update package

.github/workflows/nuget-publish.yml

@@ -14,11 +14,11 @@ jobs:
       - name: Setup .NET Core
         uses: actions/setup-dotnet@v1
         with:
-          dotnet-version: "8.0.200"
+          dotnet-version: "9.0.305"
       - name: Publish
         run: |
           version=`git describe --tags`
-          dotnet build --configuration release -p:PackageVersion=$version
+          dotnet build --configuration release -p:Version=$version
           dotnet nuget push bin/release/Simcu.SimApi.$version.nupkg -k ${NUGET_APIKEY} -s https://www.nuget.org/api/v2/package
         env:
           NUGET_APIKEY: ${{ secrets.NUGET_APIKEY }}

Attributes/AesBodyAttribute.cs

@@ -0,0 +1,20 @@
+using System;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.ModelBinding;
+using SimApi.ModelBinders;
+
+namespace SimApi.Attributes;
+
+[AttributeUsage(AttributeTargets.Parameter)]
+public class AesBodyAttribute : ModelBinderAttribute
+{
+    public Type KeyProvider { get; set; } = typeof(AesBodyProviderBase);
+    public override BindingSource BindingSource => BindingSource.Body;
+
+    public AesBodyAttribute()
+    {
+        // 指定使用自定义的模型绑定器
+        BinderType = typeof(AesBodyModelBinder);
+        Name = KeyProvider.FullName;
+    }
+}

Attributes/OriginResponseAttribute.cs

@@ -0,0 +1,8 @@
+using System;
+
+namespace SimApi.Attributes;
+
+[AttributeUsage(AttributeTargets.Method)]
+public class OriginResponseAttribute : Attribute
+{
+}

Attributes/SimApiDocAttribute.cs

@@ -16,7 +16,7 @@ public class SimApiDocAttribute : SwaggerOperationAttribute
     /// <param name="name">接口名称</param>
     public SimApiDocAttribute(string tag, string name)
     {
-        Tags = new[] { tag };
+        Tags = [tag];
         Summary = name;
         // Consumes = new[] {"application/json"};
         // Produces = new[] {"application/json"};

