现在内置路由单独控制了

AuthGate/SimApiAuthGate.cs

@@ -0,0 +1,169 @@
+using System;
+using System.Collections.Generic;
+using System.Net.Http;
+using System.Net.Http.Json;
+using SimApi.Communications;
+using static SimApi.Helpers.SimApiError;
+
+namespace SimApi.AuthGate;
+
+public class SimApiAuthGate(SimApiAuthGateClient simapi)
+{
+    #region AuthGate公开接口
+
+    /// <summary>
+    /// 委托AuthCenter进行应用签名验证
+    /// </summary>
+    /// <param name="appId"></param>
+    /// <param name="timestamp"></param>
+    /// <param name="nonce"></param>
+    /// <param name="sign"></param>
+    public void VerifySign(string appId, string timestamp, string nonce, string sign)
+    {
+        var http = new HttpClient();
+        var url = $"{simapi.Server}/api/auth/sign/verify?appId={appId}&timestamp={timestamp}&nonce={nonce}&sign={sign}";
+        var result = http.PostAsJsonAsync(url, new { }).Result;
+        var resp = result.Content.ReadFromJsonAsync<SimApiBaseResponse>().Result;
+        ErrorWhenNull(resp, 400, "签名验证失败");
+        ErrorWhenFalse(resp.Code == 200, 400, "签名验证失败");
+    }
+
+    /// <summary>
+    /// 根据关键字,搜索用户Profile,参数支持精准ID,用户手机号,用户邮箱,Profile名称模糊搜索
+    /// </summary>
+    /// <param name="keyword"></param>
+    /// <param name="skip"></param>
+    /// <param name="take"></param>
+    /// <returns></returns>
+    public SimApiAuthGateDto.AppAndProfileItem[]? ProfileSearch(string keyword, int skip = 0, int take = 20)
+    {
+        return simapi.SignQuery<SimApiAuthGateDto.AppAndProfileItem[]>("/api/auth/profile/search",
+            new { keyword, skip, take });
+    }
+
+    /// <summary>
+    /// 通过id,可以批量获取用户的基本信息
+    /// </summary>
+    /// <param name="ids"></param>
+    /// <returns></returns>
+    public SimApiAuthGateDto.AppAndProfileItem[]? ProfileList(string[] ids)
+    {
+        return simapi.SignQuery<SimApiAuthGateDto.AppAndProfileItem[]>("/api/auth/profile/list", new { ids });
+    }
+
+    #endregion
+
+    #region AuthGate内部应用专用 - 注意: 只有内部应用可以调用
+
+    /// <summary>
+    /// 获取是否为App的拥有者
+    /// </summary>
+    /// <param name="profileId"></param>
+    /// <param name="applicationId"></param>
+    /// <returns></returns>
+    public bool CheckIsAppOwner(string profileId, string applicationId)
+    {
+        return simapi.SignQuery<bool>("/api/auth/internal/apps/check-owner", new
+        {
+            ProfileId = profileId,
+            AppId = applicationId,
+        });
+    }
+
+    /// <summary>
+    /// 获取应用列表,根据用户profileId 和 提供的appIds
+    /// </summary>
+    /// <param name="profileId"></param>
+    /// <param name="appIds"></param>
+    /// <returns></returns>
+    public SimApiAuthGateDto.AppAndProfileItem[]? GetAppList(string profileId, IEnumerable<string> appIds)
+    {
+        return simapi.SignQuery<SimApiAuthGateDto.AppAndProfileItem[]>("/api/auth/internal/apps/related", new
+        {
+            ProfileId = profileId,
+            AllowedAppIds = appIds,
+        });
+    }
+
+    #endregion
+
+    #region 系统登录
+
+    /// <summary>
+    /// 获取登录授权CODE
+    /// </summary>
+    /// <param name="scene"></param>
+    /// <param name="data"></param>
+    /// <param name="backUrl"></param>
+    /// <returns></returns>
+    public SimApiAuthGateDto.GetCodeResponse GetAuthCode(string? scene = null, Dictionary<string, object>? data = null,
+        string? backUrl = null)
+    {
+        var code = simapi.SignQuery<string>("/api/auth/confirm/code",
+            new { scene, data, backUrl });
+        return new SimApiAuthGateDto.GetCodeResponse()
+        {
+            Code = code!,
+            Server = simapi.Server,
+            FullUrl = $"{simapi.Server}/auth?code={code}"
+        };
+    }
+
+    /// <summary>
+    /// 使用code获取登录信息
+    /// </summary>
+    /// <param name="code"></param>
+    /// <param name="scene"></param>
+    /// <returns></returns>
+    public SimApiAuthGateDto.AuthInfoResponse GetAuthInfo(string code, string? scene = null)
+    {
+        var resp = simapi.SignQuery<SimApiAuthGateDto.AuthInfoResponse>("/api/auth/confirm/get", new { code });
+        ErrorWhenNull(resp, 400232, "登录信息获取失败");
+        ErrorWhen(resp.Scene != scene, 403003, "登录场景不匹配");
+        return resp;
+    }
+
+    #endregion
+
+    #region 安全验证
+
+    /// <summary>
+    /// 获取安全验证代码
+    /// </summary>
+    /// <param name="scene"></param>
+    /// <param name="userId"></param>
+    /// <param name="data"></param>
+    /// <param name="backUrl"></param>
+    /// <returns></returns>
+    public SimApiAuthGateDto.GetCodeResponse GetConfirmCode(string scene, string userId,
+        Dictionary<string, object>? data = null,
+        string? backUrl = null)
+    {
+        var code = simapi.SignQuery<string>("/api/auth/confirm/code",
+            new { scene, data, backUrl, profileId = userId });
+        return new SimApiAuthGateDto.GetCodeResponse()
+        {
+            Code = code!,
+            Server = simapi.Server,
+            FullUrl = $"{simapi.Server}/confirm?code={code}"
+        };
+    }
+
+    /// <summary>
+    /// 使用安全验证code 获取验证结果
+    /// </summary>
+    /// <param name="code"></param>
+    /// <param name="scene"></param>
+    /// <param name="userId"></param>
+    /// <returns></returns>
+    public SimApiAuthGateDto.ConfirmResponse Confirm(string code, string scene, string? userId = null)
+    {
+        var resp = simapi.SignQuery<SimApiAuthGateDto.ConfirmResponse>("/api/auth/confirm/get", new { code });
+        ErrorWhenNull(resp, 403001, "安全确认码无效");
+        ErrorWhen(resp.ProfileId != userId, 403002, "安全确认身份不匹配");
+        ErrorWhen(resp.Scene != scene, 403003, "安全确认场景不匹配");
+        return resp;
+    }
+
+    #endregion
+}

