groups);
-}

Communications/SimApiBaseResponse.cs

@@ -27,11 +27,11 @@ public class SimApiBaseResponse(int code = 200, string message = "成功")
         { 400, "参数错误" },
         { 401, "需要登录" },
         { 403, "无权访问" },
-        { 404, "接口不存在" },
+        { 404, "请求资源不存在" },
         { 500, "服务器错误" }
     };
 
-    public SimApiBaseResponse(int code) : this(code, MsgBox.GetValueOrDefault(code, "未知错误"))
+    public SimApiBaseResponse(int code) : this(code, MsgBox.GetValueOrDefault(code, "未知错误代码"))
     {
     }
 

Communications/SimApiLoginItem.cs

@@ -10,5 +10,5 @@ public class SimApiLoginItem
     public required string Id { get; set; }
     public string[] Type { get; set; } = ["user"];
     public Dictionary<string, string> Meta { get; set; } = [];
-    public object? Extra { get; set; }
+    public Dictionary<string, object?> Extra { get; set; } = [];
 };

Configurations/SimApiAuthCenterOptions.cs

@@ -0,0 +1,15 @@
+namespace SimApi.Configurations;
+
+public class SimApiAuthCenterOptions
+{
+    public string? Server { get; set; }
+    public string? AppId { get; set; }
+    public string? AppKey { get; set; }
+
+    /// <summary>
+    /// 开启则使用内部网关透传的Middleware
+    /// 注意: 只有内部应用需要开启这个,也就是api通过内部网关代理后
+    /// </summary>
+    public bool UseMiddleware { get; set; }
+    public bool UseIam { get; set; }
+}

Configurations/SimApiExceptionOptions.cs

@@ -0,0 +1,6 @@
+namespace SimApi.Configurations;
+
+public class SimApiExceptionOptions
+{
+    public int[] SkipStatusCodes = [200, 301, 302];
+}

Configurations/SimApiHttpClientOptions.cs

@@ -0,0 +1,8 @@
+namespace SimApi.Configurations;
+
+public class SimApiHttpClientOptions
+{
+    public string Server { get; set; } = string.Empty;
+    public string AppId { get; set; } = string.Empty;
+    public string AppKey { get; set; } = string.Empty;
+}

Configurations/SimApiJobOptions.cs

@@ -29,11 +29,12 @@ public class SimApiJobOptions
     /// 设置为null 使用默认redis配置
     /// </summary>
     public int? Database { get; set; } = null;
+
     public SimApiJobServerConfig[] Servers { get; set; } = [new()];
 }
 
 public class SimApiJobServerConfig()
 {
     public string[] Queues { get; set; } = ["default"];
-    public int WorkerNum { get; set; } = 50;
+    public int WorkerNum { get; set; } = 5;
 }

Configurations/SimApiOptions.cs

@@ -1,5 +1,4 @@
 using System;
-using SimApi.CoceSdk;
 
 namespace SimApi.Configurations;
 
@@ -19,9 +18,9 @@ public class SimApiOptions
     public bool EnableSimApiAuth { get; set; }
 
     /// <summary>
-    /// 是否使用CoceSdk
+    /// 启用SimApi网关授权, 基于上层网关透传的身份令牌验证
     /// </summary>
-    public bool EnableCoceSdk { get; set; }
+    public bool EnableSimApiAuthGate { get; set; }
 
     /// <summary>
     /// 开启S3兼容的存储系统。
@@ -46,9 +45,6 @@ public class SimApiOptions
     /// </summary>
     public bool EnableCors { get; set; } = true;
 
-
-    public CoceAppSdkOption CoceSdkOptions { get; set; } = new();
-
     /// <summary>
     /// 启用异常拦截,启用后，所有的异常将被通过json反馈。
     /// default: true
@@ -60,7 +56,6 @@ public class SimApiOptions
     /// </summary>
     public bool EnableSimApiResponseFilter { get; set; } = true;
 
-
     /// <summary>
     /// 开启ForwardHeaders,开启后可以透传负载均衡的Headers
     /// default: true
@@ -73,21 +68,16 @@ public class SimApiOptions
     /// </summary>
     public bool EnableLowerUrl { get; set; } = true;
 
-
-    /// <summary>
-    /// 应用可以通过 /versions 显示出应用版本和SimApi包版本
-    /// default: true
-    /// </summary>
-    public bool EnableVersionUrl { get; set; } = true;
-
-
-
     /// <summary>
     /// 启用格式化的 Console Logger
     /// default: false
     /// </summary>
     public bool EnableLogger { get; set; } = true;
 
+    /// <summary>
+    /// 是否启用SimApiHttpClient
+    /// </summary>
+    public bool EnableSimApiHttpClient { get; set; } = false;
 
     /// <summary>
     /// 配置Job
@@ -106,16 +96,34 @@ public class SimApiOptions
 
     public SimApiSynapseOptions SimApiSynapseOptions { get; set; } = new();
 
+    public SimApiAuthCenterOptions SimApiAuthCenterOptions { get; set; } = new();
+
+    public SimApiHttpClientOptions SimApiHttpClientOptions { get; set; } = new();
+
+    public SimApiExceptionOptions SimApiExceptionOptions { get; set; } = new();
+
+    public SimApiRouteOptions SimApiRouteOptions { get; set; } = new();
+
+    public void ConfigureSimApiRoute(Action<SimApiRouteOptions>? options = null)
+    {
+        options?.Invoke(SimApiRouteOptions);
+    }
+
+    public void ConfigureSimApiException(Action<SimApiExceptionOptions>? options = null)
+    {
+        options?.Invoke(SimApiExceptionOptions);
+    }
+
+    public void ConfigureSimApiHttpClient(Action<SimApiHttpClientOptions>? options = null)
+    {
+        options?.Invoke(SimApiHttpClientOptions);
+    }
+
     public void ConfigureSimApiSynapse(Action<SimApiSynapseOptions>? options = null)
     {
         options?.Invoke(SimApiSynapseOptions);
     }
 
-    public void ConfigureCoceSdk(Action<CoceAppSdkOption>? options = null)
-    {
-        options?.Invoke(CoceSdkOptions);
-    }
-
     public void ConfigureSimApiDoc(Action<SimApiDocOptions>? options = null)
     {
         options?.Invoke(SimApiDocOptions);
@@ -130,4 +138,9 @@ public class SimApiOptions
     {
         options?.Invoke(SimApiJobOptions);
     }
+
+    public void ConfigureSimApiAuthCenter(Action<SimApiAuthCenterOptions>? options = null)
+    {
+        options?.Invoke(SimApiAuthCenterOptions);
+    }
 }

Configurations/SimApiRouteOptions.cs

@@ -0,0 +1,8 @@
+namespace SimApi.Configurations;
+
+public class SimApiRouteOptions
+{
+    public string? VersionRoute = "/versions";
+    public string? LogoutRoute = "/auth/logout";
+    public string? UserInfoRoute = "/user/info";
+}

Controllers/SimApiAuthController.cs

@@ -1,5 +1,4 @@
-using System.Collections.Generic;
-using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc;
 using SimApi.Attributes;
 using SimApi.Communications;
 using SimApi.Helpers;
@@ -8,42 +7,16 @@ namespace SimApi.Controllers;
 
 public class SimApiAuthController(SimApiAuth auth) : SimApiBaseController
 {
-    /// <summary>
-    /// 检测用户登陆的控制器
-    /// </summary>
-    /// <returns></returns>
-    [HttpPost, SimApiDoc("认证", "检测登陆")]
-    public SimApiBaseResponse<string> CheckLogin()
-    {
-        ErrorWhenNull(LoginInfo, 401, "未登录");
-        return new SimApiBaseResponse<string>
-        {
-            Data = LoginInfo.Id
-        };
-    }
-
     /// <summary>
     /// 退出登陆
     /// </summary>
     /// <returns></returns>
     [HttpPost, SimApiDoc("认证", "退出登陆")]
-    public SimApiBaseResponse Logout()
+    public void Logout()
     {
-        string? token = null;
-
         if (Request.Headers.TryGetValue("Token", out var value))
         {
-            token = value;
+            auth.Logout(value!);
         }
-
-        auth.Logout(token!);
-        return new SimApiBaseResponse();
-    }
-
-
-    [HttpPost, SimApiAuth]
-    public SimApiBaseResponse<SimApiLoginItem> UserInfo()
-    {
-        return new SimApiBaseResponse<SimApiLoginItem>(LoginInfo);
     }
 }

Controllers/SimApiBaseController.cs

@@ -1,10 +1,9 @@
-using System.Diagnostics.CodeAnalysis;
-using SimApi.Communications;
+using SimApi.Communications;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.AspNetCore.Mvc.Filters;
 using Microsoft.AspNetCore.Mvc.ModelBinding;
 using System.Linq;
-using SimApi.Exceptions;
+using static SimApi.Helpers.SimApiError;
 
 namespace SimApi.Controllers;
 
@@ -24,6 +23,8 @@ public class SimApiBaseController : Controller
     /// </summary>
     protected SimApiLoginItem LoginInfo => (SimApiLoginItem)HttpContext.Items["LoginInfo"]!;
 
+    protected string LoginToken => (string)HttpContext.Items["LoginToken"]!;
+
     /// <summary>
     /// 验证请求参数
     /// </summary>
@@ -38,74 +39,4 @@ public class SimApiBaseController : Controller
             break;
         }
     }
-
-
-    /// <summary>
-    /// 错误返回
-    /// </summary>
-    /// <param name="code">错误代码</param>
-    /// <param name="message">错误描述(若是常规错误,代码可自动带取描述)</param>
-    /// <returns></returns>
-    protected static void Error(int code = 500, string message = "")
-    {
-        throw new SimApiException(code, message);
-    }
-
-    /// <summary>
-    /// 检测条件，根据条件返回报错 如果condition是ture报错
-    /// </summary>
-    /// <param name="condition">检测条件</param>
-    /// <param name="code">错误代码</param>
-    /// <param name="message">错误描述</param>
-    protected static void ErrorWhen([DoesNotReturnIf(true)] bool condition, int code = 400, string message = "")
-    {
-        if (condition)
-        {
-            Error(code, message);
-        }
-    }
-
-
-    /// <summary>
-    /// 检测条件，根据条件返回报错 如果condition是ture报错
-    /// </summary>
-    /// <param name="condition">检测条件</param>
-    /// <param name="code">错误代码</param>
-    /// <param name="message">错误描述</param>
-    protected static void ErrorWhenTrue([DoesNotReturnIf(true)] bool condition, int code = 400, string message = "")
-    {
-        ErrorWhen(condition, code, message);
-    }
-
-
-    /// <summary>
-    /// 如果condition是false 报错
-    /// </summary>
-    /// <param name="condition"></param>
-    /// <param name="code"></param>
-    /// <param name="message"></param>
-    protected static void ErrorWhenFalse([DoesNotReturnIf(false)] bool condition, int code = 400, string message = "")
-    {
-        ErrorWhen(!condition, code, message);
-    }
-
-    /// <summary>
-    /// 检测给定的变量是否为NUll
-    /// </summary>
-    /// <param name="condition">检测条件</param>
-    /// <param name="code">错误代码</param>
-    /// <param name="message">错误描述</param>
-    protected static void ErrorWhenNull([NotNull] object? condition, int code = 404, string message = "请求的资源不存在")
-    {
-        ErrorWhen(condition == null, code, message);
-    }
-
-    /// <summary>
-    /// 上传文件
-    /// </summary>
-    /// <returns></returns>
-    protected SimApiBaseResponse<string> UploadFile()
-    {
-        return new SimApiBaseResponse<string>();
-    }
 }

Controllers/SimApiCommonController.cs

@@ -1,7 +1,9 @@
 using System.Collections.Generic;
 using Microsoft.AspNetCore.Mvc;
+using SimApi.Attributes;
 using SimApi.Communications;
 using SimApi.Helpers;
+using static SimApi.Helpers.SimApiError;
 
 namespace SimApi.Controllers;
 
@@ -14,22 +16,27 @@ public class SimApiCommonController : SimApiBaseController
     /// <returns></returns>
     [HttpGet("exception/{code:int}")]
     [ApiExplorerSettings(IgnoreApi = true)]
-    public SimApiBaseResponse ExceptionHandler(int code)
+    public void ExceptionHandler(int code)
     {
-        return new SimApiBaseResponse(code);
+        Error(code);
     }
 
 
     [HttpPost, HttpGet]
-    public SimApiBaseResponse<Dictionary<string, string>> Versions()
+    public Dictionary<string, string> Versions()
     {
-        return new SimApiBaseResponse<Dictionary<string, string>>()
+        return new Dictionary<string, string>
         {
-            Data = new Dictionary<string, string>
-            {
-                { "SimApi", SimApiUtil.SimApiVersion },
-                { "App", SimApiUtil.AppVersion }
-            }
+            { "SimApi", SimApiUtil.SimApiVersion },
+            { "App", SimApiUtil.AppVersion }
         };
     }
+    
+    
+    /// <summary>
+    /// 获取已登录用户信息
+    /// </summary>
+    /// <returns></returns>
+    [HttpPost, SimApiAuth, SimApiDoc("认证", "获取已登录用户信息")]
+    public SimApiLoginItem UserInfo() => LoginInfo;
 }

Helpers/SimApiAuth.cs

@@ -1,25 +1,41 @@
 using System;
-using System.Text.Json;
+using System.Collections.Generic;
 using Microsoft.Extensions.Caching.Distributed;
 using SimApi.Communications;
+using StackExchange.Redis;
 
 namespace SimApi.Helpers;
 