Attributes/SimApiSignAttribute.cs

@@ -0,0 +1,118 @@
+using System;
+using System.Linq;
+using Microsoft.AspNetCore.Mvc.Filters;
+using Microsoft.Extensions.Caching.Distributed;
+using Microsoft.Extensions.DependencyInjection;
+using SimApi.Exceptions;
+using SimApi.Helpers;
+using SimApi.ModelBinders;
+
+namespace SimApi.Attributes;
+
+[AttributeUsage(AttributeTargets.Class | AttributeTargets.Method)]
+public class SimApiSignAttribute : ActionFilterAttribute
+{
+    public Type KeyProvider { get; set; } = typeof(SimApiSignProviderBase);
+
+    public override void OnActionExecuting(ActionExecutingContext context)
+    {
+        if (context.HttpContext.RequestServices.GetService(KeyProvider) is not SimApiSignProviderBase keyProvider)
+        {
+            throw new SimApiException(400, "未配置签名器");
+        }
+
+        string? appId = null;
+        if (!string.IsNullOrEmpty(keyProvider.AppIdName))
+        {
+            appId = context.HttpContext.Request.Query[keyProvider.AppIdName]
+                .FirstOrDefault() ?? context.HttpContext.Request.Headers[keyProvider.AppIdName]
+                .FirstOrDefault();
+
+            if (string.IsNullOrEmpty(appId))
+            {
+                throw new SimApiException(400, $"获取{keyProvider.AppIdName}失败");
+            }
+        }
+
+        // 4. 通过接口获取密钥（解耦的核心：不再直接依赖数据库）
+        var key = keyProvider.GetKey(appId);
+        if (string.IsNullOrEmpty(key))
+        {
+            throw new SimApiException(400, "获取签名KEY失败");
+        }
+
+        var timestamp = context.HttpContext.Request.Query[keyProvider.TimestampName]
+            .FirstOrDefault() ?? context.HttpContext.Request.Headers[keyProvider.TimestampName]
+            .FirstOrDefault();
+        if (string.IsNullOrEmpty(timestamp))
+        {
+            throw new SimApiException(400, $"{keyProvider.TimestampName}不能为空");
+        }
+
+        var nonce = context.HttpContext.Request.Query[keyProvider.NonceName]
+            .FirstOrDefault() ?? context.HttpContext.Request.Headers[keyProvider.NonceName]
+            .FirstOrDefault();
+        if (string.IsNullOrEmpty(nonce))
+        {
+            throw new SimApiException(400, $"{keyProvider.NonceName}不能为空");
+        }
+
+        if (!int.TryParse(timestamp, out var ts))
+        {
+            throw new SimApiException(400, $"{keyProvider.TimestampName}格式错误");
+        }
+
+        if (keyProvider.QueryExpires != 0)
+        {
+            if (ts > SimApiUtil.TimestampNow + 2)
+            {
+                throw new SimApiException(400, "请校准本地时间");
+            }
+
+            if (ts + keyProvider.QueryExpires < SimApiUtil.TimestampNow)
+            {
+                throw new SimApiException(400, "请求已过期");
+            }
+
+            if (keyProvider.DuplicateRequestProtection)
+            {
+                var cache = context.HttpContext.RequestServices.GetRequiredService<IDistributedCache>();
+                if (cache.GetString("SignQuery:" + nonce) == null)
+                {
+                    cache.SetString("SignQuery:" + nonce, timestamp, new DistributedCacheEntryOptions()
+                    {
+                        SlidingExpiration = TimeSpan.FromSeconds(keyProvider.QueryExpires + 2)
+                    });
+                }
+                else
+                {
+                    throw new SimApiException(400, "重复请求");
+                }
+            }
+        }
+
+        var signStr = string.Empty;
+        foreach (var item in keyProvider.SignFields)
+        {
+            signStr += $"{item}=";
+            signStr += context.HttpContext.Request.Query[item]
+                .FirstOrDefault() ?? context.HttpContext.Request.Headers[item]
+                .FirstOrDefault();
+            signStr += "&";
+        }
+
+        if (!string.IsNullOrEmpty(keyProvider.AppIdName))
+        {
+            signStr += $"{keyProvider.AppIdName}={appId}&";
+        }
+
+        signStr += $"{keyProvider.TimestampName}={ts}&{keyProvider.NonceName}={nonce}&{key}";
+        var sign = context.HttpContext.Request.Query[keyProvider.SignName]
+            .FirstOrDefault() ?? context.HttpContext.Request.Headers[keyProvider.SignName]
+            .FirstOrDefault();
+        if (SimApiUtil.Md5(signStr) != sign)
+        {
+            throw new SimApiException(400, "签名错误");
+        }
+    }
+}

CoceSdk/CoceController.cs

@@ -1,14 +1,16 @@
-using System.Collections.Generic;
+using System;
+using System.Collections.Generic;
 using System.Linq;
 using Microsoft.AspNetCore.Mvc;
+using Microsoft.Extensions.DependencyInjection;
 using SimApi.Attributes;
-using SimApi.CoceSdk;
 using SimApi.Communications;
+using SimApi.Controllers;
 using SimApi.Helpers;
 
-namespace SimApi.Controllers;
+namespace SimApi.CoceSdk;
 
-public class SimApiCoceController(CoceApp coce,SimApiAuth auth) : SimApiBaseController
+public class CoceController(CoceApp coce, SimApiAuth auth, IServiceProvider sp) : SimApiBaseController
 {
     [HttpPost]
     public SimApiBaseResponse<ConfigResponse> GetConfig()
@@ -33,8 +35,9 @@ public class SimApiCoceController(CoceApp coce,SimApiAuth auth) : SimApiBaseCont
         {
             Id = data.UserId,
             Meta = meta,
-            Extra = groups
         };
+        var processor = sp.GetService<ICoceLoginProcessor>();
+        processor?.Process(loginItem, groups.ToArray());
         return new SimApiBaseResponse<string>(auth.Login(loginItem));
     }
 

CoceSdk/ICoceLoginProcessor.cs

@@ -0,0 +1,9 @@
+using System.Collections.Generic;
+using SimApi.Communications;
+
+namespace SimApi.CoceSdk;
+
+public interface ICoceLoginProcessor
+{
+    SimApiLoginItem Process(SimApiLoginItem loginItem, GroupInfo[] groups);
+}