AuthGate/SimApiAuthGateClient.cs

@@ -0,0 +1,13 @@
+using Microsoft.Extensions.Logging;
+using SimApi.Configurations;
+using SimApi.Helpers;
+
+namespace SimApi.AuthGate;
+
+public class SimApiAuthGateClient(SimApiOptions apiOptions, ILogger<SimApiAuthGateClient> logger)
+    : SimApiHttpClient(apiOptions, logger)
+{
+    public override string Server { get; init; } = apiOptions.SimApiAuthGateOptions.Server ?? string.Empty;
+    public override string AppId { get; init; } = apiOptions.SimApiAuthGateOptions.AppId ?? string.Empty;
+    public override string AppKey { get; init; } = apiOptions.SimApiAuthGateOptions.AppKey ?? string.Empty;
+}

AuthGate/SimApiAuthGateDto.cs

@@ -0,0 +1,40 @@
+using System;
+using System.Collections.Generic;
+
+namespace SimApi.AuthGate;
+
+public class SimApiAuthGateDto
+{
+    public class AppAndProfileItem
+    {
+        public string Id { get; set; } = "";
+        public string Name { get; set; } = "";
+        public string? Image { get; set; }
+        public string? Description { get; set; }
+    }
+
+    public class ConfirmResponse
+    {
+        public required string ApplicationId { get; set; }
+        public required string ProfileId { get; set; }
+        public string? Scene { get; set; }
+        public Dictionary<string, object>? Data { get; set; }
+    }
+
+    public class AuthInfoResponse
+    {
+        public string? Scene { get; set; }
+        public Dictionary<string, object>? Data { get; set; }
+        public required string ProfileId { get; set; }
+        public required string Name { get; set; }
+        public string? Image { get; set; }
+        public string? Description { get; set; }
+    }
+
+    public class GetCodeResponse
+    {
+        public required string Code { get; set; }
+        public required string Server { get; set; }
+        public required string FullUrl { get; set; }
+    }
+}

AuthGate/SimApiAuthGateMiddleware.cs

@@ -1,14 +1,13 @@
-using System;
-using System.Threading.Tasks;
+using System.Threading.Tasks;
 using Microsoft.AspNetCore.Http;
 using Microsoft.Extensions.Logging;
 using SimApi.Communications;
 using SimApi.Configurations;
 using SimApi.Helpers;
 
-namespace SimApi.Middlewares;
+namespace SimApi.AuthGate;
 
-public class SimApiGateAuthMiddleware(RequestDelegate next, ILogger<SimApiGateAuthMiddleware> logger)
+public class SimApiAuthGateMiddleware(RequestDelegate next, ILogger<SimApiAuthGateMiddleware> logger)
 {
     public Task Invoke(HttpContext httpContext, SimApiOptions simApiOptions)
     {
@@ -17,7 +16,7 @@ public class SimApiGateAuthMiddleware(RequestDelegate next, ILogger<SimApiGateAu
             httpContext.Request.Headers.TryGetValue("X-SimApi-Gate-Sign", out var sign))
         {
             var signStr =
-                $"appId={simApiOptions.SimApiGateAuthOptions.AppId}&auth={auth}&time={time}&appKey={simApiOptions.SimApiGateAuthOptions.AppKey}";
+                $"appId={simApiOptions.SimApiAuthGateOptions.AppId}&auth={auth}&time={time}&appKey={simApiOptions.SimApiAuthGateOptions.AppKey}";
             logger.LogDebug($"签名字符串 => {signStr}");
             if (SimApiUtil.Md5(signStr) == sign && !string.IsNullOrEmpty(auth))
             {

AuthGate/SimApiIam.cs

@@ -0,0 +1,45 @@
+using Microsoft.Extensions.Logging;
+using static SimApi.Helpers.SimApiError;
+
+namespace SimApi.AuthGate;
+
+public class SimApiIam(SimApiAuthGateClient simapi, ILogger<SimApiIam> logger)
+{
+    /// <summary>
+    /// 向Iam注册权限
+    /// </summary>
+    /// <param name="permissions"></param>
+    public void RegisterPermissions(SimApiIamDto.PermissionItem[] permissions)
+    {
+        var log = $"检测到 {permissions.Length} 个权限接口，正在注册..: ";
+        foreach (var permission in permissions)
+        {
+            log += $"\n |- {permission.Identifier} => [{permission.Group}]{permission.Name} ({permission.Description})";
+        }
+
+        logger.LogInformation(log);
+        simapi.SignQuery<string>("/api/iam/permission/register", new { permissions });
+        logger.LogInformation("权限注册完成");
+    }
+
+    /// <summary>
+    /// 获取拥有的权限标识数组
+    /// </summary>
+    /// <param name="profileId"></param>
+    /// <returns></returns>
+    public string[] GetPermissionOwned(string profileId)
+    {
+        return simapi.SignQuery<string[]>("/api/iam/permission/owned", new { profileId }) ?? [];
+    }
+
+    /// <summary>
+    /// 检测profileId是否有这个权限
+    /// </summary>
+    /// <param name="profileId"></param>
+    /// <param name="permission"></param>
+    public void CheckPermission(string profileId, string permission)
+    {
+        var ok = simapi.SignQuery<bool>("/api/iam/permission/check", new { profileId, permission });
+        ErrorWhen(!ok, 403, "没有该权限");
+    }
+}