 /// <summary>
 /// 认证助手
 /// </summary>
-public class SimApiAuth(IDistributedCache cache)
+public class SimApiAuth(IDistributedCache cache, IConnectionMultiplexer redis)
 {
+    private const string TokenCacheKey = "SimApi:Auth:Token:{token}";
+    private const string TokenSetCacheKey = "SimApi:Auth:User:{userId}";
+    private readonly IDatabase _redisDb = redis.GetDatabase();
+
     /// <summary>
     /// 登录信息
     /// </summary>
     /// <param name="loginItem"></param>
+    /// <param name="expireTime"></param>
     /// <param name="token"></param>
     /// <returns></returns>
-    public string Login(SimApiLoginItem loginItem, string? token = null)
+    public string Login(SimApiLoginItem loginItem, TimeSpan? expireTime = null, string? token = null)
     {
+        expireTime ??= TimeSpan.FromDays(7);
         token ??= Guid.NewGuid().ToString();
-        cache.SetString(token, JsonSerializer.Serialize(loginItem));
+        var cacheKey = TokenCacheKey.Replace("{token}", token);
+        var setCacheKey = TokenSetCacheKey.Replace("{userId}", loginItem.Id);
+        _redisDb.SetAdd(setCacheKey, token);
+        cache.SetString(cacheKey, SimApiUtil.Json(loginItem),
+            new DistributedCacheEntryOptions
+            {
+                SlidingExpiration = expireTime
+            });
+        _redisDb.KeyExpire(setCacheKey, expireTime.Value);
+
         return token;
     }
 
@@ -31,10 +47,15 @@ public class SimApiAuth(IDistributedCache cache)
     /// <returns></returns>
     public string Update(SimApiLoginItem loginItem, string token)
     {
-        cache.SetString(token, JsonSerializer.Serialize(loginItem));
+        var cacheKey = TokenCacheKey.Replace("{token}", token);
+        cache.SetString(cacheKey, SimApiUtil.Json(loginItem));
+        var ttl = _redisDb.KeyTimeToLive(cacheKey);
+        var setCacheKey = TokenSetCacheKey.Replace("{userId}", loginItem.Id);
+        _redisDb.KeyExpire(setCacheKey, ttl);
         return token;
     }
 
+
     /// <summary>
     /// 获取登陆信息
     /// </summary>
@@ -42,19 +63,82 @@ public class SimApiAuth(IDistributedCache cache)
     /// <returns></returns>
     public SimApiLoginItem? GetLogin(string token)
     {
-        var login = cache.GetString(token);
-        return login != null ? JsonSerializer.Deserialize<SimApiLoginItem>(login) : null;
+        var cacheKey = TokenCacheKey.Replace("{token}", token);
+        var login = cache.GetString(cacheKey);
+        var resp = login != null ? SimApiUtil.FromJson<SimApiLoginItem>(login) : null;
+        if (resp != null)
+        {
+            var ttl = _redisDb.KeyTimeToLive(cacheKey);
+            var setCacheKey = TokenSetCacheKey.Replace("{userId}", resp.Id);
+            _redisDb.KeyExpire(setCacheKey, ttl);
+        }
+
+        return resp;
+    }
+
+    /// <summary>
+    /// 获取所有的登录token
+    /// </summary>
+    /// <param name="userId"></param>
+    /// <returns></returns>
+    public SimApiLoginItem[] GetAllLogins(string userId)
+    {
+        var setCacheKey = TokenSetCacheKey.Replace("{userId}", userId);
+        var allLogins = _redisDb.SetMembers(setCacheKey).ToStringArray();
+        var resp = new List<SimApiLoginItem>();
+        foreach (var login in allLogins)
+        {
+            if (login != null)
+            {
+                var item = GetLogin(login);
+                if (item != null)
+                {
+                    resp.Add(item);
+                }
+                else
+                {
+                    _redisDb.SetRemove(setCacheKey, login);
+                }
+            }
+        }
+
+        return resp.ToArray();
+    }
+
+    /// <summary>
+    /// 退出所有登录
+    /// </summary>
+    /// <param name="userId"></param>
+    public void LogoutAll(string userId)
+    {
+        var setCacheKey = TokenSetCacheKey.Replace("{userId}", userId);
+        var allLogins = _redisDb.SetMembers(setCacheKey).ToStringArray();
+        foreach (var login in allLogins)
+        {
+            if (login != null)
+            {
+                var cacheKey = TokenCacheKey.Replace("{token}", login);
+                cache.Remove(cacheKey);
+            }
+        }
+
+        _redisDb.KeyDelete(setCacheKey);
     }
 
     /// <summary>
     /// 退出登陆
     /// </summary>
-    /// <param name="uuid">登陆标识</param>
-    public void Logout(string uuid)
+    /// <param name="token">登陆标识</param>
+    public void Logout(string token)
     {
-        if (!string.IsNullOrEmpty(uuid))
+        var item = GetLogin(token);
+        if (item != null)
         {
-            cache.Remove(uuid);
+            var setCacheKey = TokenSetCacheKey.Replace("{userId}", item.Id);
+            _redisDb.SetRemove(setCacheKey, token);
         }
+
+        var cacheKey = TokenCacheKey.Replace("{token}", token);
+        cache.Remove(cacheKey);
     }
 }

Helpers/SimApiCache.cs

@@ -7,8 +7,15 @@ public class SimApiCache(IDistributedCache cache)
 {
     private const string Prefix = "SimApi:Cache:";
 
+    /// <summary>
+    /// 设置缓存 (值不能为null)
+    /// </summary>
+    /// <param name="key"></param>
+    /// <param name="value"></param>
+    /// <param name="options"></param>
     public void Set(string key, object value, DistributedCacheEntryOptions? options = null)
     {
+        SimApiError.ErrorWhenNull(value, 400, "缓存值不能为null");
         if (options is not null)
         {
             cache.SetString(Prefix + key, SimApiUtil.Json(value), options);
@@ -19,14 +26,44 @@ public class SimApiCache(IDistributedCache cache)
         }
     }
 
-    public string? Get(string key)
+    /// <summary>
+    /// 移除缓存
+    /// </summary>
+    /// <param name="key"></param>
+    public void Remove(string key)
     {
-        return cache.GetString(Prefix + key);
+        cache.Remove(Prefix + key);
     }
 
+    /// <summary>
+    /// 缓存Key是否存在
+    /// </summary>
+    /// <param name="key"></param>
+    /// <returns></returns>
+    public bool HasKey(string key)
+    {
+        return Get<string>(key) != null;
+    }
+
+    /// <summary>
+    /// 获取string类型缓存
+    /// </summary>
+    /// <param name="key"></param>
+    /// <returns></returns>
+    public string? Get(string key)
+    {
+        return Get<string>(Prefix + key);
+    }
+
+    /// <summary>
+    /// 获取特定类型缓存
+    /// </summary>
+    /// <param name="key"></param>
+    /// <typeparam name="T"></typeparam>
+    /// <returns></returns>
     public T? Get<T>(string key)
     {
         var data = cache.GetString(Prefix + key);
-        return data == null ? default : JsonSerializer.Deserialize<T>(data);
+        return data == null ? default : SimApiUtil.FromJson<T>(data);
     }
 }

Helpers/SimApiError.cs

@@ -0,0 +1,72 @@
+using System.Diagnostics.CodeAnalysis;
+using SimApi.Exceptions;
+
+namespace SimApi.Helpers;
+
+public static class SimApiError
+{
+    /// <summary>
+    /// 错误返回
+    /// </summary>
+    /// <param name="code">错误代码</param>
+    /// <param name="message">错误描述(若是常规错误,代码可自动带取描述)</param>
+    /// <returns></returns>
+    [DoesNotReturn]
+    public static void Error(int code = 500, string message = "")
+    {
+        throw new SimApiException(code, message);
+    }
+
+    /// <summary>
+    /// 检测条件，根据条件返回报错 如果condition是ture报错
+    /// </summary>
+    /// <param name="condition">检测条件</param>
+    /// <param name="code">错误代码</param>
+    /// <param name="message">错误描述</param>
+    public static void ErrorWhen([DoesNotReturnIf(true)] bool condition, int code = 400,
+        string message = "")
+    {
+        if (condition)
+        {
+            Error(code, message);
+        }
+    }
+
+
+    /// <summary>
+    /// 检测条件，根据条件返回报错 如果condition是ture报错
+    /// </summary>
+    /// <param name="condition">检测条件</param>
+    /// <param name="code">错误代码</param>
+    /// <param name="message">错误描述</param>
+    public static void ErrorWhenTrue([DoesNotReturnIf(true)] bool condition, int code = 400,
+        string message = "")
+    {
+        ErrorWhen(condition, code, message);
+    }
+
+
+    /// <summary>
+    /// 如果condition是false 报错
+    /// </summary>
+    /// <param name="condition"></param>
+    /// <param name="code"></param>
+    /// <param name="message"></param>
+    public static void ErrorWhenFalse([DoesNotReturnIf(false)] bool condition, int code = 400,
+        string message = "")
+    {
+        ErrorWhen(!condition, code, message);
+    }
+
+    /// <summary>
+    /// 检测给定的变量是否为NUll
+    /// </summary>
+    /// <param name="condition">检测条件</param>
+    /// <param name="code">错误代码</param>
+    /// <param name="message">错误描述</param>
+    public static void ErrorWhenNull([NotNull] object? condition, int code = 404,
+        string message = "")
+    {
+        ErrorWhen(condition == null, code, message);
+    }
+}

Helpers/SimApiHttpClient.cs

@@ -3,32 +3,45 @@ using System.Collections.Generic;
 using System.Linq;
 using System.Net.Http;
 using System.Net.Http.Json;
+using Microsoft.Extensions.Logging;
 using SimApi.Communications;
+using SimApi.Configurations;
 using SimApi.Exceptions;
 
 namespace SimApi.Helpers;
 
-public class SimApiHttpClient(string? appId, string appKey, bool debug = false)
+public class SimApiHttpClient(SimApiOptions? apiOptions = null, ILogger<SimApiHttpClient>? logger = null)
 {
-    public string Server { get; init; } = string.Empty;
-    public string SignName { get; init; } = "sign";
-    public string TimestampName { get; init; } = "timestamp";
-    public string NonceName { get; init; } = "nonce";
-    public string? AppIdName { get; init; } = "appId";
-    public string[] SignFields { get; init; } = [];
+    public virtual string Server { get; init; } = apiOptions?.SimApiHttpClientOptions.Server ?? string.Empty;
+    public virtual string AppId { get; init; } = apiOptions?.SimApiHttpClientOptions.AppId ?? string.Empty;
+    public virtual string AppKey { get; init; } = apiOptions?.SimApiHttpClientOptions.AppKey ?? string.Empty;
 
-    public T? SignQuery<T>(string url, object? body = null, Dictionary<string, string>? queries = null)
+    public virtual string SignName { get; init; } = "sign";
+    public virtual string TimestampName { get; init; } = "timestamp";
+    public virtual string NonceName { get; init; } = "nonce";
+    public virtual string? AppIdName { get; init; } = "appId";
+    public virtual string[] SignFields { get; init; } = [];
+
+    /// <summary>
+    /// 发起签名请求
+    /// </summary>
+    /// <param name="url"></param>
+    /// <param name="body"></param>
+    /// <param name="queries"></param>
+    /// <typeparam name="T"></typeparam>
+    /// <returns></returns>
+    public T SignQuery<T>(string url, object? body = null, Dictionary<string, string>? queries = null)
     {
         url = Server + url;
         var queryUrl = SignFields.Aggregate(string.Empty,
             (current, signField) => current + $"{signField}={queries?[signField]}&");
         if (!string.IsNullOrEmpty(AppIdName))
         {
-            queryUrl += $"{AppIdName}={appId}&";
+            queryUrl += $"{AppIdName}={AppId}&";
         }
 
         queryUrl += $"{TimestampName}={(int)SimApiUtil.TimestampNow}&{NonceName}={Guid.NewGuid()}";
-        var signStr = $"{queryUrl}&{appKey}";
+        var signStr = $"{queryUrl}&{AppKey}";
         var path = $"{url}?{queryUrl}&{SignName}={SimApiUtil.Md5(signStr)}";
 
         if (queries != null)
@@ -40,50 +53,64 @@ public class SimApiHttpClient(string? appId, string appKey, bool debug = false)
         return Query<T>(path, body);
     }
 
-    public T? AesQuery<T>(string url, object body)
+    /// <summary>
+    /// 发起AES加密请求
+    /// </summary>
+    /// <param name="url"></param>
+    /// <param name="body"></param>
+    /// <typeparam name="T"></typeparam>
+    /// <returns></returns>
+    public T AesQuery<T>(string url, object body)
     {
         url = Server + url;
         if (!string.IsNullOrEmpty(AppIdName))
         {
-            url += $"?{AppIdName}={appId}";
+            url += $"?{AppIdName}={AppId}";
         }
-
+        logger?.LogDebug($"[HTTPCLIENT请求][加密前BODY] {url}\n{SimApiUtil.Json(body)}\n");
         var req = new SimApiOneFieldRequest<string>
         {
-            Data = SimApiAesUtil.Encrypt(SimApiUtil.Json(body), appKey)
+            Data = SimApiAesUtil.Encrypt(SimApiUtil.Json(body), AppKey)
         };
         return Query<T>(url, req);
     }
 
-    public T? AesSignQuery<T>(string url, object body, Dictionary<string, string>? queries = null)
+    /// <summary>
+    /// 发起AES加密以及签名请求
+    /// </summary>
+    /// <param name="url"></param>
+    /// <param name="body"></param>
+    /// <param name="queries"></param>
+    /// <typeparam name="T"></typeparam>
+    /// <returns></returns>
+    public T AesSignQuery<T>(string url, object body, Dictionary<string, string>? queries = null)
     {
+        logger?.LogDebug($"[HTTPCLIENT请求][加密前BODY] {url}\n{SimApiUtil.Json(body)}\n");
         var req = new SimApiOneFieldRequest<string>
         {
-            Data = SimApiAesUtil.Encrypt(SimApiUtil.Json(body), appKey)
+            Data = SimApiAesUtil.Encrypt(SimApiUtil.Json(body), AppKey)
         };
         return SignQuery<T>(url, req, queries);
     }
 