Communications/SimApiBaseRequest.cs

@@ -1,13 +1,11 @@
-using System.ComponentModel.DataAnnotations;
-
-namespace SimApi.Communications;
+namespace SimApi.Communications;
 
 /// <summary>
 /// 只有ID的请求
 /// </summary>
 public class SimApiIdOnlyRequest
 {
-    [Required] public int Id { get; set; }
+    public required int Id { get; set; }
 }
 
 /// <summary>
@@ -15,7 +13,7 @@ public class SimApiIdOnlyRequest
 /// </summary>
 public class SimApiStringIdOnlyRequest
 {
-    [Required] public string? Id { get; set; }
+    public required string Id { get; set; }
 }
 
 /// <summary>
@@ -24,7 +22,7 @@ public class SimApiStringIdOnlyRequest
 /// <typeparam name="T"></typeparam>
 public class SimApiOneFieldRequest<T>
 {
-    [Required] public T? Data { get; set; }
+    public required T Data { get; set; }
 }
 
 /// <summary>
@@ -32,6 +30,6 @@ public class SimApiOneFieldRequest<T>
 /// </summary>
 public class SimApiBasePageRequest
 {
-    [Required] public int Page { get; set; }
-    [Required] public int Count { get; set; }
+    public required int Page { get; set; }
+    public required int Count { get; set; }
 }

Communications/SimApiBaseResponse.cs

@@ -1,6 +1,7 @@
 using System.Collections.Generic;
 using System.Text.Json;
 using System.Text.Json.Serialization;
+using SimApi.Helpers;
 
 namespace SimApi.Communications;
 
@@ -12,6 +13,10 @@ public class SimApiBaseResponse(int code = 200, string message = "成功")
     public int Code { get; set; } = code;
     public string Message { get; set; } = message;
 
+    public SimApiBaseResponse() : this(200, "成功")
+    {
+    }
+
     /// <summary>
     /// 默认错误代码对应提示信息
     /// </summary>
@@ -36,15 +41,7 @@ public class SimApiBaseResponse(int code = 200, string message = "成功")
     /// <returns></returns>
     public override string ToString()
     {
-        return JsonSerializer.Serialize(this, new JsonSerializerOptions
-        {
-            IgnoreReadOnlyProperties = true,
-            PropertyNamingPolicy = JsonNamingPolicy.CamelCase,
-            Converters =
-            {
-                new JsonStringEnumConverter()
-            }
-        });
+        return SimApiUtil.Json(this);
     }
 }
 

Communications/SimApiLoginItem.cs

@@ -7,8 +7,8 @@ namespace SimApi.Communications;
 /// </summary>
 public class SimApiLoginItem
 {
-    public string? Id { get; set; }
-    public string[] Type { get; set; } = new[] { "user" };
-    public Dictionary<string, string>? Meta { get; set; } = null;
-    public object? Extra { get; set; } = null;
+    public required string Id { get; set; }
+    public string[] Type { get; set; } = ["user"];
+    public Dictionary<string, string> Meta { get; set; } = [];
+    public object? Extra { get; set; }
 };

Configurations/SimApiDocOptions.cs

@@ -6,22 +6,22 @@ namespace SimApi.Configurations;
 /// <summary>
 /// 文档组配置
 /// </summary>
-public class SimApiDocGroupOption
+public class SimApiDocGroupOption(string id, string name, string description = "")
 {
     /// <summary>
     /// 文档标识
     /// </summary>
-    public string Id { get; set; } = null!;
+    public string Id { get; set; } = id;
 
     /// <summary>
     /// 文档名称
     /// </summary>
-    public string Name { get; set; } = null!;
+    public string Name { get; set; } = name;
 
     /// <summary>
     /// 文档描述
     /// </summary>
-    public string Description { get; set; } = null!;
+    public string Description { get; set; } = description!;
 }
 
 /// <summary>
@@ -29,7 +29,7 @@ public class SimApiDocGroupOption
 /// </summary>
 public class SimApiAuthOption
 {
-    public string[] Type { get; set; } = new[] { "SimApiAuth" };
+    public string[] Type { get; set; } = ["SimApiAuth"];
 
     public string Description { get; set; } = "认证服务器颁发的AccessToken";
 