AuthGate/SimApiIamDto.cs

@@ -0,0 +1,12 @@
+namespace SimApi.AuthGate;
+
+public class SimApiIamDto
+{
+    public class PermissionItem
+    {
+        public required string Identifier { get; init; }
+        public required string Name { get; init; }
+        public required string Group { get; init; }
+        public required string Description { get; init; }
+    }
+}

CoceSdk/CoceApp.cs

@@ -1,234 +0,0 @@
-using System.Collections.Generic;
-using System.Linq;
-using System.Net.Http;
-using System.Net.Http.Json;
-using System.Text;
-using System.Text.Json;
-using Microsoft.Extensions.Caching.Distributed;
-using Microsoft.Extensions.Logging;
-using SimApi.Communications;
-using SimApi.Configurations;
-using SimApi.Helpers;
-
-namespace SimApi.CoceSdk;
-
-public class CoceApp(SimApiOptions simApiOptions, ILogger<CoceApp> logger, IDistributedCache cache)
-{
-    /// <summary>
-    /// 获取Level Token
-    /// </summary>
-    /// <param name="lv1Token"></param>
-    /// <param name="level"></param>
-    /// <returns></returns>
-    public LevelTokenResponse? GetLevelToken(string lv1Token, int level = 5)
-    {
-        var dict = new Dictionary<string, object>
-        {
-            { "lv1Token", lv1Token },
-            { "time", (int)SimApiUtil.TimestampNow },
-            { "appId", simApiOptions.CoceSdkOptions.AppId! },
-            { "level", level }
-        };
-        return QueryAppApi<LevelTokenResponse>("/api/app/token", dict);
-    }
-
-    /// <summary>
-    /// 通过用户手机号搜索用户
-    /// </summary>
-    /// <param name="phone"></param>
-    /// <returns></returns>
-    public UserInfo? SearchUserByPhone(string phone)
-    {
-        var dict = new Dictionary<string, object>
-        {
-            { "cell", phone },
-            { "time", (int)SimApiUtil.TimestampNow },
-            { "appId", simApiOptions.CoceSdkOptions.AppId! },
-        };
-        return QueryAppApi<UserInfo>("/api/app/user/search-by-phone", dict);
-    }
-
-    /// <summary>
-    /// 通过给出的UserId列表获取用户信息
-    /// </summary>
-    /// <param name="userIds"></param>
-    /// <returns></returns>
-    public UserInfo[]? SearchUserByIds(IEnumerable<string> userIds)
-    {
-        var dict = new Dictionary<string, object>
-        {
-            { "ids", string.Join(",", userIds) },
-            { "time", (int)SimApiUtil.TimestampNow },
-            { "appId", simApiOptions.CoceSdkOptions.AppId! },
-        };
-        return QueryAppApi<UserInfo[]>("/api/app/user/search-by-ids", dict);
-    }
-
-    /// <summary>
-    /// 向用户发送消息
-    /// </summary>
-    /// <param name="userId"></param>
-    /// <param name="title"></param>
-    /// <param name="content"></param>
-    /// <returns></returns>
-    public bool SendUserMessage(string userId, string title, string content)
-    {
-        var dict = new Dictionary<string, object>
-        {
-            { "time", (int)SimApiUtil.TimestampNow },
-            { "appId", simApiOptions.CoceSdkOptions.AppId! },
-            { "userId", userId },
-            { "type", "text" },
-            { "title", title },
-            { "text", content }
-        };
-        return QueryAppApiNoResp("/api/app/message", dict);
-    }
-
-    /// <summary>
-    /// 创建交易订单号
-    /// </summary>
-    /// <param name="name"></param>
-    /// <param name="amount"></param>
-    /// <param name="ext"></param>
-    /// <returns></returns>
-    public string? TradeCreate(string name, int amount, string ext)
-    {
-        var dict = new Dictionary<string, object>
-        {
-            { "time", (int)SimApiUtil.TimestampNow },
-            { "appId", simApiOptions.CoceSdkOptions.AppId! },
-            { "amount", amount },
-            { "ext", ext },
-            { "name", name }
-        };
-        return QueryAppApi<string>("/api/app/trade/create", dict);
-    }
-
-    /// <summary>
-    /// 查询订单状态
-    /// </summary>
-    /// <param name="tradeNo"></param>
-    /// <returns></returns>
-    public CheckTradeResponse? TradeCheck(string tradeNo)
-    {
-        var dict = new Dictionary<string, object>
-        {
-            { "time", (int)SimApiUtil.TimestampNow },
-            { "appId", simApiOptions.CoceSdkOptions.AppId! },
-            { "tradeNo", tradeNo }
-        };
-        return QueryAppApi<CheckTradeResponse>("/api/app/trade/result", dict);
-    }
-
-    /// <summary>
-    /// 对订单进行退款
-    /// </summary>