-    private T? Query<T>(string url, object? req)
+    /// <summary>
+    /// 发起请求
+    /// </summary>
+    /// <param name="url"></param>
+    /// <param name="req"></param>
+    /// <typeparam name="T"></typeparam>
+    /// <returns></returns>
+    /// <exception cref="SimApiException"></exception>
+    private T Query<T>(string url, object? req)
     {
         var http = new HttpClient();
-        if (debug)
-        {
-            Console.WriteLine($"[HTTPCLIENT请求] {url}\n{SimApiUtil.Json(req)}\n");
-        }
-
+        logger?.LogDebug($"[HTTPCLIENT请求] {url}\n{SimApiUtil.Json(req)}\n");
         var resp = http.PostAsJsonAsync(url, req).Result;
-        if (debug)
-        {
-            Console.WriteLine($"[HTTPCLIENT响应] {resp.Content.ReadAsStringAsync().Result}\n");
-        }
-
+        logger?.LogDebug($"[HTTPCLIENT响应] {resp.Content.ReadAsStringAsync().Result}\n");
+        SimApiError.ErrorWhenFalse(resp.IsSuccessStatusCode, (int)resp.StatusCode, $"HTTP ERROR: {resp.StatusCode}");
         var res = resp.Content.ReadFromJsonAsync<SimApiBaseResponse<T>>().Result;
-        if (res == null)
-        {
-            throw new SimApiException(500, "请求发生错误");
-        }
-
-        return res.Code != 200 ? throw new SimApiException(res.Code, res.Message) : res.Data;
+        SimApiError.ErrorWhenNull(res, 500, "请求发生错误");
+        SimApiError.ErrorWhen(res.Code != 200, res.Code, res.Message);
+        return res.Data!;
     }
 }

Helpers/SimApiUtil.cs

@@ -1,6 +1,7 @@
 using System;
 using System.IO;
 using System.Linq;
+using System.Net.Mail;
 using System.Reflection;
 using System.Security.Cryptography;
 using System.Text;
@@ -94,6 +95,25 @@ public static class SimApiUtil
         return regex.IsMatch(cell);
     }
 
+    /// <summary>
+    /// 判断是否是Email地址
+    /// </summary>
+    /// <param name="email"></param>
+    /// <returns></returns>
+    public static bool CheckEmail(string email)
+    {
+        try
+        {
+            var m = new MailAddress(email);
+            return m.Address == email;
+        }
+        catch
+        {
+            return false;
+        }
+    }
+
+
     /// <summary>
     /// MD5加密字符串
     /// </summary>
@@ -131,6 +151,51 @@ public static class SimApiUtil
         return sb.ToString();
     }
 
+    /// <summary>
+    /// 字符串Base64编码
+    /// </summary>
+    /// <param name="str"></param>
+    /// <returns></returns>
+    public static string Base64Encode(string str)
+    {
+        var bytes = Encoding.UTF8.GetBytes(str);
+        return Convert.ToBase64String(bytes);
+    }
+
+    /// <summary>
+    /// 从Base64中解码字符串
+    /// </summary>
+    /// <param name="base64Str"></param>
+    /// <returns></returns>
+    public static string Base64Decode(string base64Str)
+    {
+        var bytes = Convert.FromBase64String(base64Str);
+        return Encoding.UTF8.GetString(bytes);
+    }
+
+    /// <summary>
+    /// 把对象Base64编码
+    /// </summary>
+    /// <param name="obj"></param>
+    /// <returns></returns>
+    public static string Base64Encode(object obj)
+    {
+        var json = Json(obj);
+        return Base64Encode(json);
+    }
+
+    /// <summary>
+    /// 从Base64中解析对象
+    /// </summary>
+    /// <param name="base64Str"></param>
+    /// <typeparam name="T"></typeparam>
+    /// <returns></returns>
+    public static T? Base64Decode<T>(string base64Str)
+    {
+        var json = Base64Decode(base64Str);
+        return FromJson<T>(json);
+    }
+
     /// <summary>
     /// 将XML字符串序列化为对象
     /// </summary>
@@ -154,6 +219,17 @@ public static class SimApiUtil
         return JsonSerializer.Serialize(obj, JsonOption);
     }
 
+    /// <summary>
+    /// 将JSON解析为对象（控制台输出中文不会被编码）
+    /// </summary>
+    /// <param name="jsonString"></param>
+    /// <typeparam name="T"></typeparam>
+    /// <returns></returns>
+    public static T? FromJson<T>(string jsonString)
+    {
+        return JsonSerializer.Deserialize<T>(jsonString, JsonOption);
+    }
+
     /// <summary>
     /// 分页
     /// </summary>

Interfaces/ISimApiAuthChecker.cs

@@ -0,0 +1,8 @@
+using SimApi.Communications;
+
+namespace SimApi.Interfaces;
+
+public interface ISimApiAuthChecker
+{
+    public void Run(SimApiLoginItem loginItem, string token);
+}

Middlewares/SimApiAuthMiddleware.cs

@@ -1,8 +1,6 @@
-using System.Text.Json;
+using System.Linq;
 using System.Threading.Tasks;
 using Microsoft.AspNetCore.Http;
-using Microsoft.Extensions.Caching.Distributed;
-using SimApi.Communications;
 using SimApi.Helpers;
 
 namespace SimApi.Middlewares;
@@ -12,20 +10,20 @@ namespace SimApi.Middlewares;
 /// </summary>
 public class SimApiAuthMiddleware(RequestDelegate next)
 {
-    public Task Invoke(HttpContext httpContext, IDistributedCache cache, SimApiAuth auth)
+    public Task Invoke(HttpContext httpContext, SimApiAuth auth)
     {
-        string? token = null;
-        if (httpContext.Request.Headers.TryGetValue("Token", out var header))
-        {
-            token = header;
-        }
+        var token =
+            httpContext.Request.Headers["Token"].FirstOrDefault()
+            ?? httpContext.Request.Query["token"].FirstOrDefault();
 
         if (string.IsNullOrEmpty(token)) return next(httpContext);
         var login = auth.GetLogin(token);
         if (login != null)
         {
+            httpContext.Items.Add("LoginToken", token);
             httpContext.Items.Add("LoginInfo", login);
         }
+
         return next(httpContext);
     }
 }

Middlewares/SimApiExceptionMiddleware.cs

@@ -1,17 +1,22 @@
 using System;
-using System.IO;
+using System.Linq;
 using System.Threading.Tasks;
 using Microsoft.AspNetCore.Http;
 using SimApi.Communications;
 using Microsoft.Extensions.Logging;
+using SimApi.Configurations;
 using SimApi.Exceptions;
+using SimApi.Helpers;
 
 namespace SimApi.Middlewares;
 
 /// <summary>
 /// 异常处理中间件
 /// </summary>
-public class SimApiExceptionMiddleware(RequestDelegate next, ILogger<SimApiExceptionMiddleware> log)
+public class SimApiExceptionMiddleware(
+    RequestDelegate next,
+    ILogger<SimApiExceptionMiddleware> log,
+    SimApiOptions simApiOptions)
 {
     public async Task InvokeAsync(HttpContext context)
     {
@@ -20,50 +25,63 @@ public class SimApiExceptionMiddleware(RequestDelegate next, ILogger<SimApiExcep
             context.Response.Headers["Query-Id"] = header;
         }
 
-        SimApiBaseResponse response;
         try
         {
             await next(context);
             if (!context.Response.HasStarted)
             {
-                switch (context.Response.StatusCode)
-                {
-                    case 200:
-                    case 301:
-                    case 302:
-                        break;
-                    case 404:
-                        throw new SimApiException(context.Response.StatusCode, "请求的接口不存在");
-                    default:
-                        throw new SimApiException(context.Response.StatusCode);
-                }
+                SimApiError.ErrorWhenFalse(
+                    simApiOptions.SimApiExceptionOptions.SkipStatusCodes.Contains(context.Response.StatusCode),
+                    context.Response.StatusCode);
             }
         }
-        catch (SimApiException ex)
-        {
-            response = string.IsNullOrEmpty(ex.Message)
-                ? new SimApiBaseResponse(ex.Code)
-                : new SimApiBaseResponse(ex.Code, ex.Message);
-            ErrorResponse(context, response);
-        }
         catch (Exception ex)
         {
-            log.LogError("{Msg}", ex.Message);
-            log.LogError("{Msg}", ex.StackTrace);
-            response = new SimApiBaseResponse(500, ex.Message);
-            ErrorResponse(context, response);
+            // 解包异步异常
+            ex = UnwrapAggregateException(ex);
+            SimApiBaseResponse response;
+            if (ex is SimApiException simEx)
+            {
+                response = string.IsNullOrEmpty(simEx.Message)
+                    ? new SimApiBaseResponse(simEx.Code)
+                    : new SimApiBaseResponse(simEx.Code, simEx.Message);
+                if (context.Response.StatusCode == 404)
+                {
+                    response.Message = "接口不存在";
+                }
+            }
+            else
+            {
+                log.LogError(ex, ex.Message);
+                response = new SimApiBaseResponse(500);
+            }
+
+            await ErrorResponseAsync(context, response);
         }
     }
 
-    /// <summary>
-    /// 异常抛出错误
-    /// </summary>
-    /// <param name="context"></param>
-    /// <param name="response"></param>
-    private static void ErrorResponse(HttpContext context, SimApiBaseResponse response)
+    private static Exception UnwrapAggregateException(Exception ex)
     {
+        while (ex is AggregateException aggEx && aggEx.InnerException != null)
+        {
+            ex = aggEx.InnerException;
+        }
+
+        return ex;
+    }
+
+    /// <summary>
+    /// 异步输出错误响应（修复异步异常捕获核心）
+    /// </summary>
+    private static async Task ErrorResponseAsync(HttpContext context, SimApiBaseResponse response)
+    {
+        // 响应已开始则直接返回，不修改
+        if (context.Response.HasStarted)
+            return;
+
         context.Response.StatusCode = 200;
-        context.Response.Headers.Append("Content-Type", "application/json");
-        context.Response.WriteAsync(response.ToString()).Wait();
+        context.Response.ContentType = "application/json";
+        context.Response.ContentLength = null; // 清除可能已设置的 Content-Length
+        await context.Response.WriteAsync(response.ToString());
     }
 }

ModelBinders/AesBodyModelBinder.cs

@@ -30,7 +30,7 @@ public class AesBodyModelBinder : IModelBinder
         SimApiOneFieldRequest<string>? aesRequest;
         try
         {
-            aesRequest = JsonSerializer.Deserialize<SimApiOneFieldRequest<string>>(requestBody, SimApiUtil.JsonOption);
+            aesRequest = SimApiUtil.FromJson<SimApiOneFieldRequest<string>>(requestBody);
         }
         catch (JsonException ex)
         {

README.md

@@ -1,55 +1,676 @@
-# SimApi 基于.Net的一个基础辅助包
+# SimApi for .NET
 
-[![PublishNugetPackage](https://github.com/simcu/simapi-net/actions/workflows/nuget-publish.yml/badge.svg)](https://github.com/simcu/simapi-net/actions/workflows/nuget-publish.yml)
-### 包含了以下组件:
+> NuGet: `Simcu.SimApi` | 目标框架: `net8.0` / `net9.0` / `net10.0`  
+> 作者: xRain@SimcuTeam  
 
-1. 统一的参数检测,基础认证服务
-所有的控制器需要继承 YYApi.Controllers.BaseController
+ASP.NET Core API 基础框架库，提供统一异常拦截、响应封装、Token 认证、Swagger 文档、S3 存储、MQTT 通信、Hangfire 任务调度、Auth Center 网关鉴权与 IAM 权限管理。
 