@@ -48,20 +48,15 @@ public class SimApiDocOptions
     /// <summary>
     /// 文档组配置
     /// </summary>
-    public SimApiDocGroupOption[] ApiGroups { get; set; } = new[]
-    {
-        new SimApiDocGroupOption
-        {
-            Id = "api",
-            Name = "Api",
-            Description = "Api接口文档"
-        }
-    };
+    public SimApiDocGroupOption[] ApiGroups { get; set; } =
+    [
+        new("api", "Api", "Api接口文档")
+    ];
 
     /// <summary>
     /// 授权配置
     /// </summary>
-    public SimApiAuthOption ApiAuth { get; set; } = new SimApiAuthOption();
+    public SimApiAuthOption ApiAuth { get; set; } = new();
 
     /// <summary>
     /// 文档页面标题
@@ -71,5 +66,5 @@ public class SimApiDocOptions
     /// <summary>
     /// 接口支持的调用方式
     /// </summary>
-    public SubmitMethod[] SupportedMethod { get; set; } = new[] { SubmitMethod.Post };
+    public SubmitMethod[] SupportedMethod { get; set; } = [SubmitMethod.Post];
 }

Configurations/SimApiJobOptions.cs

@@ -0,0 +1,39 @@
+namespace SimApi.Configurations;
+
+public class SimApiJobOptions
+{
+    /// <summary>
+    /// WebUi地址,设置为null表示不启用
+    /// 默认 /jobs
+    /// </summary>
+    public string? DashboardUrl { get; set; } = "/jobs";
+
+    /// <summary>
+    /// webui 用户
+    /// 默认 admin
+    /// </summary>
+    public string DashboardAuthUser { get; set; } = "admin";
+
+    /// <summary>
+    /// webui 密码
+    /// 默认 Admin@123!
+    /// </summary>
+    public string DashboardAuthPass { get; set; } = "Admin@123!";
+
+    /// <summary>
+    /// 设置为null 使用默认redis配置
+    /// </summary>
+    public string? RedisConfiguration { get; set; }
+
+    /// <summary>
+    /// 设置为null 使用默认redis配置
+    /// </summary>
+    public int? Database { get; set; } = null;
+    public SimApiJobServerConfig[] Servers { get; set; } = [new()];
+}
+
+public class SimApiJobServerConfig()
+{
+    public string[] Queues { get; set; } = ["default"];
+    public int WorkerNum { get; set; } = 50;
+}

Configurations/SimApiOptions.cs

@@ -5,11 +5,12 @@ namespace SimApi.Configurations;
 
 public class SimApiOptions
 {
+    public string? RedisConfiguration { get; set; }
+
     /// <summary>
-    /// 启用全部Cors，对于开发前后分离的时候很有用。
-    /// default: true
+    /// 是否启用后台任务系统 *基于Hangfire
     /// </summary>
-    public bool EnableCors { get; set; } = true;
+    public bool EnableJob { get; set; }
 
     /// <summary>
     /// 启用SimApiAuth，一个简单的基于Header Token的认证方式。
@@ -17,13 +18,16 @@ public class SimApiOptions
     /// </summary>
     public bool EnableSimApiAuth { get; set; }
 
-
     /// <summary>
     /// 是否使用CoceSdk
     /// </summary>
     public bool EnableCoceSdk { get; set; }
 
-    public CoceAppSdkOption CoceSdkOptions { get; set; } = new();
+    /// <summary>
+    /// 开启S3兼容的存储系统。
+    /// default: false
+    /// </summary>
+    public bool EnableSimApiStorage { get; set; }
 
     /// <summary>
     /// 启用在线文档，启用后 访问 /swagger 可以查看对应的api文档。
@@ -31,6 +35,20 @@ public class SimApiOptions
     /// </summary>
     public bool EnableSimApiDoc { get; set; }
 
+    /// <summary>
+    /// 是否启用Synapse
+    /// </summary>
+    public bool EnableSynapse { get; set; }
+
+    /// <summary>
+    /// 启用全部Cors，对于开发前后分离的时候很有用。
+    /// default: true
+    /// </summary>
+    public bool EnableCors { get; set; } = true;
+
+
+    public CoceAppSdkOption CoceSdkOptions { get; set; } = new();
+
     /// <summary>
     /// 启用异常拦截,启用后，所有的异常将被通过json反馈。
     /// default: true
@@ -38,10 +56,10 @@ public class SimApiOptions
     public bool EnableSimApiException { get; set; } = true;
 