-    /// <param name="tradeNo"></param>
-    /// <returns></returns>
-    public bool TradeRefund(string tradeNo)
-    {
-        var dict = new Dictionary<string, object>
-        {
-            { "time", (int)SimApiUtil.TimestampNow },
-            { "appId", simApiOptions.CoceSdkOptions.AppId! },
-            { "tradeNo", tradeNo }
-        };
-        return QueryAppApiNoResp("/api/app/trade/refund", dict);
-    }
-
-
-    private T? QueryAppApi<T>(string endpoint, Dictionary<string, object> request)
-    {
-        var response = QueryAppApi(endpoint, request);
-        var result = response.Content.ReadFromJsonAsync<SimApiBaseResponse<T>>().Result!;
-        if (result.Code == 200) return result.Data;
-        logger.LogDebug("发生错误: {Code} => {Message}", result.Code, result.Message);
-        return default;
-    }
-
-    private bool QueryAppApiNoResp(string endpoint, Dictionary<string, object> request)
-    {
-        var response = QueryAppApi(endpoint, request);
-        var result = response.Content.ReadFromJsonAsync<SimApiBaseResponse>().Result!;
-        return result.Code == 200;
-    }
-
-    private HttpResponseMessage QueryAppApi(string endpoint, Dictionary<string, object> request)
-    {
-        var platUrl = simApiOptions.CoceSdkOptions.ApiEndpoint + endpoint;
-        var sorted = request.OrderBy(x => x.Key);
-        var signStr = sorted.Aggregate("", (current, item) => current + $"{item.Key}={item.Value}&").TrimEnd('&');
-        logger.LogDebug("签名的字符串: {SignStr}", signStr);
-        var sign = SimApiUtil.Md5(signStr + simApiOptions.CoceSdkOptions.AppKey);
-        logger.LogDebug("签名: {Sign}", sign);
-        request.Add("sign", sign);
-        logger.LogDebug("请求地址: {PlatUrl} => {Data}", platUrl, SimApiUtil.Json(request));
-        var http = new HttpClient();
-        return http.PostAsJsonAsync(platUrl, request).Result;
-    }
-
-
-    /// <summary>
-    /// 获取用户的群组信息
-    /// </summary>
-    /// <param name="token">Level >=2 的Token</param>
-    /// <returns></returns>
-    public IEnumerable<GroupInfo>? GetUserGroups(string token)
-    {
-        const string uri = "/api/lv2/user/groups";
-        var resp = ProxyQuery<GroupInfo[]>(uri, token, "{}");
-        return resp;
-    }
-
-    /// <summary>
-    /// 获取用户信息
-    /// </summary>
-    /// <param name="token"></param>
-    /// <returns></returns>
-    public UserInfo? GetUserInfo(string token)
-    {
-        const string uri = "/api/lv1/user/info";
-        return ProxyQuery<UserInfo>(uri, token);
-    }
-
-    public void SaveToken(string userId, string levelToken)
-    {
-        cache.SetString($"LEVEL:TOKEN:{userId}", levelToken);
-    }
-
-    public string? GetToken(string userId)
-    {
-        return cache.GetString($"LEVEL:TOKEN:{userId}");
-    }
-
-
-    public dynamic? ProxyQuery(string uri, string token, string json) => ProxyQuery<dynamic>(uri, token, json);
-
-    public dynamic? ProxyQueue(string uri, string token, object data) =>
-        ProxyQuery<dynamic>(uri, token, SimApiUtil.Json(data));
-
-    public T? ProxyQueue<T>(string uri, string token, object data) =>
-        ProxyQuery<T>(uri, token, SimApiUtil.Json(data));
-
-    public T? ProxyQuery<T>(string uri, string token, string json = "{}")
-    {
-        var http = new HttpClient();
-        http.DefaultRequestHeaders.Add("Token", token);
-        var realUrl = simApiOptions.CoceSdkOptions.ApiEndpoint + uri;
-        var response = http.PostAsync(realUrl, new StringContent(json, Encoding.UTF8, "application/json"))
-            .Result;
-        var resp = response.Content.ReadFromJsonAsync<SimApiBaseResponse<T>>().Result!;
-        if (resp.Code != 200)
-        {
-            logger.LogDebug("请求发生错误: {RespCode} => {RespMessage}", resp.Code, resp.Message);
-        }
-
-        return resp.Code == 200 ? resp.Data : default;
-    }
-
-    public ConfigResponse GetConfig()
-    {
-        return new ConfigResponse(simApiOptions.CoceSdkOptions.AppId!, simApiOptions.CoceSdkOptions.AuthEndpoint);
-    }
-}

CoceSdk/CoceAppSdkOption.cs

@@ -1,15 +0,0 @@
-namespace SimApi.CoceSdk;
-
-public class CoceAppSdkOption
-{
-    /**
-     * 中心API服务器地址
-     */
-    public string ApiEndpoint { get; set; } = "https://api.coce.cc";
-
-    public string AuthEndpoint { get; set; } = "https://home.coce.cc";
-
-    public string? AppId { get; set; }
-
-    public string? AppKey { get; set; }
-}