-```C#
-using Models;
-using SimApi.Controllers;
+---
 
-namespace Controllers
+## 快速开始
+
+```csharp
+var builder = WebApplication.CreateBuilder(args);
+builder.Services.AddSimApi(options =>
 {
-    public class BaseController : SimApiBaseController
+    options.RedisConfiguration = "localhost:6379";
+    options.EnableSimApiAuth = true;
+    options.EnableSimApiDoc = true;
+
+    options.ConfigureSimApiDoc(doc =>
     {
-        /// <summary>
-        /// 获取登录用户信息
-        /// </summary>
-        protected SimApiLoginInfoItem LoginInfo => (SimApiLoginInfoItem) HttpContext.Items["LoginInfo"];
-    }
+        doc.DocumentTitle = "我的API";
+        doc.ApiGroups = [new("api", "公共接口"), new("admin", "管理接口")];
+    });
+});
+
+var app = builder.Build();
+app.UseSimApi();
+app.Run();
+```
+
+---
+
+## 核心概念
+
+### 统一响应格式
+
+所有接口输出 JSON，HTTP 状态码始终 `200`，错误信息在 `code` 字段：
+
+| code | 含义       |
+| ---- | ---------- |
+| 200  | 成功       |
+| 204  | 无数据     |
+| 400  | 参数错误   |
+| 401  | 需要登录   |
+| 403  | 无权访问   |
+| 404  | 资源不存在 |
+| 500  | 服务器错误 |
+
+### 异常处理流程
+
+```
+请求 → SimApiExceptionMiddleware(全异常捕获→HTTP 200+JSON)
+     → SimApiAuthMiddleware(Token→LoginInfo)
+     → [SimApiSign] Filter(签名)
+     → [SimApiAuth] Filter(登录检查)
+     → OnActionExecuting(模型验证→code 400)
+     → Action
+     → SimApiResponseFilter(封装响应)
+```
+
+---
+
+## 项目结构
+
+```
+SimApi/
+├── Attributes/            # [SimApiAuth] [SimApiDoc] [SimApiSign] [AesBody] [SynapseEvent] [SynapseRpc] [OriginResponse]
+├── AuthSDK/               # Auth Center & IAM SDK
+│   ├── SimApiAuthClient.cs             HTTP 客户端（签名调用 Auth Center）
+│   ├── SimApiAuthCenter.cs             Auth Center API 封装
+│   ├── SimApiAuthCenterDto.cs          数据模型
+│   ├── SimApiAuthCenterMiddleware.cs   网关鉴权中间件
+│   ├── SimApiAuthIam.cs                IAM 权限管理 API
+│   └── SimApiAuthIamDto.cs             IAM 数据模型
+├── Communications/        # SimApiBaseResponse, PageResponse<T>, SimApiLoginItem, SimApiBaseRequest
+├── Configurations/        # SimApiOptions + 各模块 Option 类
+├── Controllers/           # SimApiBaseController, SimApiCommonController, SimApiAuthController
+├── Helpers/               # SimApiError, SimApiAuth, SimApiCache, SimApiHttpClient, SimApiStorage, SimApiUtil, SimApiAesUtil
+├── Interfaces/            # ISimApiAuthChecker
+├── Middlewares/            # SimApiExceptionMiddleware, SimApiAuthMiddleware
+├── Synapse/               # MQTT Pub/Sub + RPC + Config Store
+├── Exceptions/            # SimApiException
+├── Models/                # SimApiBaseModel
+├── SwaggerFilters/        # 文档自动过滤器
+├── ModelBinders/          # AesBody, SimApiSign
+├── Logger/                # 彩色控制台日志
+└── SimApiExtensions.cs    # AddSimApi + UseSimApi
+```
+
+---
+
+## 1. 错误处理 — SimApiError
+
+独立静态类 `SimApi.Helpers.SimApiError`。所有错误最终 → `throw new SimApiException(code, message)` → 中间件捕获。
+
+**使用**: 文件顶部加 `using static SimApi.Helpers.SimApiError;`
+
+### 完整方法签名
+
+```csharp
+// 直接抛错
+void Error(int code = 500, string message = "");
+
+// condition 为 true 时抛错 (code 默认 400)
+void ErrorWhen([DoesNotReturnIf(true)] bool condition, int code = 400, string message = "");
+
+// 同上（别名）
+void ErrorWhenTrue([DoesNotReturnIf(true)] bool condition, int code = 400, string message = "");
+
+// condition 为 false 时抛错
+void ErrorWhenFalse([DoesNotReturnIf(false)] bool condition, int code = 400, string message = "");
+
+// obj 为 null 时抛错 (code 默认 404)
+void ErrorWhenNull([NotNull] object? condition, int code = 404, string message = "");
+```
+
+### 示例
+
+```csharp
+using static SimApi.Helpers.SimApiError;
+
+var user = db.Users.Find(id);
+ErrorWhenNull(user, 404, "用户不存在");
+ErrorWhen(amount <= 0, 400, "金额无效");
+ErrorWhenFalse(hasPermission, 403, "无权操作");
+Error(500, "服务器内部错误");
+```
+
+---
+
+## 2. 控制器 — SimApiBaseController
+
+```csharp
+public class SimApiBaseController : Controller
+{
+    // 当前登录信息（需 EnableSimApiAuth）
+    protected SimApiLoginItem LoginInfo => (SimApiLoginItem)HttpContext.Items["LoginInfo"]!;
+    protected string LoginToken => (string)HttpContext.Items["LoginToken"]!;
+
+    // OnActionExecuting 自动验证 ModelState → 无效时抛 code 400
 }
 ```
 
+**内建**: `[Consumes("application/json")]` + `[Produces("application/json")]`
 
-统一配置，现在只需要进行AddSimApi的配置， Configure中直接 UseSimApi即可。
-```C#
-services.AddSimApi(options =>
+### 自动路由
+
+| 路由                    | 方法     | 条件                                         | 说明                     |
+| ----------------------- | -------- | -------------------------------------------- | ------------------------ |
+| `/versions`             | GET/POST | `VersionRoute != null`(默认)                 | 返回 SimApi/App 版本     |
+| `/user/info`            | POST     | `EnableSimApiAuth` + `UserInfoRoute != null` | 需登录，返回 LoginInfo   |
+| `/auth/logout`          | POST     | `EnableSimApiAuth` + `LogoutRoute != null`   | 退出登录（可自定义路由） |
+| `/swagger`              | GET      | `EnableSimApiDoc`                            | Swagger UI               |
+| `/jobs`                 | GET      | `EnableJob` + `DashboardUrl != null`         | Hangfire 控制台          |
+| `/exception/{code:int}` | GET      | 始终                                         | 错误反馈页面             |
+
+### 返回值规范
+
+| 场景       | 返回类型                  |
+| ---------- | ------------------------- |
+| 写操作     | `void`                    |
+| 单条查询   | 直接 Entity               |
+| 列表查询   | `Entity[]`                |
+| 分页       | `PageResponse<Entity[]>`  |
+| 自定义状态 | `SimApiBaseResponse`      |
+| 跳封装     | 方法加 `[OriginResponse]` |
+
+---
+
+## 3. 认证系统 — SimApiAuth
+
+```csharp
+string Login(SimApiLoginItem loginItem, TimeSpan? expireTime = null, string? token = null);  // 默认7天
+string Update(SimApiLoginItem loginItem, string token);
+SimApiLoginItem? GetLogin(string token);
+SimApiLoginItem[] GetAllLogins(string userId);
+void Logout(string token);
+void LogoutAll(string userId);
+```
+
+```csharp
+// LoginItem 结构
+public class SimApiLoginItem {
+    required string Id;
+    string[] Type = ["user"];
+    Dictionary<string, string> Meta = [];
+    Dictionary<string, object?> Extra = [];
+}
+```
+
+**Token 传参**: Header `Token: <value>`
+
+### 认证后处理 Hook — ISimApiAuthChecker
+
+```csharp
+public interface ISimApiAuthChecker {
+    void Run(SimApiLoginItem loginItem, string token);
+}
+// 实现后自动注册为 Scoped，每次认证后调用
+```
+
+---
+
+## 4. AuthSDK — Auth Center 网关 & IAM
+
+启用: `EnableSimApiAuthGate = true`
+
+### 4.1 配置
+
+```csharp
+options.EnableSimApiAuthGate = true;
+options.ConfigureSimApiAuthCenter(gate =>
 {
-   options.ConfigureSimApiDoc(options =>
-   {
-     options.ApiGroups = new[]
-     {
-        new SimApiDocGroupOption
-            {Id = "admin", Name = "后台管理接口", Description = "本接口调用需要Scope：sac.api.admin"},
-        new SimApiDocGroupOption
-            {Id = "user-v1", Name = "用户中心接口", Description = "本接口调用需要Scope：sac.api.user"}
-     };
-     options.ApiAuth = new SimApiAuthOption
-       {
-         Type = new[] {"ClientCredentials", "Implicit", "AuthorizationCode"},
-         Scopes = new Dictionary<string, string>
-            {
-              {"sac.api.user", "用户信息接口权限"},
-              {"sac.api.admin", "后台管理API"}
-            },
-         AuthorizationUrl = "/connect/authorize",
-         TokenUrl = "/connect/token"
-       };
-     });
-     options.EnableSimApiStorage = true;
-     options.SimApiStorageOptions = Configuration.GetSection("S3").Get<SimApiStorageOptions>();
+    gate.Server  = "https://auth.coce.cc";
+    gate.AppId   = "your-app-id";
+    gate.AppKey  = "your-app-key";
+    gate.UseMiddleware = true;   // 内部应用启用，解析 X-SimApi-Gate-Auth Header
+    gate.UseIam   = true;        // 启用 IAM
 });
 ```
-基于S3的存储,基于RabbitMq的事件RPC调用,自定义Logger格式,自定义响应格式
+
+### 4.2 SimApiAuthClient
+
+继承 `SimApiHttpClient`，自动配置 Server/AppId/AppKey，对 Auth Center 发起签名请求。
+
+### 4.3 SimApiAuthCenter — Auth Center API
+
+```csharp
+// === 签名验证 ===
+void VerifySign(string appId, string timestamp, string nonce, string sign);
+
+// === 群组 ===
+GroupRelatedItem[]? GroupRelated(string profileId);
+AppAndProfileItem[]? GroupSearch(string keyword, int skip = 0, int take = 20);
+GroupDetailTreeNode? GroupDetail(string groupId, string profileId);
+string[]? GroupRelatedIndex(string groupId, string profileId);
+
+// === Profile ===
+AppAndProfileItem[]? ProfileSearch(string keyword, int skip = 0, int take = 20);
+AppAndProfileItem[]? ProfileList(string[] ids);
+
+// === 内部应用专用 ===
+bool CheckIsAppOwner(string profileId, string applicationId);
+AppAndProfileItem[]? GetAppList(string profileId, IEnumerable<string> appIds);
+
+// === 登录 ===
+GetCodeResponse GetLoginCode(string? scene = null, Dictionary<string, object>? data = null, string? backUrl = null);
+LoginInfoResponse GetLoginInfo(string code, string? scene = null);
+
+// === 安全验证（二次确认） ===
+GetCodeResponse GetConfirmCode(string scene, string userId, Dictionary<string, object>? data = null, string? backUrl = null);
+ConfirmResponse Confirm(string code, string scene, string? userId = null);
+```
+
+**GetCodeResponse**: `{ Code, Server, FullUrl }`
+
+### 4.4 SimApiAuthIam — IAM 权限管理
+
+```csharp
+void RegisterPermissions(PermissionItem[] permissions);
+string[] GetPermissionOwned(string profileId);
+void CheckPermission(string profileId, string permission);
+```
+
+**PermissionItem**: `{ Identifier, Name, Group, Description }`
+
+### 4.5 SimApiAuthCenterMiddleware — 网关鉴权
+
+内部应用专用。解析请求头 `X-SimApi-Gate-Auth` / `X-SimApi-Gate-Time` / `X-SimApi-Gate-Sign`，MD5 验签后将 Base64 解码的用户信息注入 `HttpContext.Items["LoginInfo"]`。
+
+---
+
+## 5. Attributes 完整参考
+
+### [SimApiAuth] — 身份认证
+
+```csharp
+[SimApiAuth]                    // 仅检查登录
+[SimApiAuth("admin")]           // 单角色
+[SimApiAuth("admin,manager")]   // 逗号分隔 OR 关系
+[SimApiAuth(new[]{"a","b"})]    // 数组形式
+```
+- 加在 **Controller 类** 或 **方法** 上
+- **禁止** 代码中手动判断 `LoginInfo.Type.Contains(...)` 做权限控制
+
+### [SimApiDoc] — Swagger 文档注解
+
+```csharp
+[SimApiDoc("分组名", "接口名称")]
+[SimApiDoc("分组名", "接口名称", "详细描述")]
+[SimApiDoc(new[]{"tag1","tag2"}, "接口名称")]
+```
+
+### [SimApiSign] — API 签名验证
+
+```csharp
+[SimApiSign(KeyProvider = typeof(MySignProvider))]
+// 签名: MD5(field1=v1&...&appId=xxx&timestamp=ts&nonce=nnn&密钥)
+```
+
+实现 `SimApiSignProviderBase`：
+```csharp
+public class MySignProvider : SimApiSignProviderBase
+{
+    // 可覆盖: AppIdName, TimestampName, NonceName, SignName, QueryExpires(秒), DuplicateRequestProtection, SignFields
+    public override string? GetKey(string? appId) { ... }
+}
+```
+
+### [AesBody] — AES 解密请求体
+
+```csharp
+[AesBody(KeyProvider = typeof(MyAesKeyProvider))] MyRequest req
+// 客户端提交: {"data": "Base64(AES-256-CBC 密文)"}
+```
+
+实现 `AesBodyProviderBase`，覆盖 `AppIdName` 和 `GetKey(appId)`。
+
+### [SynapseEvent] — MQTT 事件处理
+
+```csharp
+[SynapseEvent("order/created")]          // 指定 eventName
+[SynapseEvent]                            // 不指定 = 方法名
+// 参数: 1个(string eventName) / 2个(string eventName, T data)
+// 注意: 至少需要1个参数
+```
+
+### [SynapseRpc] — MQTT RPC 方法
+
+```csharp
+[SynapseRpc]                              // 注册名 "ClassName.MethodName"
+[SynapseRpc("customName")]                // 自定义名
+// 参数: 0~2个，第2个固定 Dictionary<string,string>(headers)
+```
+
+### [OriginResponse] — 跳过响应封装
+
+```csharp
+[HttpGet][OriginResponse]
+public string GetRaw() => "raw";
+```
+
+---
+
+## 6. Swagger 文档 — EnableSimApiDoc
+
+```csharp
+options.ConfigureSimApiDoc(doc =>
+{
+    doc.DocumentTitle = "接口文档";
+    doc.ApiGroups = [new("api", "公共"), new("admin", "管理", "描述可选")];
+    doc.SupportedMethod = [SubmitMethod.Post];       // 默认仅POST
+    doc.ApiAuth = new SimApiAuthOption { Type = ["SimApiAuth"] };  // 认证方式
+});
+```
+
+每组通过 `[ApiExplorerSettings(GroupName = "admin")]` 分类。
+
+### 自动过滤器
+
+| 过滤器                            | 效果                                 |
+| --------------------------------- | ------------------------------------ |
+| `SimApiResponseOperationFilter`   | 返回值包装为 `SimApiBaseResponse<T>` |
+| `SimApiAuthOperationFilter`       | 鉴权接口 + Token Header              |
+| `SimApiSignOperationFilter`       | 签名接口注入签名参数                 |
+| `AesBodyOperationFilter`          | AES 接口展示原始结构                 |
+| `GlobalDynamicObjectSchemaFilter` | object/Dictionary → Schema           |
+| `RemoveEmptyTagsFilter`           | 清除空分组                           |
+
+---
+
+## 7. 对象存储 — EnableSimApiStorage
+
+基于 MinIO SDK（S3 兼容）。
+
+### 配置
+
+```csharp
+options.EnableSimApiStorage = true;
+options.ConfigureSimApiStorage(s =>
+{
+    s.Endpoint  = "http://minio:9000";    // 不能以 / 结尾
+    s.AccessKey = "admin";
+    s.SecretKey = "pass";
+    s.Bucket    = "bucket";
+    s.ServeUrl  = "http://cdn.example.com/bucket";  // 不能以 / 结尾
+});
+```
+
+### API
+
+```csharp
+GetUploadUrlResponse GetUploadUrl(string path, int expire = 7200);
+// 返回: { UploadUrl, DownloadUrl, Path }
+
+string GetDownloadUrl(string path, int expire = 600);
+void UploadFile(string path, Stream stream, string contentType = "image/png");
+string? FullUrl(string? path);           // 路径→完整URL
+string? GetUrl(string? path);            // 同上
+string? GetPath(string? url);            // URL→相对路径
+IMinioClient Client { get; }             // 底层 MinIO 客户端
+```
+
+> **路径必须以 `/` 开头**
+
+---
+
+## 8. Redis 缓存 — SimApiCache
+
+依赖 `RedisConfiguration`，Key 自动加前缀 `SimApi:Cache:`。
+
+```csharp
+void Set(string key, object value, DistributedCacheEntryOptions? options = null);
+T? Get<T>(string key);
+string? Get(string key);
+bool HasKey(string key);
+void Remove(string key);
+```
+
+---
+
+## 9. HTTP 客户端 — SimApiHttpClient
+
+用于调用其他带签名/AES 的 SimApi 服务。
+
+### 属性
+
+```csharp
+virtual string Server { get; init; }
+virtual string AppId   { get; init; }
+virtual string AppKey  { get; init; }
+virtual string SignName      { get; init; } = "sign";
+virtual string TimestampName  { get; init; } = "timestamp";
+virtual string NonceName     { get; init; } = "nonce";
+virtual string? AppIdName    { get; init; } = "appId";
+virtual string[] SignFields  { get; init; } = [];
+```
+
+### 调用方法
+
+```csharp
+T SignQuery<T>(string url, object? body = null, Dictionary<string, string>? queries = null);
+T AesQuery<T>(string url, object body);
+T AesSignQuery<T>(string url, object body, Dictionary<string, string>? queries = null);
+```
+
+---
+
+## 10. 任务调度 — EnableJob
+
+Hangfire + Redis。
+
+```csharp
+options.EnableJob = true;
+options.ConfigureSimApiJob(job =>
+{
+    job.DashboardUrl = "/jobs";           // null = 不开启
+    job.DashboardAuthUser = "admin";
+    job.DashboardAuthPass = "pass";
+    job.Database = 1;                     // Redis DB 编号
+    job.Servers = [
+        new() { Queues = ["default"], WorkerNum = 5 },
+        new() { Queues = ["email"],   WorkerNum = 2 }
+    ];
+});
+```
+
+```csharp
+BackgroundJob.Enqueue(() => DoWork());
+BackgroundJob.Schedule(() => DoWork(), TimeSpan.FromMinutes(5));
+RecurringJob.AddOrUpdate("id", () => DoWork(), Cron.Daily);
+BackgroundJob.ContinueJobWith(id, () => Step2());
+```
+
+---
+
+## 11. MQTT 通信 — EnableSynapse
+
+基于 MQTTnet v5，WebSocket 连接。
+
+### 配置
+
+```csharp
+options.EnableSynapse = true;
+options.ConfigureSimApiSynapse(s =>
+{
+    s.Websocket = "ws://mqtt:8083/mqtt";
+    s.Username  = "user";
+    s.Password  = "pass";
+    s.SysName   = "my-system";
+    s.AppName   = "order-service";
+    s.AppId     = "instance-001";        // 不填自动GUID
+    s.RpcTimeout = 3;                    // 秒
+    s.EventLoadBalancing = false;        // $queue 负载均衡
+    s.EnableConfigStore  = true;         // 分布式配置中心
+});
+```
+
+### Topic 规则
+
+| 用途     | Topic 格式                                             |
+| -------- | ------------------------------------------------------ |
+| 事件发布 | `{SysName}/event/{AppName}/{eventName}`                |
+| 事件订阅 | `{SysName}/event/{eventName}` (或 `$queue/` 前缀)      |
+| RPC 请求 | `{SysName}/{targetApp}/rpc/server/{method}`            |
+| RPC 响应 | `{SysName}/{callerApp}/rpc/client/{AppId}/{messageId}` |
+| 配置     | `{SysName}/synapse-config-store/{key}` (Retain)        |
+
+### API
+
+```csharp
+// 事件
+bool Event(string eventName, dynamic? param = null);
+
+// RPC (同步)
+SimApiBaseResponse<T> Rpc<T>(string appName, string method, dynamic? param = null,
+    Dictionary<string, string>? headers = null, int? timeout = null);
+
+// RPC 内报错
+void RpcError(int code, string message = "");
+void RpcErrorWhen(bool condition, int code, string message = "");
+
+// 分布式配置
+bool SetConfig(string key, string value);
+string? GetConfig(string key);
+```
+
+### 处理器扫描（自动注册）
+
+带 `[SynapseRpc]` / `[SynapseEvent]` 的类自动扫描注册为 Scoped 服务。
+
+---
+
+## 12. AES 加解密 — SimApiAesUtil
+
+AES-256-CBC + PKCS7，密钥经 SHA256 处理。
+
+```csharp
+string cipher = SimApiAesUtil.Encrypt("明文", "任意长度密钥");
+string plain  = SimApiAesUtil.Decrypt(cipher, "任意长度密钥");
+```
+
+---
+
+## 13. 工具集 — SimApiUtil
+
+```csharp
+DateTime CstNow;                       // UTC+8
+double TimestampNow;                   // 秒级 Unix
+string SimApiVersion;                  // NuGet 包版本
+string AppVersion;                     // 宿主应用版本
+
+string Md5(string src, string mode = "x2");    // x2=32位, x3=48位, x4=64位
+string Sha1(string src, string mode = "x2");
+string Base64Encode(string str);
+string Base64Decode(string base64Str);
+string Base64Encode(object obj);
+T? Base64Decode<T>(string base64Str);
+
+string Json(object? obj);              // camelCase，中文不转义
+T? FromJson<T>(string json);
+T XmlDeserialize<T>(string xml);
+JsonSerializerOptions JsonOption;      // 可复用
+
+bool CheckCell(string cell);           // 手机号验证
+bool CheckEmail(string email);
+
+IQueryable<T> Paginate<T>(this IQueryable<T> query, int page, int count);
+```
+
+---
+
+## 14. 数据模型 — SimApiBaseModel
+
+```csharp
+public class UserEntity : SimApiBaseModel
+{
+    // 自动: Id(GUID string), CreatedAt, UpdatedAt
+    // 默认忽略映射: Id, CreatedAt, UpdatedAt
+}
+
+void MapData<TS>(TS source, bool mapAll = false);          // 同名同类型非null属性
+void MapData<TS>(TS source, string[] mapFields);           // 指定字段
+void UpdateTime();
+```
+
+---
+
+## 15. DTO 规范
+
+| 类型 | 命名              | 示例              |
+| ---- | ----------------- | ----------------- |
+| 请求 | `[动作]Request`   | `UserEditRequest` |
+| 响应 | `[动作]Response`  | `TokenResponse`   |
+| 载体 | `[含义]Data/Item` | `GenerateData`    |
+
+### 框架内置 DTO
+
+```csharp
+class SimApiStringIdOnlyRequest { required string Id; }
+class SimApiOneFieldRequest<T>    { T? Data; }
+class SimApiBasePageRequest       { int Page = 1; int Count = 20; }
+class SimApiBaseResponse          { int Code; string Message; }  // code=200 默认
+class SimApiBaseResponse<T> : SimApiBaseResponse { T? Data; }
+class PageResponse<T>             { T? List; int Page; int Count; int Total; }
+```
+
+---
+
+## 16. SimApiOptions 完整配置
+
+```csharp
+builder.Services.AddSimApi(options =>
+{
+    options.RedisConfiguration = "localhost:6379";
+
+    // 功能开关
+    options.EnableSimApiAuth         = false;    // Token 认证
+    options.EnableSimApiAuthGate     = false;    // Auth Center 网关鉴权
+    options.EnableSimApiDoc          = false;    // Swagger 文档
+    options.EnableSimApiStorage      = false;    // S3 存储
+    options.EnableJob                = false;    // Hangfire
+    options.EnableSynapse            = false;    // MQTT
+    options.EnableSimApiHttpClient   = false;    // 外部 HTTP 调用
+    options.EnableLogger             = true;     // 控制台日志
+    options.EnableCors               = true;     // 全量 CORS
+    options.EnableSimApiException    = true;     // 全局异常拦截
+    options.EnableSimApiResponseFilter = true;   // 响应统一封装
+    options.EnableForwardHeaders     = true;     // 反向代理 Header
+    options.EnableLowerUrl           = true;     // URL 小写
+
+    // 子模块配置
+    options.ConfigureSimApiDoc(doc => { ... });
+    options.ConfigureSimApiStorage(s => { ... });
+    options.ConfigureSimApiJob(job => { ... });
+    options.ConfigureSimApiSynapse(s => { ... });
+    options.ConfigureSimApiAuthCenter(gate => { ... });
+    options.ConfigureSimApiHttpClient(http => { ... });
+    options.ConfigureSimApiRoute(route => { ... });
+    options.ConfigureSimApiException(ex => { ... });
+});
+```
+
+---
+
+## 17. GOTCHAS — 常见错误
+
+| ❌ 错误                                                 | ✅ 正确                                      |
+| ------------------------------------------------------ | ------------------------------------------- |
+| 存储路径 `avatars/file.jpg`（无前导 `/`）              | 必须以 **`/`** 开头                         |
+| `s.Endpoint = "http://x:9000/"`                        | **不能以 `/` 结尾**                         |
+| `synapse.PublishEvent(...)`                            | 方法名是 **`synapse.Event(...)`**           |
+| `synapse.CallRpcAsync(...)`                            | 方法名是 **`synapse.Rpc<T>(...)`**          |
+| HTTP 4xx/5xx 状态码                                    | 永远 **HTTP 200**，错误在 JSON code         |
+| `SupportedMethod` 写多种方法                           | 默认仅 **POST**                             |
+| `SimApiStorageOptions = Configuration.GetSection(...)` | 用 **`ConfigureSimApiStorage(s => {...})`** |
+| 代码中 `LoginInfo.Type.Contains("admin")`              | 用 `[SimApiAuth("admin")]`                  |
+| `return ActionResult<T>`                               | 直接返回 Entity / void                      |
+---
+
+## 18. 禁止事项
+
+| ❌ 禁止                                  | ✅ 正确                                                |
+| --------------------------------------- | ----------------------------------------------------- |
+| HTTP 4xx/5xx 表达业务错误               | HTTP 200 + JSON `code`                                |
+| `throw new Exception(msg)`              | `ErrorWhen` 或 `throw new SimApiException(code, msg)` |
+| 鉴权 Attribute 只放方法                 | 可以放 Controller **类**上                            |
+| 手动判断 `LoginInfo.Type.Contains(...)` | `[SimApiAuth("role")]`                                |
+| Entity 配导航属性 / Fluent API          | Convention 自动映射                                   |
+| 花括号块命名空间                        | 文件范围 `namespace X;`                               |
+| 传统构造函数注入                        | 主构造函数                                            |
+| `new List<T>()` / `new string[]{}`      | `[]` 集合表达式                                       |
+| `Count() > 0`                           | `Any()`                                               |
+| `ToList()` → 数组                       | 直接 `ToArray()`                                      |
+| 全局 catch 吞异常                       | 让异常冒泡到 SimApiExceptionMiddleware                |