     /// <summary>
-    /// 开启S3兼容的存储系统。
-    /// default: false
+    /// 启用返回结果拦截
     /// </summary>
-    public bool EnableSimApiStorage { get; set; }
+    public bool EnableSimApiResponseFilter { get; set; } = true;
+
 
     /// <summary>
     /// 开启ForwardHeaders,开启后可以透传负载均衡的Headers
@@ -55,17 +73,26 @@ public class SimApiOptions
     /// </summary>
     public bool EnableLowerUrl { get; set; } = true;
 
+
+    /// <summary>
+    /// 应用可以通过 /versions 显示出应用版本和SimApi包版本
+    /// default: true
+    /// </summary>
+    public bool EnableVersionUrl { get; set; } = true;
+
+
+
     /// <summary>
     /// 启用格式化的 Console Logger
     /// default: false
     /// </summary>
-    public bool EnableLogger { get; set; }
+    public bool EnableLogger { get; set; } = true;
+
 
     /// <summary>
-    /// 是否启用Synapse
+    /// 配置Job
     /// </summary>
-    public bool EnableSynapse { get; set; }
-
+    public SimApiJobOptions SimApiJobOptions { get; set; } = new();
 
     /// <summary>
     /// Swagger文档相关配置，需要启用 EnableSimApiDoc
@@ -98,4 +125,9 @@ public class SimApiOptions
     {
         options?.Invoke(SimApiStorageOptions);
     }
+
+    public void ConfigureSimApiJob(Action<SimApiJobOptions>? options = null)
+    {
+        options?.Invoke(SimApiJobOptions);
+    }
 }

Controllers/SimApiAuthController.cs

@@ -0,0 +1,49 @@
+using System.Collections.Generic;
+using Microsoft.AspNetCore.Mvc;
+using SimApi.Attributes;
+using SimApi.Communications;
+using SimApi.Helpers;
+
+namespace SimApi.Controllers;
+
+public class SimApiAuthController(SimApiAuth auth) : SimApiBaseController
+{
+    /// <summary>
+    /// 检测用户登陆的控制器
+    /// </summary>
+    /// <returns></returns>
+    [HttpPost, SimApiDoc("认证", "检测登陆")]
+    public SimApiBaseResponse<string> CheckLogin()
+    {
+        ErrorWhenNull(LoginInfo, 401, "未登录");
+        return new SimApiBaseResponse<string>
+        {
+            Data = LoginInfo.Id
+        };
+    }
+
+    /// <summary>
+    /// 退出登陆
+    /// </summary>
+    /// <returns></returns>
+    [HttpPost, SimApiDoc("认证", "退出登陆")]
+    public SimApiBaseResponse Logout()
+    {
+        string? token = null;
+
+        if (Request.Headers.TryGetValue("Token", out var value))
+        {
+            token = value;
+        }
+
+        auth.Logout(token!);
+        return new SimApiBaseResponse();
+    }
+
+
+    [HttpPost, SimApiAuth]
+    public SimApiBaseResponse<SimApiLoginItem> UserInfo()
+    {
+        return new SimApiBaseResponse<SimApiLoginItem>(LoginInfo);
+    }
+}