CoceSdk/CoceController.cs

@@ -1,52 +0,0 @@
-using System;
-using System.Collections.Generic;
-using System.Linq;
-using Microsoft.AspNetCore.Mvc;
-using Microsoft.Extensions.DependencyInjection;
-using SimApi.Attributes;
-using SimApi.Communications;
-using SimApi.Controllers;
-using SimApi.Helpers;
-using static SimApi.Helpers.SimApiError;
-
-namespace SimApi.CoceSdk;
-
-public class CoceController(CoceApp coce, SimApiAuth auth, IServiceProvider sp) : SimApiBaseController
-{
-    [HttpPost]
-    public SimApiBaseResponse<ConfigResponse> GetConfig()
-    {
-        return new SimApiBaseResponse<ConfigResponse>(coce.GetConfig());
-    }
-
-    [HttpPost]
-    public string Login([FromBody] SimApiOneFieldRequest<string> request)
-    {
-        var data = coce.GetLevelToken(request.Data!);
-        ErrorWhenNull(data, 400);
-        coce.SaveToken(data!.UserId, data.Token);
-        var userinfo = coce.GetUserInfo(data!.Token);
-        var meta = new Dictionary<string, string>
-        {
-            { "name", userinfo!.Name },
-            { "image", userinfo.Image }
-        };
-        var groups = coce.GetUserGroups(data.Token!)!;
-        var loginItem = new SimApiLoginItem
-        {
-            Id = data.UserId,
-            Meta = meta,
-        };
-        var processor = sp.GetService<ICoceLoginProcessor>();
-        processor?.Process(loginItem, groups.ToArray());
-        return auth.Login(loginItem);
-    }
-
-    [HttpPost, SimApiAuth]
-    public GroupInfo[] ListGroups()
-    {
-        var levelToken = coce.GetToken(LoginInfo.Id!);
-        var groups = coce.GetUserGroups(levelToken!)!;
-        return groups.ToArray();
-    }
-}

CoceSdk/CoceModels.cs

@@ -1,43 +0,0 @@
-using System;
-
-namespace SimApi.CoceSdk;
-
-public record ConfigResponse(string AppId, string AuthUrl);
-
-public record LevelTokenResponse(string Token, string UserId, int TokenLevel);
-
-public record GroupInfo(string Id, string Name, string Image, string Description, string Role);
-
-public record UserInfo(string UserId, string Name, string Image);
-
-public record CheckTradeResponse(
-    string TradeNo,
-    int Amount,
-    int Fee,
-    string Name,
-    string? Ext,
-    string Status,
-    DateTime CreatedAt,
-    DateTime? FinishedAt,
-    DateTime? RefundAt,
-    DateTime? CloseAt);
-
-public class UserInfoWithGroup
-{
-    public string? UserId { get; set; }
-
-    public string? Name { get; set; }
-
-    public string? LevelToken { get; set; }
-
-    public UserGroupItem[]? UserGroupItems { get; set; }
-}
-
-public class UserGroupItem
-{
-    public string? GroupId { get; set; }
-
-    public string? GroupName { get; set; }
-
-    public string? GroupRole { get; set; }
-}

CoceSdk/ICoceLoginProcessor.cs

@@ -1,9 +0,0 @@
-using System.Collections.Generic;
-using SimApi.Communications;
-
-namespace SimApi.CoceSdk;
-
-public interface ICoceLoginProcessor
-{
-    SimApiLoginItem Process(SimApiLoginItem loginItem, GroupInfo[] groups);
-}

Configurations/SimApiAuthGateOptions.cs

@@ -0,0 +1,15 @@
+namespace SimApi.Configurations;
+
+public class SimApiAuthGateOptions
+{
+    public string? Server { get; set; }
+    public string? AppId { get; set; }
+    public string? AppKey { get; set; }
+
+    /// <summary>
+    /// 开启则使用内部网关透传的Middleware
+    /// 注意: 只有内部应用需要开启这个,也就是api通过内部网关代理后
+    /// </summary>
+    public bool UseMiddleware { get; set; }
+    public bool UseIam { get; set; }
+}

Configurations/SimApiExceptionOptions.cs

@@ -0,0 +1,6 @@
+namespace SimApi.Configurations;
+
+public class SimApiExceptionOptions
+{
+    public int[] SkipStatusCodes = [200, 301, 302];
+}

Configurations/SimApiGateAuthOptions.cs

@@ -1,8 +0,0 @@
-namespace SimApi.Configurations;
-
-public class SimApiGateAuthOptions
-{
-    public string? AppId { get; set; }
-
-    public string? AppKey { get; set; }
-}

Configurations/SimApiHttpClientOptions.cs

@@ -0,0 +1,8 @@
+namespace SimApi.Configurations;
+
+public class SimApiHttpClientOptions
+{
+    public string Server { get; set; } = string.Empty;
+    public string AppId { get; set; } = string.Empty;
+    public string AppKey { get; set; } = string.Empty;
+}

Configurations/SimApiOptions.cs

@@ -1,5 +1,4 @@
 using System;
-using SimApi.CoceSdk;
 
 namespace SimApi.Configurations;
 
@@ -21,12 +20,7 @@ public class SimApiOptions
     /// <summary>
     /// 启用SimApi网关授权, 基于上层网关透传的身份令牌验证
     /// </summary>
-    public bool EnableSimApiGateAuth { get; set; }
-
-    /// <summary>
-    /// 是否使用CoceSdk
-    /// </summary>
-    public bool EnableCoceSdk { get; set; }
+    public bool EnableSimApiAuthGate { get; set; }
 
     /// <summary>
     /// 开启S3兼容的存储系统。
@@ -51,9 +45,6 @@ public class SimApiOptions
     /// </summary>
     public bool EnableCors { get; set; } = true;
 
-
-    public CoceAppSdkOption CoceSdkOptions { get; set; } = new();
-
     /// <summary>
     /// 启用异常拦截,启用后，所有的异常将被通过json反馈。
     /// default: true
@@ -65,7 +56,6 @@ public class SimApiOptions
     /// </summary>
     public bool EnableSimApiResponseFilter { get; set; } = true;
 