SimApi.csproj

@@ -1,5 +1,4 @@
 <Project Sdk="Microsoft.NET.Sdk.Web">
-
     <PropertyGroup>
         <OutputType>Library</OutputType>
         <PackOnBuild>true</PackOnBuild>
@@ -13,26 +12,13 @@
         <GeneratePackageOnBuild>true</GeneratePackageOnBuild>
     </PropertyGroup>
     <ItemGroup>
-        <Folder Include="Communications\"/>
-        <Folder Include="Exceptions\"/>
-    </ItemGroup>
-    <ItemGroup>
-        <PackageReference Include="Hangfire.AspNetCore" Version="1.8.22" />
+        <PackageReference Include="Hangfire.AspNetCore" Version="1.8.23" />
         <PackageReference Include="Hangfire.Console" Version="1.4.3"/>
         <PackageReference Include="Hangfire.Redis.StackExchange" Version="1.12.0"/>
-        <PackageReference Include="Microsoft.Extensions.Caching.StackExchangeRedis" Version="10.0.1" />
+        <PackageReference Include="Microsoft.Extensions.Caching.StackExchangeRedis" Version="10.0.9" />
         <PackageReference Include="Minio" Version="7.0.0" />
-        <PackageReference Include="MQTTnet" Version="5.0.1.1416"/>
-        <PackageReference Include="Swashbuckle.AspNetCore.Annotations" Version="10.1.0" />
-        <PackageReference Include="Swashbuckle.AspNetCore.SwaggerUI" Version="10.1.0" />
+        <PackageReference Include="MQTTnet" Version="5.1.0.1559" />
+        <PackageReference Include="Swashbuckle.AspNetCore.Annotations" Version="10.2.3" />
+        <PackageReference Include="Swashbuckle.AspNetCore.SwaggerUI" Version="10.2.3" />
     </ItemGroup>
-    <ProjectExtensions>
-        <MonoDevelop>
-            <Properties>
-                <Policies>
-                    <DotNetNamingPolicy ResourceNamePolicy="FileFormatDefault" DirectoryNamespaceAssociation="PrefixedHierarchical"/>
-                </Policies>
-            </Properties>
-        </MonoDevelop>
-    </ProjectExtensions>
 </Project>