-
     /// <summary>
     /// 开启ForwardHeaders,开启后可以透传负载均衡的Headers
     /// default: true
@@ -78,20 +68,16 @@ public class SimApiOptions
     /// </summary>
     public bool EnableLowerUrl { get; set; } = true;
 
-
-    /// <summary>
-    /// 应用可以通过 /versions 显示出应用版本和SimApi包版本
-    /// default: true
-    /// </summary>
-    public bool EnableVersionUrl { get; set; } = true;
-
-
     /// <summary>
     /// 启用格式化的 Console Logger
     /// default: false
     /// </summary>
     public bool EnableLogger { get; set; } = true;
 
+    /// <summary>
+    /// 是否启用SimApiHttpClient
+    /// </summary>
+    public bool EnableSimApiHttpClient { get; set; } = false;
 
     /// <summary>
     /// 配置Job
@@ -110,18 +96,34 @@ public class SimApiOptions
 
     public SimApiSynapseOptions SimApiSynapseOptions { get; set; } = new();
 
-    public SimApiGateAuthOptions SimApiGateAuthOptions { get; set; } = new();
+    public SimApiAuthGateOptions SimApiAuthGateOptions { get; set; } = new();
+
+    public SimApiHttpClientOptions SimApiHttpClientOptions { get; set; } = new();
+
+    public SimApiExceptionOptions SimApiExceptionOptions { get; set; } = new();
+
+    public SimApiRouteOptions SimApiRouteOptions { get; set; } = new();
+
+    public void ConfigureSimApiRoute(Action<SimApiRouteOptions>? options = null)
+    {
+        options?.Invoke(SimApiRouteOptions);
+    }
+
+    public void ConfigureSimApiException(Action<SimApiExceptionOptions>? options = null)
+    {
+        options?.Invoke(SimApiExceptionOptions);
+    }
+
+    public void ConfigureSimApiHttpClient(Action<SimApiHttpClientOptions>? options = null)
+    {
+        options?.Invoke(SimApiHttpClientOptions);
+    }
 
     public void ConfigureSimApiSynapse(Action<SimApiSynapseOptions>? options = null)
     {
         options?.Invoke(SimApiSynapseOptions);
     }
 
-    public void ConfigureCoceSdk(Action<CoceAppSdkOption>? options = null)
-    {
-        options?.Invoke(CoceSdkOptions);
-    }
-
     public void ConfigureSimApiDoc(Action<SimApiDocOptions>? options = null)
     {
         options?.Invoke(SimApiDocOptions);
@@ -137,8 +139,8 @@ public class SimApiOptions
         options?.Invoke(SimApiJobOptions);
     }
 
-    public void ConfigureSimApiGateAuth(Action<SimApiGateAuthOptions>? options = null)
+    public void ConfigureSimApiAuthGate(Action<SimApiAuthGateOptions>? options = null)
     {
-        options?.Invoke(SimApiGateAuthOptions);
+        options?.Invoke(SimApiAuthGateOptions);
     }
 }

Configurations/SimApiRouteOptions.cs

@@ -0,0 +1,8 @@
+namespace SimApi.Configurations;
+
+public class SimApiRouteOptions
+{
+    public string? VersionRoute = "/versions";
+    public string? LogoutRoute = "/auth/logout";
+    public string? UserInfoRoute = "/user/info";
+}

Controllers/SimApiAuthController.cs

@@ -5,8 +5,6 @@ using SimApi.Helpers;
 
 namespace SimApi.Controllers;
 
-using static SimApiError;
-
 public class SimApiAuthController(SimApiAuth auth) : SimApiBaseController
 {
     /// <summary>
@@ -21,4 +19,11 @@ public class SimApiAuthController(SimApiAuth auth) : SimApiBaseController
             auth.Logout(value!);
         }
     }
+
+    /// <summary>
+    /// 获取已登录用户信息
+    /// </summary>
+    /// <returns></returns>
+    [HttpPost, SimApiAuth, SimApiDoc("认证", "获取已登录用户信息")]
+    public SimApiLoginItem UserInfo() => LoginInfo;
 }

Controllers/SimApiCommonController.cs

@@ -31,11 +31,4 @@ public class SimApiCommonController : SimApiBaseController
             { "App", SimApiUtil.AppVersion }
         };
     }
-
-    /// <summary>
-    /// 获取已登录用户信息
-    /// </summary>
-    /// <returns></returns>
-    [HttpPost("/user/info"), SimApiAuth, SimApiDoc("认证", "获取已登录用户信息")]
-    public SimApiLoginItem UserInfo() => LoginInfo;
 }

Helpers/SimApiHttpClient.cs

@@ -3,24 +3,24 @@ using System.Collections.Generic;
 using System.Linq;
 using System.Net.Http;
 using System.Net.Http.Json;
+using Microsoft.Extensions.Logging;
 using SimApi.Communications;
+using SimApi.Configurations;
 using SimApi.Exceptions;
 
 namespace SimApi.Helpers;
 
-public class SimApiHttpClient
+public class SimApiHttpClient(SimApiOptions? apiOptions = null, ILogger<SimApiHttpClient>? logger = null)
 {
-    public required string Server { get; init; }
-    public required string AppId { get; init; }
+    public virtual  string Server { get; init; } = apiOptions?.SimApiHttpClientOptions.Server ?? string.Empty;
+    public virtual  string AppId { get; init; } = apiOptions?.SimApiHttpClientOptions.AppId ?? string.Empty;
+    public virtual  string AppKey { get; init; } = apiOptions?.SimApiHttpClientOptions.AppKey ?? string.Empty;
 
-    public required string AppKey { get; init; }
-
-    public bool Debug { get; init; } = false;
-    public string SignName { get; init; } = "sign";
-    public string TimestampName { get; init; } = "timestamp";
-    public string NonceName { get; init; } = "nonce";
-    public string? AppIdName { get; init; } = "appId";
-    public string[] SignFields { get; init; } = [];
+    public virtual  string SignName { get; init; } = "sign";
+    public virtual  string TimestampName { get; init; } = "timestamp";
+    public virtual  string NonceName { get; init; } = "nonce";
+    public virtual  string? AppIdName { get; init; } = "appId";
+    public virtual  string[] SignFields { get; init; } = [];
 
     /// <summary>
     /// 发起签名请求
@@ -103,23 +103,12 @@ public class SimApiHttpClient
     private T? Query<T>(string url, object? req)
     {
         var http = new HttpClient();
-        if (Debug)
-        {
-            Console.WriteLine($"[HTTPCLIENT请求] {url}\n{SimApiUtil.Json(req)}\n");
-        }
-
+        logger?.LogDebug($"[HTTPCLIENT请求] {url}\n{SimApiUtil.Json(req)}\n");
         var resp = http.PostAsJsonAsync(url, req).Result;
-        if (Debug)
-        {
-            Console.WriteLine($"[HTTPCLIENT响应] {resp.Content.ReadAsStringAsync().Result}\n");
-        }
-
+        logger?.LogDebug($"[HTTPCLIENT响应] {resp.Content.ReadAsStringAsync().Result}\n");
         var res = resp.Content.ReadFromJsonAsync<SimApiBaseResponse<T>>().Result;
-        if (res == null)
-        {
-            throw new SimApiException(500, "请求发生错误");
-        }
-
-        return res.Code != 200 ? throw new SimApiException(res.Code, res.Message) : res.Data;
+        SimApiError.ErrorWhenNull(res, 500, "请求发生错误");
+        SimApiError.ErrorWhen(res.Code != 200, res.Code, res.Message);
+        return res.Data;
     }
 }

Middlewares/SimApiExceptionMiddleware.cs

@@ -1,16 +1,22 @@
 using System;
+using System.Linq;
 using System.Threading.Tasks;
 using Microsoft.AspNetCore.Http;
 using SimApi.Communications;
 using Microsoft.Extensions.Logging;
+using SimApi.Configurations;
 using SimApi.Exceptions;
+using SimApi.Helpers;
 
 namespace SimApi.Middlewares;
 
 /// <summary>
 /// 异常处理中间件
 /// </summary>
-public class SimApiExceptionMiddleware(RequestDelegate next, ILogger<SimApiExceptionMiddleware> log)
+public class SimApiExceptionMiddleware(
+    RequestDelegate next,
+    ILogger<SimApiExceptionMiddleware> log,
+    SimApiOptions simApiOptions)
 {
     public async Task InvokeAsync(HttpContext context)
     {
@@ -24,18 +30,9 @@ public class SimApiExceptionMiddleware(RequestDelegate next, ILogger<SimApiExcep
             await next(context);
             if (!context.Response.HasStarted)
             {
-                switch (context.Response.StatusCode)
-                {
-                    case 200:
-                    case 301:
-                    case 302:
-                    case 404:
-                        break;
-                    // case 404:
-                    //     throw new SimApiException(context.Response.StatusCode, "请求的接口不存在");
-                    default:
-                        throw new SimApiException(context.Response.StatusCode);
-                }
+                SimApiError.ErrorWhenFalse(
+                    simApiOptions.SimApiExceptionOptions.SkipStatusCodes.Contains(context.Response.StatusCode),
+                    context.Response.StatusCode);
             }
         }
         catch (Exception ex)

SimApiExtensions.cs

@@ -16,7 +16,7 @@ using Microsoft.AspNetCore.Mvc;
 using Microsoft.Extensions.Hosting;
 using Microsoft.Extensions.Logging;
 using SimApi.Attributes;
-using SimApi.CoceSdk;
+using SimApi.AuthGate;
 using SimApi.Configurations;
 using SimApi.Interfaces;
 using SimApi.Logger;
@@ -59,11 +59,6 @@ public static class SimApiExtensions
             builder.AddSingleton<SimApiAuth>();
         }
 
-        if (simApiOptions.EnableCoceSdk)
-        {
-            builder.AddSingleton<CoceApp>();
-        }
-
         var simApiAuthChecker = typeof(ISimApiAuthChecker);
         var stackTrace = new StackTrace();
         var callingMethod = stackTrace.GetFrame(stackTrace.FrameCount - 1)?.GetMethod();
@@ -108,6 +103,11 @@ public static class SimApiExtensions
                 policy => { policy.AllowAnyHeader().AllowAnyMethod().AllowAnyOrigin(); }));
         }
 
+        if (simApiOptions.EnableSimApiHttpClient)
+        {
+            builder.AddSingleton<SimApiHttpClient>();
+        }
+
         if (simApiOptions.EnableSynapse)
         {
             builder.AddSingleton<Synapse>();
@@ -329,6 +329,16 @@ public static class SimApiExtensions
                 });
         }
 
+        if (simApiOptions.EnableSimApiAuthGate)
+        {
+            builder.AddSingleton<SimApiAuthGateClient>();
+            builder.AddSingleton<SimApiAuthGate>();
+            if (simApiOptions.SimApiAuthGateOptions.UseIam)
+            {
+                builder.AddSingleton<SimApiIam>();
+            }
+        }
+
         builder.AddSingleton(simApiOptions);
         return builder;
     }
@@ -355,11 +365,11 @@ public static class SimApiExtensions
             builder.Services.GetService<SimApiStorage>();
         }
 