SimApiExtensions.cs

@@ -1,5 +1,4 @@
 using System;
-using System.Collections.Generic;
 using System.Diagnostics;
 using System.Linq;
 using System.Reflection;
@@ -17,10 +16,12 @@ using Microsoft.AspNetCore.Mvc;
 using Microsoft.Extensions.Hosting;
 using Microsoft.Extensions.Logging;
 using SimApi.Attributes;
-using SimApi.CoceSdk;
+using SimApi.AuthSDK;
 using SimApi.Configurations;
+using SimApi.Interfaces;
 using SimApi.Logger;
 using SimApi.SwaggerFilters;
+using StackExchange.Redis;
 
 namespace SimApi;
 
@@ -38,6 +39,8 @@ public static class SimApiExtensions
         if (simApiOptions.RedisConfiguration != null)
         {
             builder.AddStackExchangeRedisCache(x => x.Configuration = simApiOptions.RedisConfiguration);
+            builder.AddSingleton<IConnectionMultiplexer>(_ =>
+                ConnectionMultiplexer.Connect(simApiOptions.RedisConfiguration));
             builder.AddSingleton<SimApiCache>();
         }
 
@@ -56,9 +59,18 @@ public static class SimApiExtensions
             builder.AddSingleton<SimApiAuth>();
         }
 
-        if (simApiOptions.EnableCoceSdk)
+        var simApiAuthChecker = typeof(ISimApiAuthChecker);
+        var stackTrace = new StackTrace();
+        var callingMethod = stackTrace.GetFrame(stackTrace.FrameCount - 1)?.GetMethod();
+        var callerAssembly = callingMethod?.DeclaringType?.Assembly;
+        var callerTypes = callerAssembly?.GetTypes() ?? [];
+
+        foreach (var type in callerTypes)
         {
-            builder.AddSingleton<CoceApp>();
+            if (type is { IsClass: true, IsAbstract: false } && simApiAuthChecker.IsAssignableFrom(type))
+            {
+                builder.AddScoped(simApiAuthChecker, type);
+            }
         }
 
         if (simApiOptions.EnableJob)
@@ -91,15 +103,15 @@ public static class SimApiExtensions
                 policy => { policy.AllowAnyHeader().AllowAnyMethod().AllowAnyOrigin(); }));
         }
 
+        if (simApiOptions.EnableSimApiHttpClient)
+        {
+            builder.AddSingleton<SimApiHttpClient>();
+        }
+
         if (simApiOptions.EnableSynapse)
         {
             builder.AddSingleton<Synapse>();
-            //自动依赖注入
-            var stackTrace = new StackTrace();
-            var callingMethod = stackTrace.GetFrame(stackTrace.FrameCount - 1)?.GetMethod();
-            var assembly = callingMethod?.DeclaringType?.Assembly;
-            var types = assembly?.GetTypes() ?? [];
-            foreach (var type in types)
+            foreach (var type in callerTypes)
             {
                 var methodsWithSynapse = type.GetMethods()
                     .Where(m => m.GetCustomAttribute<SynapseRpcAttribute>() != null ||
@@ -136,14 +148,14 @@ public static class SimApiExtensions
                         if (t.IsArray)
                         {
                             var elementType = t.GetElementType();
-                            return $"{GetSimpleTypeName(elementType, depth + 1)}[]";
+                            return $"{GetSimpleTypeName(elementType!, depth + 1)}[]";
                         }
 
                         // 处理可空类型
                         if (Nullable.GetUnderlyingType(t) != null)
                         {
                             var underlyingType = Nullable.GetUnderlyingType(t);
-                            return GetSimpleTypeName(underlyingType, depth + 1);
+                            return GetSimpleTypeName(underlyingType!, depth + 1);
                         }
 
                         // 处理泛型类型（递归解析嵌套泛型）
@@ -317,6 +329,16 @@ public static class SimApiExtensions
                 });
         }
 
+        if (simApiOptions.EnableSimApiAuthGate)
+        {
+            builder.AddSingleton<SimApiAuthClient>();
+            builder.AddSingleton<SimApiAuthCenter>();
+            if (simApiOptions.SimApiAuthCenterOptions.UseIam)
+            {
+                builder.AddSingleton<SimApiAuthIam>();
+            }
+        }
+
         builder.AddSingleton(simApiOptions);
         return builder;
     }
@@ -343,11 +365,11 @@ public static class SimApiExtensions
             builder.Services.GetService<SimApiStorage>();
         }
 
-        if (options.EnableCoceSdk)
+        if (options.EnableSimApiHttpClient)
         {
-            logger.LogInformation("开始配置CoceAppSdk...\nApi入口: {ApiUrl}\nAuth入口:{AuthUrl}n\nAppId: {AppId}",
-                options.CoceSdkOptions.ApiEndpoint, options.CoceSdkOptions.AuthEndpoint,
-                options.CoceSdkOptions.AppId);
+            logger.LogInformation("开始配置SimApiHttpClient...\n服务器地址: {ApiUrl}\nAppId:{AuthUrl}n\nAppkey: {AppId}",
+                options.SimApiHttpClientOptions.Server, options.SimApiHttpClientOptions.AppId,
+                !string.IsNullOrEmpty(options.SimApiHttpClientOptions.AppKey));
         }
 
         if (options.EnableSynapse)
@@ -392,57 +414,42 @@ public static class SimApiExtensions
             builder.MapControllers();
         }
 
+        var checkers = builder.Services.CreateScope().ServiceProvider.GetServices<ISimApiAuthChecker>().ToArray();
+        if (checkers.Length != 0)
+        {
+            var msg = checkers.Aggregate("开始配置SimApiAuthChecker...",
+                (current, checker) => current + $"\n|- {checker.GetType().FullName}");
+            logger.LogInformation(msg);
+        }
+
+        if (options.EnableSimApiAuthGate)
+        {
+            logger.LogInformation("开始配置SimApiAuthGate...");
+            if (string.IsNullOrEmpty(options.SimApiAuthCenterOptions.AppId) ||
+                string.IsNullOrEmpty(options.SimApiAuthCenterOptions.AppKey))
+            {
+                logger.LogCritical("必须配置AuthGate的AppId和AppKey才能启用SimApiAuthGate");
+            }
+            else
+            {
+                if (options.SimApiAuthCenterOptions.UseMiddleware)
+                {
+                    builder.UseMiddleware<SimApiAuthCenterMiddleware>();
+                }
+            }
+        }
+
         if (options.EnableSimApiAuth)
         {
             logger.LogInformation("开始配置SimApiAuth...");
             builder.UseMiddleware<SimApiAuthMiddleware>();
-            builder.MapControllerRoute(name: "GetUserInfo", pattern: "/user/info",
-                defaults: new
-                {
-                    controller = "SimApiAuth",
-                    action = "UserInfo"
-                });
-            builder.MapControllerRoute(name: "CheckLogin", pattern: "/auth/check",
-                defaults: new
-                {
-                    controller = "SimApiAuth",
-                    action = "CheckLogin"
-                });
-            builder.MapControllerRoute(name: "Logout", pattern: "/auth/logout",
-                defaults: new
-                {
-                    controller = "SimApiAuth",
-                    action = "Logout"
-                });
-            if (options.EnableCoceSdk)
-            {
-                logger.LogInformation("开始配置CoceAppSdk...\nApi入口: {ApiUrl}\nAuth入口:{AuthUrl}n\nAppId: {AppId}",
-                    options.CoceSdkOptions.ApiEndpoint, options.CoceSdkOptions.AuthEndpoint,
-                    options.CoceSdkOptions.AppId);
-                builder.MapControllerRoute(name: "LoginUseCoce", pattern: "/auth/login",
-                    defaults: new
-                    {
-                        controller = "Coce",
-                        action = "Login"
-                    });
-                builder.MapControllerRoute(name: "LoginUseCoce", pattern: "/user/groups",
-                    defaults: new
-                    {
-                        controller = "Coce",
-                        action = "ListGroups"
-                    });
-                builder.MapControllerRoute(name: "LoginUseCoce", pattern: "/auth/config",
-                    defaults: new
-                    {
-                        controller = "Coce",
-                        action = "GetConfig"
-                    });
-            }
         }
 
-        if (options.EnableVersionUrl)
+
+        if (options.SimApiRouteOptions.VersionRoute != null)
         {
-            builder.MapControllerRoute(name: "Versions", pattern: "/versions",
+            logger.LogInformation("注册内置Route: Versions => {}", options.SimApiRouteOptions.LogoutRoute);
+            builder.MapControllerRoute(name: "Versions", pattern: options.SimApiRouteOptions.VersionRoute,
                 defaults: new
                 {
                     controller = "SimApiCommon",
@@ -450,6 +457,28 @@ public static class SimApiExtensions
                 });
         }
 
+        if (options.SimApiRouteOptions.UserInfoRoute != null)
+        {
+            logger.LogInformation("注册内置Route: UserInfo => {}", options.SimApiRouteOptions.UserInfoRoute);
+            builder.MapControllerRoute(name: "UserInfo", pattern: options.SimApiRouteOptions.UserInfoRoute,
+                defaults: new
+                {
+                    controller = "SimApiCommon",
+                    action = "UserInfo"
+                });
+        }
+
+        if (options.SimApiRouteOptions.LogoutRoute != null)
+        {
+            logger.LogInformation("注册内置Route: Logout => {}", options.SimApiRouteOptions.LogoutRoute);
+            builder.MapControllerRoute(name: "Logout", pattern: options.SimApiRouteOptions.LogoutRoute,
+                defaults: new
+                {
+                    controller = "SimApiAuth",
+                    action = "Logout"
+                });
+        }
+
         if (options.EnableSimApiDoc)
         {
             logger.LogInformation("开始配置SimApiDoc...");
@@ -460,7 +489,7 @@ public static class SimApiExtensions
                     x.DocumentTitle = docOptions.DocumentTitle;
                     foreach (var group in docOptions.ApiGroups)
                     {
-                        x.SwaggerEndpoint($"/swagger/{group.Id}.json", name: group.Name);
+                        x.SwaggerEndpoint($"{group.Id}.json", name: group.Name);
                     }
 
                     x.SupportedSubmitMethods(docOptions.SupportedMethod);