-        if (options.EnableCoceSdk)
+        if (options.EnableSimApiHttpClient)
         {
-            logger.LogInformation("开始配置CoceAppSdk...\nApi入口: {ApiUrl}\nAuth入口:{AuthUrl}n\nAppId: {AppId}",
-                options.CoceSdkOptions.ApiEndpoint, options.CoceSdkOptions.AuthEndpoint,
-                options.CoceSdkOptions.AppId);
+            logger.LogInformation("开始配置SimApiHttpClient...\n服务器地址: {ApiUrl}\nAppId:{AuthUrl}n\nAppkey: {AppId}",
+                options.SimApiHttpClientOptions.Server, options.SimApiHttpClientOptions.AppId,
+                !string.IsNullOrEmpty(options.SimApiHttpClientOptions.AppKey));
         }
 
         if (options.EnableSynapse)
@@ -412,17 +422,20 @@ public static class SimApiExtensions
             logger.LogInformation(msg);
         }
 
-        if (options.EnableSimApiGateAuth)
+        if (options.EnableSimApiAuthGate)
         {
-            logger.LogInformation("开始配置SimApiGateAuth...");
-            if (string.IsNullOrEmpty(options.SimApiGateAuthOptions.AppId) ||
-                string.IsNullOrEmpty(options.SimApiGateAuthOptions.AppKey))
+            logger.LogInformation("开始配置SimApiAuthGate...");
+            if (string.IsNullOrEmpty(options.SimApiAuthGateOptions.AppId) ||
+                string.IsNullOrEmpty(options.SimApiAuthGateOptions.AppKey))
             {
-                logger.LogCritical("必须配置Gate的AppId和AppKey才能启用SimApiGateAuth");
+                logger.LogCritical("必须配置AuthGate的AppId和AppKey才能启用SimApiAuthGate");
             }
             else
             {
-                builder.UseMiddleware<SimApiGateAuthMiddleware>();
+                if (options.SimApiAuthGateOptions.UseMiddleware)
+                {
+                    builder.UseMiddleware<SimApiAuthGateMiddleware>();
+                }
             }
         }
 
@@ -430,41 +443,13 @@ public static class SimApiExtensions
         {
             logger.LogInformation("开始配置SimApiAuth...");
             builder.UseMiddleware<SimApiAuthMiddleware>();
-            builder.MapControllerRoute(name: "Logout", pattern: "/auth/logout",
-                defaults: new
-                {
-                    controller = "SimApiAuth",
-                    action = "Logout"
-                });
-            if (options.EnableCoceSdk)
-            {
-                logger.LogInformation("开始配置CoceAppSdk...\nApi入口: {ApiUrl}\nAuth入口:{AuthUrl}n\nAppId: {AppId}",
-                    options.CoceSdkOptions.ApiEndpoint, options.CoceSdkOptions.AuthEndpoint,
-                    options.CoceSdkOptions.AppId);
-                builder.MapControllerRoute(name: "LoginUseCoce", pattern: "/auth/login",
-                    defaults: new
-                    {
-                        controller = "Coce",
-                        action = "Login"
-                    });
-                builder.MapControllerRoute(name: "LoginUseCoce", pattern: "/user/groups",
-                    defaults: new
-                    {
-                        controller = "Coce",
-                        action = "ListGroups"
-                    });
-                builder.MapControllerRoute(name: "LoginUseCoce", pattern: "/auth/config",
-                    defaults: new
-                    {
-                        controller = "Coce",
-                        action = "GetConfig"
-                    });
-            }
         }
 
-        if (options.EnableVersionUrl)
+
+        if (options.SimApiRouteOptions.VersionRoute != null)
         {
-            builder.MapControllerRoute(name: "Versions", pattern: "/versions",
+            logger.LogInformation("注册内置Route: Versions => {}", options.SimApiRouteOptions.LogoutRoute);
+            builder.MapControllerRoute(name: "Versions", pattern: options.SimApiRouteOptions.VersionRoute,
                 defaults: new
                 {
                     controller = "SimApiCommon",
@@ -472,6 +457,28 @@ public static class SimApiExtensions
                 });
         }
 
+        if (options.SimApiRouteOptions.UserInfoRoute != null)
+        {
+            logger.LogInformation("注册内置Route: UserInfo => {}", options.SimApiRouteOptions.UserInfoRoute);
+            builder.MapControllerRoute(name: "UserInfo", pattern: options.SimApiRouteOptions.UserInfoRoute,
+                defaults: new
+                {
+                    controller = "SimApiAuth",
+                    action = "UserInfo"
+                });
+        }
+
+        if (options.SimApiRouteOptions.LogoutRoute != null)
+        {
+            logger.LogInformation("注册内置Route: Logout => {}", options.SimApiRouteOptions.LogoutRoute);
+            builder.MapControllerRoute(name: "Logout", pattern: options.SimApiRouteOptions.LogoutRoute,
+                defaults: new
+                {
+                    controller = "SimApiAuth",
+                    action = "Logout"
+                });
+        }
+
         if (options.EnableSimApiDoc)
         {
             logger.LogInformation("开始配置SimApiDoc...");
@@ -482,7 +489,7 @@ public static class SimApiExtensions
                     x.DocumentTitle = docOptions.DocumentTitle;
                     foreach (var group in docOptions.ApiGroups)
                     {
-                        x.SwaggerEndpoint($"/swagger/{group.Id}.json", name: group.Name);
+                        x.SwaggerEndpoint($"{group.Id}.json", name: group.Name);
                     }
 
                     x.SupportedSubmitMethods(docOptions.SupportedMethod);