SimApi使用说明书.md

@@ -1,796 +0,0 @@
-# SimApi 库使用说明书
-
-## 1. 项目概述
-
-SimApi 是一个基于 .NET 的基础辅助包，提供了一系列实用功能，帮助开发者快速构建和部署 API 服务。
-
-### 主要功能特性：
-
-- **统一的参数检测和错误处理**：自动验证请求参数并返回标准化的错误响应
-- **基础认证服务**：基于 Header Token 的简单认证机制
-- **S3 兼容的存储系统**：支持文件上传、下载和管理
-- **任务调度系统**：基于 Hangfire 的后台任务管理
-- **事件和 RPC 调用**：基于 RabbitMQ 的事件和 RPC 通信
-- **自定义日志格式**：提供格式化的控制台日志
-- **在线 API 文档**：基于 Swagger 的 API 文档生成
-- **统一的响应格式**：标准化的 API 响应结构
-- **CORS 配置**：支持跨域资源共享
-- **版本管理**：提供应用版本和 SimApi 版本查询
-
-## 2. 安装方法
-
-### 通过 NuGet 安装：
-
-```bash
-Install-Package SimApi
-```
-
-### 项目集成
-
-在 `Startup.cs` 或 `Program.cs` 中配置 SimApi：
-
-```csharp
-// 在 ConfigureServices 方法中
-services.AddSimApi(options =>
-{
-    // 配置选项
-});
-
-// 在 Configure 方法中
-app.UseSimApi();
-```
-
-## 3. 核心功能模块
-
-### 3.1 基础控制器
-
-所有控制器应继承自 `SimApiBaseController`，以获得统一的参数检测和错误处理功能。
-
-```csharp
-using SimApi.Controllers;
-
-public class BaseController : SimApiBaseController
-{
-    /// <summary>
-    /// 获取登录用户信息
-    /// </summary>
-    protected SimApiLoginItem LoginInfo => (SimApiLoginItem) HttpContext.Items["LoginInfo"];
-}
-```
-
-### 3.2 认证服务
-
-#### 配置认证服务：
-
-```csharp
-services.AddSimApi(options =>
-{
-    options.EnableSimApiAuth = true;
-});
-```
-
-#### 使用认证：
-
-1. 在控制器或动作方法上添加 `[SimApiAuth]` 属性
-2. 登录用户信息可通过 `LoginInfo` 属性获取
-
-#### 认证相关接口：
-
-- `POST /auth/check`：检测用户登录状态
-- `POST /auth/logout`：用户退出登录
-- `POST /user/info`：获取用户信息
-
-### 3.3 存储服务
-
-#### 配置存储服务：
-
-```csharp
-services.AddSimApi(options =>
-{
-    options.EnableSimApiStorage = true;
-    options.SimApiStorageOptions = Configuration.GetSection("S3").Get<SimApiStorageOptions>();
-});
-```
-
-#### 存储配置选项：
-
-```json
-{
-  "S3": {
-    "Endpoint": "http://localhost:9000",
-    "AccessKey": "minioadmin",
-    "SecretKey": "minioadmin",
-    "Bucket": "mybucket",
-    "ServeUrl": "http://localhost:9000/mybucket"
-  }
-}
-```
-
-#### 使用存储服务：
-
-```csharp
-private readonly SimApiStorage _storage;
-
-public MyController(SimApiStorage storage)
-{
-    _storage = storage;
-}
-
-// 获取上传 URL
-var uploadUrlResponse = _storage.GetUploadUrl("/path/to/file.txt");
-
-// 获取下载 URL
-var downloadUrl = _storage.GetDownloadUrl("/path/to/file.txt");
-
-// 直接上传文件
-using var stream = new MemoryStream();
-_storage.UploadFile("/path/to/file.txt", stream, "text/plain");
-
-// 获取完整访问 URL
-var fullUrl = _storage.FullUrl("/path/to/file.txt");
-```
-
-### 3.4 任务调度系统
-
-#### 配置任务调度：
-
-```csharp
-services.AddSimApi(options =>
-{
-    options.EnableJob = true;
-    options.SimApiJobOptions = new SimApiJobOptions
-    {
-        DashboardUrl = "/jobs",
-        DashboardAuthUser = "admin",
-        DashboardAuthPass = "Admin@123!",
-        RedisConfiguration = "localhost:6379",
-        Servers = new[]
-        {
-            new SimApiJobServerConfig
-            {
-                Queues = new[] { "default" },
-                WorkerNum = 50
-            }
-        }
-    };
-});
-```
-
-#### 使用任务调度：
-
-```csharp
-// 立即执行任务
-BackgroundJob.Enqueue(() => Console.WriteLine("Hello, world!"));
-
-// 延迟执行任务
-BackgroundJob.Schedule(() => Console.WriteLine("Delayed job"), TimeSpan.FromMinutes(1));
-
-// 重复执行任务
-RecurringJob.AddOrUpdate("my-recurring-job", () => Console.WriteLine("Recurring job"), Cron.Hourly);
-
-// 连续执行任务
-var id = BackgroundJob.Enqueue(() => Console.WriteLine("First job"));
-BackgroundJob.ContinueWith(id, () => Console.WriteLine("Second job"));
-```
-
-### 3.5 事件和 RPC 调用
-
-#### 配置事件和 RPC：
-
-```csharp
-services.AddSimApi(options =>
-{
-    options.EnableSynapse = true;
-    options.SimApiSynapseOptions = new SimApiSynapseOptions
-    {
-        // 配置选项
-    };
-});
-```
-
-#### 使用事件：
-
-```csharp
-// 发布事件
-var synapse = serviceProvider.GetRequiredService<Synapse>();
-synapse.PublishEvent("event-name", data);
-
-// 订阅事件
-[SynapseEvent("event-name")]
-public void HandleEvent(dynamic data)
-{
-    // 处理事件
-}
-```
-
-#### 使用 RPC：
-
-```csharp
-// 发布 RPC 调用
-var result = await synapse.CallRpcAsync<string>("rpc-method", data);
-
-// 实现 RPC 方法
-[SynapseRpc("rpc-method")]
-public string GetData(dynamic data)
-{
-    return "Hello, RPC!";
-}
-```
-
-### 3.6 在线 API 文档
-
-#### 配置 API 文档：
-
-```csharp
-services.AddSimApi(options =>
-{
-    options.EnableSimApiDoc = true;
-    options.ConfigureSimApiDoc(docOptions =>
-    {
-        docOptions.ApiGroups = new[]
-        {
-            new SimApiDocGroupOption
-            {
-                Id = "admin",
-                Name = "后台管理接口",
-                Description = "本接口调用需要Scope：sac.api.admin"
-            },
-            new SimApiDocGroupOption
-            {
-                Id = "user-v1",
-                Name = "用户中心接口",
-                Description = "本接口调用需要Scope：sac.api.user"
-            }
-        };
-        docOptions.ApiAuth = new SimApiAuthOption
-        {
-            Type = new[] { "ClientCredentials", "Implicit", "AuthorizationCode" },
-            Scopes = new Dictionary<string, string>
-            {
-                { "sac.api.user", "用户信息接口权限" },
-                { "sac.api.admin", "后台管理API" }
-            },
-            AuthorizationUrl = "/connect/authorize",
-            TokenUrl = "/connect/token"
-        };
-    });
-});
-```
-
-#### 访问 API 文档：
-
-启动应用后，访问 `/swagger` 查看 API 文档。
-
-### 3.7 统一响应格式
-
-#### 配置响应过滤器：
-
-```csharp
-services.AddSimApi(options =>
-{
-    options.EnableSimApiResponseFilter = true;
-});
-```
-
-#### 响应过滤器实现：
-
-SimApi 提供了 `SimApiResponseFilter` 结果过滤器，用于自动封装 API 响应为统一格式：
-
-- 自动将 `null` 结果封装为 `{"Code": 200, "Message": "成功"}`
-- 自动将普通对象结果封装为 `{"Code": 200, "Message": "成功", "Data": 对象}`
-- 自动将 `EmptyResult` 封装为 `{"Code": 200, "Message": "成功"}`
-- 保持 `SimApiBaseResponse` 类型的结果不变
-
-#### 异常中间件：
-
-SimApi 还提供了 `SimApiExceptionMiddleware` 异常中间件，用于统一处理异常：
-
-- 捕获所有未处理的异常
-- 将异常转换为标准化的错误响应格式
-- 处理 HTTP 状态码，如 404 等
-- 记录错误日志
-
-#### 使用响应格式：
-
-```csharp
-// 无数据响应
-return new SimApiBaseResponse();
-
-// 带数据响应
-return new SimApiBaseResponse<User>(user);
-
-// 直接返回对象，会自动被封装
-return user;
-
-// 错误响应
-Error(400, "参数错误");
-
-// 条件错误检查
-ErrorWhenNull(user, 404, "用户不存在");
-ErrorWhen(user.Age < 18, 403, "未满18岁，无权访问");
-```
-
-#### 原始响应标记：
-
-如果需要返回原始响应格式，不使用统一封装，可以在控制器或动作方法上添加 `[OriginResponse]` 属性：
-
-```csharp
-[HttpGet]
-[OriginResponse] // 返回原始响应格式
-public string GetRawData()
-{
-    return "原始字符串响应";
-}
-```
-
-## 4. API 参考
-
-### 4.1 核心类
-
-#### SimApiUtil
-
-**命名空间**：`SimApi.Helpers`
-
-**描述**：提供一系列静态工具方法和属性，用于常见操作。
-
-**主要属性**：
-
-- `CstNow`：获取当前 CST（中国标准时间）
-- `JsonOption`：JSON 序列化常规选项
-- `SimApiVersion`：获取 SimApi 库版本
-- `AppVersion`：获取应用版本
-- `TimestampNow`：获取当前秒级时间戳
-
-**主要方法**：
-
-- `CheckCell(string cell)`：检测手机号是否正确
-- `Md5(string source, string mode = "x2")`：MD5 加密字符串
-- `Sha1(string source, string mode = "x2")`：SHA1 加密字符串
-- `XmlDeserialize<T>(string source)`：将 XML 字符串序列化为对象
-- `Json(object? obj)`：将对象序列化为 JSON 字符串
-- `Paginate<T>(this IQueryable<T> query, int page, int count)`：分页扩展方法
-
-**使用示例**：
-
-```csharp
-// 获取当前时间
-var now = SimApiUtil.CstNow;
-
-// JSON 序列化
-var json = SimApiUtil.Json(new { Name = "Test", Age = 18 });
-
-// MD5 加密
-var md5 = SimApiUtil.Md5("password");
-
-// 分页
-var query = dbContext.Users.AsQueryable();
-var paginatedQuery = query.Paginate(1, 10);
-
-// 获取版本信息
-var simApiVersion = SimApiUtil.SimApiVersion;
-var appVersion = SimApiUtil.AppVersion;
-```
-
-#### SimApiExtensions
-
-**命名空间**：`SimApi`
-
-**描述**：提供一系列扩展方法，用于配置和使用 SimApi。
-
-**主要方法**：
-
-- `AddSimApi(this IServiceCollection builder, Action<SimApiOptions>? options = null)`：向服务集合添加 SimApi 服务和配置
-- `UseSimApi(this IHost builder)`：在主机上使用 SimApi
-- `UseSimApi(this WebApplication builder)`：在 Web 应用上使用 SimApi，配置中间件和路由
-
-**使用示例**：
-
-```csharp
-// 在 ConfigureServices 方法中
-services.AddSimApi(options =>
-{
-    // 配置选项
-    options.EnableSimApiDoc = true;
-    options.EnableSimApiAuth = true;
-    // 其他配置...
-});
-
-// 在 Configure 方法中
-app.UseSimApi();
-```
-
-#### SimApiBaseController
-
-**继承自**：`Controller`
-
-**主要方法**：
-
-- `Error(int code = 500, string message = "")`：抛出错误异常
-- `ErrorWhen(bool condition, int code = 400, string message = "")`：当条件为真时抛出错误
-- `ErrorWhenNull(object? condition, int code = 404, string message = "请求的资源不存在")`：当对象为 null 时抛出错误
-- `UploadFile()`：上传文件
-
-**属性**：
-
-- `LoginInfo`：获取当前登录用户信息
-
-#### SimApiAuth
-
-**主要方法**：
-
-- `Login(SimApiLoginItem loginItem, string? token = null)`：登录用户并返回 token
-- `Update(SimApiLoginItem loginItem, string token)`：更新用户登录信息
-- `GetLogin(string token)`：根据 token 获取登录信息
-- `Logout(string uuid)`：退出登录
-
-#### SimApiStorage
-
-**主要方法**：
-
-- `GetUploadUrl(string path, int expire = 7200)`：获取文件上传 URL
-- `GetDownloadUrl(string path, int expire = 600)`：获取文件下载 URL
-- `UploadFile(string path, Stream stream, string contentType = "image/png")`：上传文件
-- `FullUrl(string? path)`：获取完整的文件访问 URL
-- `GetUrl(string? path)`：获取文件访问 URL
-- `GetPath(string? url)`：从 URL 中获取相对路径
-
-#### SimApiBaseResponse
-
-**构造函数**：
-
-- `SimApiBaseResponse(int code = 200, string message = "成功")`：创建响应对象
-
-**属性**：
-
-- `Code`：响应代码
-- `Message`：响应消息
-
-#### SimApiBaseResponse<T>
-
-**继承自**：`SimApiBaseResponse`
-
-**构造函数**：
-
-- `SimApiBaseResponse(T data)`：创建带数据的响应对象
-
-**属性**：
-
-- `Data`：响应数据
-
-### 4.2 配置类
-
-#### SimApiOptions
-
-**主要属性**：
-
-- `RedisConfiguration`：Redis 配置字符串
-- `EnableJob`：是否启用任务调度系统
-- `EnableSimApiAuth`：是否启用认证服务
-- `EnableCoceSdk`：是否启用 CoceSdk
-- `EnableSimApiStorage`：是否启用存储服务
-- `EnableSimApiDoc`：是否启用 API 文档
-- `EnableSynapse`：是否启用事件和 RPC
-- `EnableCors`：是否启用 CORS
-- `EnableSimApiException`：是否启用异常拦截
-- `EnableSimApiResponseFilter`：是否启用响应过滤器
-- `EnableForwardHeaders`：是否启用 Header 转发
-- `EnableLowerUrl`：是否启用小写 URL
-- `EnableVersionUrl`：是否启用版本查询
-- `EnableLogger`：是否启用自定义日志
-
-**配置方法**：
-
-- `ConfigureSimApiDoc(Action<SimApiDocOptions>? options = null)`：配置 API 文档
-- `ConfigureSimApiStorage(Action<SimApiStorageOptions>? options = null)`：配置存储服务
-- `ConfigureSimApiJob(Action<SimApiJobOptions>? options = null)`：配置任务调度
-- `ConfigureSimApiSynapse(Action<SimApiSynapseOptions>? options = null)`：配置事件和 RPC
-- `ConfigureCoceSdk(Action<CoceAppSdkOption>? options = null)`：配置 CoceSdk
-
-## 5. 配置选项
-
-### 5.1 存储配置 (SimApiStorageOptions)
-
-```csharp
-public class SimApiStorageOptions
-{
-    public string? Endpoint { get; set; } // S3 服务端点
-    public string? AccessKey { get; set; } // 访问密钥
-    public string? SecretKey { get; set; } // 密钥
-    public string? Bucket { get; set; } // 存储桶名称
-    public string? ServeUrl { get; set; } // 访问 URL
-}
-```
-
-### 5.2 任务调度配置 (SimApiJobOptions)
-
-```csharp
-public class SimApiJobOptions
-{
-    public string? DashboardUrl { get; set; } = "/jobs"; // Web UI 地址
-    public string DashboardAuthUser { get; set; } = "admin"; // Web UI 用户名
-    public string DashboardAuthPass { get; set; } = "Admin@123!"; // Web UI 密码
-    public string? RedisConfiguration { get; set; } // Redis 配置
-    public int? Database { get; set; } = null; // Redis 数据库
-    public SimApiJobServerConfig[] Servers { get; set; } = [new()]; // 服务器配置
-}
-
-public class SimApiJobServerConfig
-{
-    public string[] Queues { get; set; } = ["default"]; // 队列名称
-    public int WorkerNum { get; set; } = 50; // 工作线程数
-}
-```
-
-### 5.3 API 文档配置 (SimApiDocOptions)
-
-```csharp
-public class SimApiDocOptions
-{
-    public string DocumentTitle { get; set; } = "API 文档"; // 文档标题
-    public SimApiDocGroupOption[] ApiGroups { get; set; } = []; // API 分组
-    public SimApiAuthOption ApiAuth { get; set; } = new(); // 认证配置
-    public string[] SupportedMethod { get; set; } = ["GET", "POST", "PUT", "DELETE"]; // 支持的 HTTP 方法
-}
-
-public class SimApiDocGroupOption
-{
-    public string Id { get; set; } = "api"; // 分组 ID
-    public string Name { get; set; } = "API"; // 分组名称
-    public string Description { get; set; } = ""; // 分组描述
-}
-
-public class SimApiAuthOption
-{
-    public string[] Type { get; set; } = []; // 认证类型
-    public Dictionary<string, string> Scopes { get; set; } = []; // 权限范围
-    public string AuthorizationUrl { get; set; } = "/connect/authorize"; // 授权 URL
-    public string TokenUrl { get; set; } = "/connect/token"; // Token URL
-    public string Description { get; set; } = ""; // 认证描述
-}
-```
-
-## 6. 使用示例
-
-### 6.1 完整配置示例
-
-```csharp
-services.AddSimApi(options =>
-{
-    // 配置 Redis
-    options.RedisConfiguration = "localhost:6379";
-    
-    // 配置 API 文档
-    options.EnableSimApiDoc = true;
-    options.ConfigureSimApiDoc(docOptions =>
-    {
-        docOptions.ApiGroups = new[]
-        {
-            new SimApiDocGroupOption
-            {
-                Id = "admin",
-                Name = "后台管理接口",
-                Description = "本接口调用需要Scope：sac.api.admin"
-            },
-            new SimApiDocGroupOption
-            {
-                Id = "user-v1",
-                Name = "用户中心接口",
-                Description = "本接口调用需要Scope：sac.api.user"
-            }
-        };
-        docOptions.ApiAuth = new SimApiAuthOption
-        {
-            Type = new[] { "ClientCredentials", "Implicit", "AuthorizationCode" },
-            Scopes = new Dictionary<string, string>
-            {
-                { "sac.api.user", "用户信息接口权限" },
-                { "sac.api.admin", "后台管理API" }
-            },
-            AuthorizationUrl = "/connect/authorize",
-            TokenUrl = "/connect/token"
-        };
-    });
-    
-    // 配置存储服务
-    options.EnableSimApiStorage = true;
-    options.SimApiStorageOptions = Configuration.GetSection("S3").Get<SimApiStorageOptions>();
-    
-    // 配置任务调度
-    options.EnableJob = true;
-    options.ConfigureSimApiJob(jobOptions =>
-    {
-        jobOptions.DashboardUrl = "/jobs";
-        jobOptions.DashboardAuthUser = "admin";
-        jobOptions.DashboardAuthPass = "Admin@123!";
-    });
-    
-    // 配置事件和 RPC
-    options.EnableSynapse = true;
-    
-    // 其他配置
-    options.EnableCors = true;
-    options.EnableSimApiException = true;
-    options.EnableSimApiResponseFilter = true;
-    options.EnableVersionUrl = true;
-    options.EnableLogger = true;
-});
-
-// 使用 SimApi
-app.UseSimApi();
-```
-
-### 6.2 控制器示例
-
-```csharp
-using Microsoft.AspNetCore.Mvc;
-using SimApi.Controllers;
-using SimApi.Helpers;
-
-[ApiController]
-[Route("[controller]")]
-public class UserController : BaseController
-{
-    private readonly SimApiStorage _storage;
-    
-    public UserController(SimApiStorage storage)
-    {
-        _storage = storage;
-    }
-    
-    [HttpGet("{id}")]
-    public SimApiBaseResponse<User> GetUser(int id)
-    {
-        var user = GetUserFromDatabase(id);
-        ErrorWhenNull(user, 404, "用户不存在");
-        return new SimApiBaseResponse<User>(user);
-    }
-    
-    [HttpPost]
-    [SimApiAuth] // 需要认证
-    public SimApiBaseResponse<User> CreateUser(UserCreateDto dto)
-    {
-        ErrorWhen(string.IsNullOrEmpty(dto.Name), 400, "用户名不能为空");
-        ErrorWhen(dto.Age < 18, 400, "年龄必须大于18岁");
-        
-        var user = CreateUserInDatabase(dto);
-        return new SimApiBaseResponse<User>(user);
-    }
-    
-    [HttpPost("upload-avatar")]
-    [SimApiAuth]
-    public async Task<SimApiBaseResponse<string>> UploadAvatar(IFormFile file)
-    {
-        using var stream = file.OpenReadStream();
-        var path = $"/avatars/{LoginInfo.Id}/{Guid.NewGuid()}{Path.GetExtension(file.FileName)}";
-        _storage.UploadFile(path, stream, file.ContentType);
-        var url = _storage.GetUrl(path);
-        return new SimApiBaseResponse<string>(url);
-    }
-}
-```
-
-### 6.3 任务调度示例
-
-```csharp
-public class UserService
-{
-    public void SendWelcomeEmail(string email)
-    {
-        // 发送欢迎邮件
-        Console.WriteLine($"Sending welcome email to {email}");
-    }
-    
-    public void CleanupInactiveUsers()
-    {
-        // 清理不活跃用户
-        Console.WriteLine("Cleaning up inactive users");
-    }
-    
-    public void GenerateMonthlyReport()
-    {
-        // 生成月度报告
-        Console.WriteLine("Generating monthly report");
-    }
-}
-
-// 配置任务
-public void ConfigureJobs(IServiceProvider serviceProvider)
-{
-    // 立即发送欢迎邮件
-    BackgroundJob.Enqueue<UserService>(x => x.SendWelcomeEmail("user@example.com"));
-    
-    // 每天凌晨清理不活跃用户
-    RecurringJob.AddOrUpdate<UserService>("cleanup-inactive-users", x => x.CleanupInactiveUsers(), Cron.Daily);
-    
-    // 每月1日生成月度报告
-    RecurringJob.AddOrUpdate<UserService>("generate-monthly-report", x => x.GenerateMonthlyReport(), "0 0 1 * *");
-}
-```
-
-## 7. 最佳实践
-
-### 7.1 控制器设计
-
-- 所有控制器应继承自 `SimApiBaseController` 或其派生类
-- 使用 `Error` 和 `ErrorWhen` 系列方法进行错误处理
-- 对需要认证的接口使用 `[SimApiAuth]` 属性
-- 合理使用 API 分组，便于文档管理
-
-### 7.2 存储管理
-
-- 为不同类型的文件使用不同的存储路径结构
-- 合理设置文件 URL 的过期时间
-- 对上传的文件进行验证和处理
-- 考虑使用 CDN 加速文件访问
-
-### 7.3 任务调度
-
-- 合理设置任务的队列和优先级
-- 对长时间运行的任务进行分解
-- 监控任务的执行状态和结果
-- 合理设置任务的重试策略
-
-### 7.4 事件和 RPC
-
-- 为事件和 RPC 方法使用清晰的命名规范
-- 合理设计事件和 RPC 的数据结构
-- 考虑事件处理的幂等性
-- 监控事件和 RPC 的执行情况
-
-### 7.5 配置管理
-
-- 使用配置文件或环境变量管理配置
-- 对敏感配置进行加密处理
-- 不同环境使用不同的配置
-- 定期审查和更新配置
-
-### 7.6 性能优化
-
-- 合理使用缓存减少数据库访问
-- 对高频访问的接口进行优化
-- 考虑使用异步方法提高并发性能
-- 监控系统性能并进行调优
-
-## 8. 故障排查
-
-### 8.1 常见问题
-
-#### 认证失败
-- 检查 Token 是否正确
-- 检查 Redis 是否正常运行
-- 检查认证中间件是否正确配置
-
-#### 存储服务错误
-- 检查 S3 服务是否正常运行
-- 检查存储配置是否正确
-- 检查网络连接是否正常
-
-#### 任务调度错误
-- 检查 Hangfire 仪表盘是否可访问
-- 检查 Redis 是否正常运行
-- 检查任务代码是否有异常
-
-#### API 文档生成错误
-- 检查 Swagger 配置是否正确
-- 检查控制器和方法的注释是否完整
-- 检查模型类是否有循环引用
-
-### 8.2 日志和监控
-
-- 启用 `EnableLogger` 配置查看详细日志
-- 使用应用性能监控工具监控系统状态
-- 定期检查系统日志和错误报告
-- 设置关键指标的告警机制
-
-## 9. 版本管理
-
-- 访问 `/versions` 查看应用版本和 SimApi 版本
-- 定期更新 SimApi 到最新版本
-- 注意版本升级时的兼容性问题
-- 遵循语义化版本规范管理应用版本
-
-## 10. 总结
-
-SimApi 是一个功能丰富的 .NET 基础辅助包，提供了一系列实用功能，帮助开发者快速构建和部署 API 服务。通过合理配置和使用 SimApi，可以显著提高开发效率，减少重复代码，提高系统的可维护性和可靠性。
-
-本说明书提供了 SimApi 的详细使用方法和最佳实践，希望能帮助开发者更好地使用这个库。如果有任何问题或建议，欢迎反馈和贡献。

SwaggerFilters/AesBodyOperationFilter.cs

@@ -22,11 +22,11 @@ public class AesBodyOperationFilter : IOperationFilter
                 .GetCustomAttribute<AesBodyAttribute>() != null;
             if (!hasAesBodyAttr) continue;
             // 1. 移除默认的 Query 参数描述（如果存在）
-            var queryParam = operation.Parameters
+            var queryParam = operation.Parameters!
                 .FirstOrDefault(p => p.Name == parameter.Name);
             if (queryParam != null)
             {
-                operation.Parameters.Remove(queryParam);
+                operation.Parameters!.Remove(queryParam);
             }
 
             // 2. 添加 Body 参数描述

SwaggerFilters/GlobalDynamicObjectSchemaFilter.cs

@@ -13,7 +13,7 @@ public class GlobalDynamicObjectSchemaFilter : ISchemaFilter
     {
         if (!IsDynamicObjectType(context.Type)) return;
         var oaSchema = schema as OpenApiSchema;
-        oaSchema.AdditionalPropertiesAllowed = true;
+        oaSchema!.AdditionalPropertiesAllowed = true;
         oaSchema.AdditionalProperties = new OpenApiSchema
         {
             Type = JsonSchemaType.Object, // 表示 value 可以是任意类型（兼容所有类型）

SwaggerFilters/RemoveEmptyTagsFilter.cs

@@ -10,16 +10,16 @@ public class RemoveEmptyTagsFilter : IDocumentFilter
     {
         // 步骤1：收集所有有接口的 Tag 名称
         var tagsWithOperations = swaggerDoc.Paths.Values
-            .SelectMany(path => path.Operations.Values)
-            .SelectMany(op => op.Tags.Select(t => t.Name))
+            .SelectMany(path => path.Operations!.Values)
+            .SelectMany(op => op.Tags!.Select(t => t.Name))
             .Distinct()
             .ToList();
 
         // 步骤2：移除无接口的空 Tag
-        var emptyTags = swaggerDoc.Tags.Where(t => !tagsWithOperations.Contains(t.Name)).ToList();
+        var emptyTags = swaggerDoc.Tags!.Where(t => !tagsWithOperations.Contains(t.Name)).ToList();
         foreach (var tag in emptyTags)
         {
-            swaggerDoc.Tags.Remove(tag);
+            swaggerDoc.Tags!.Remove(tag);
         }
     }
 }

SwaggerFilters/SimApiResponseOperationFilter.cs

@@ -46,7 +46,7 @@ public class SimApiResponseOperationFilter : IOperationFilter
         var schema = context.SchemaGenerator.GenerateSchema(wrappedType, context.SchemaRepository);
 
         // 5. 替换 Swagger 文档中的响应类型（只保留 200 OK 的响应，匹配过滤器逻辑）
-        operation.Responses.Clear(); // 清除默认响应（如 200 返回原始类型）
+        operation.Responses!.Clear(); // 清除默认响应（如 200 返回原始类型）
         operation.Responses.Add("200", new OpenApiResponse
         {
             Description = "请求成功",

Synapse/EventClient.cs

@@ -17,8 +17,9 @@ public partial class Synapse
         }
         else
         {
-            paramJson  = JsonSerializer.Serialize(param, SimApiUtil.JsonOption);
+            paramJson = SimApiUtil.Json(param);
         }
+
         var topic = $"{Options.SysName}/event/{Options.AppName}/{eventName}";
         var message = new MqttApplicationMessageBuilder()
             .WithTopic(topic)

Synapse/RpcClient.cs

@@ -50,7 +50,7 @@ public partial class Synapse
         }
         else
         {
-            paramJson = JsonSerializer.Serialize(param, SimApiUtil.JsonOption);
+            paramJson = SimApiUtil.Json(param);
         }
 
         var topic = $"{Options.SysName}/{app}/rpc/server/{action}";
@@ -73,7 +73,7 @@ public partial class Synapse
         Client.PublishAsync(message, CancellationToken.None).Wait();
         logger.LogDebug(
             "Synapse RPC Client Request: ({PropsMessageId}) {OptionsAppName} -> {Action}@{App}\n{ParamJson}\nHeaders: {Headers}",
-            messageId, Options.AppName, action, app, paramJson, JsonSerializer.Serialize(headers));
+            messageId, Options.AppName, action, app, paramJson, SimApiUtil.Json(headers));
 
         string response;
         try
@@ -88,13 +88,12 @@ public partial class Synapse
             }
             else
             {
-                response = JsonSerializer.Serialize(new SimApiBaseResponse(502, "timeout"), SimApiUtil.JsonOption);
+                response = SimApiUtil.Json(new SimApiBaseResponse(502, "timeout"));
             }
         }
         catch
         {
-            response = JsonSerializer.Serialize(new SimApiBaseResponse(500, "Synapse RPC Client Error"),
-                SimApiUtil.JsonOption);
+            response = SimApiUtil.Json(new SimApiBaseResponse(500, "Synapse RPC Client Error"));
         }
 
         return response;

Synapse/RpcServer.cs

@@ -10,7 +10,7 @@ using MQTTnet.Protocol;
 using SimApi.Communications;
 using SimApi.Exceptions;
 using SimApi.Helpers;
-using JsonSerializer = System.Text.Json.JsonSerializer;
+using System.Text.Json;
 
 namespace SimApi;
 
@@ -96,7 +96,7 @@ public partial class Synapse
                     }
                 }
 
-                var returnJson = JsonSerializer.Serialize((object)res, SimApiUtil.JsonOption);
+                var returnJson = SimApiUtil.Json(res);
                 var reply = $"{Options.SysName}/{appInfo[0]}/rpc/client/{appInfo[1]}/{appInfo[2]}";
                 var message = new MqttApplicationMessageBuilder()
                     .WithTopic(reply)

Synapse/Synapse.cs

@@ -101,7 +101,7 @@ public partial class Synapse(SimApiOptions simApiOptions, ILogger<Synapse> logge
         else
         {
             var data = FireRpc(appName, method, param, headers, timeout);
-            res = JsonSerializer.Deserialize<SimApiBaseResponse<T>>(data, SimApiUtil.JsonOption);
+            res = SimApiUtil.FromJson<SimApiBaseResponse<T>>(data);
         }
 
         return (res as SimApiBaseResponse<T>)!;