Controllers/SimApiBaseController.cs

@@ -1,4 +1,5 @@
-using SimApi.Communications;
+using System.Diagnostics.CodeAnalysis;
+using SimApi.Communications;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.AspNetCore.Mvc.Filters;
 using Microsoft.AspNetCore.Mvc.ModelBinding;
@@ -13,6 +14,9 @@ namespace SimApi.Controllers;
 /// 2. 报错返回
 /// 3. 错误回馈页面
 /// </summary>
+///
+[Consumes("application/json")]
+[Produces("application/json")]
 public class SimApiBaseController : Controller
 {
     /// <summary>
@@ -53,7 +57,7 @@ public class SimApiBaseController : Controller
     /// <param name="condition">检测条件</param>
     /// <param name="code">错误代码</param>
     /// <param name="message">错误描述</param>
-    protected static void ErrorWhen(bool condition, int code = 400, string message = "")
+    protected static void ErrorWhen([DoesNotReturnIf(true)] bool condition, int code = 400, string message = "")
     {
         if (condition)
         {
@@ -68,7 +72,7 @@ public class SimApiBaseController : Controller
     /// <param name="condition">检测条件</param>
     /// <param name="code">错误代码</param>
     /// <param name="message">错误描述</param>
-    protected static void ErrorWhenTrue(bool condition, int code = 400, string message = "")
+    protected static void ErrorWhenTrue([DoesNotReturnIf(true)] bool condition, int code = 400, string message = "")
     {
         ErrorWhen(condition, code, message);
     }
@@ -80,7 +84,7 @@ public class SimApiBaseController : Controller
     /// <param name="condition"></param>
     /// <param name="code"></param>
     /// <param name="message"></param>
-    protected static void ErrorWhenFalse(bool condition, int code = 400, string message = "")
+    protected static void ErrorWhenFalse([DoesNotReturnIf(false)] bool condition, int code = 400, string message = "")
     {
         ErrorWhen(!condition, code, message);
     }
@@ -91,7 +95,7 @@ public class SimApiBaseController : Controller
     /// <param name="condition">检测条件</param>
     /// <param name="code">错误代码</param>
     /// <param name="message">错误描述</param>
-    protected static void ErrorWhenNull(object? condition, int code = 404, string message = "请求的资源不存在")
+    protected static void ErrorWhenNull([NotNull] object? condition, int code = 404, string message = "请求的资源不存在")
     {
         ErrorWhen(condition == null, code, message);
     }

Controllers/SimApiCommonController.cs

@@ -1,10 +1,11 @@
-using Microsoft.AspNetCore.Mvc;
-using SimApi.Attributes;
+using System.Collections.Generic;
+using Microsoft.AspNetCore.Mvc;
 using SimApi.Communications;
 using SimApi.Helpers;
 
 namespace SimApi.Controllers;
-public class SimApiCommonController(SimApiAuth auth) : SimApiBaseController
+
+public class SimApiCommonController : SimApiBaseController
 {
     /// <summary>
     /// 错误回馈页面
@@ -18,41 +19,17 @@ public class SimApiCommonController(SimApiAuth auth) : SimApiBaseController
         return new SimApiBaseResponse(code);
     }
 
-    /// <summary>
-    /// 检测用户登陆的控制器
-    /// </summary>
-    /// <returns></returns>
-    [HttpPost, SimApiDoc("认证", "检测登陆")]
-    public SimApiBaseResponse<string> CheckLogin()
+
+    [HttpPost, HttpGet]
+    public SimApiBaseResponse<Dictionary<string, string>> Versions()
     {
-        ErrorWhenNull(LoginInfo, 401,"未登录");
-        return new SimApiBaseResponse<string>
+        return new SimApiBaseResponse<Dictionary<string, string>>()
         {
-            Data = LoginInfo.Id
+            Data = new Dictionary<string, string>
+            {
+                { "SimApi", SimApiUtil.SimApiVersion },
+                { "App", SimApiUtil.AppVersion }
+            }
         };
     }
-
-    /// <summary>
-    /// 退出登陆
-    /// </summary>
-    /// <returns></returns>
-    [HttpPost, SimApiDoc("认证", "退出登陆")]
-    public SimApiBaseResponse Logout()
-    {
-        string? token = null;
-
-        if (Request.Headers.TryGetValue("Token", out var value))
-        {
-            token = value;
-        }
-
-        auth.Logout(token!);
-        return new SimApiBaseResponse();
-    }
-
-    [HttpPost,SimApiAuth]
-    public SimApiBaseResponse<SimApiLoginItem> UserInfo()
-    {
-        return new SimApiBaseResponse<SimApiLoginItem>(LoginInfo);
-    }
 }

Helpers/SimApiAesUtil.cs

@@ -0,0 +1,119 @@
+using System;
+using System.IO;
+using System.Security.Cryptography;
+using System.Text;
+
+namespace SimApi.Helpers;
+
+public static class SimApiAesUtil
+{
+    // 密钥长度：256位 (32字节)
+    private const int KeySize = 256;
+
+    // 块大小：128位 (16字节)
+    private const int BlockSize = 128;
+
+    // 加密模式 - 重命名以避免与枚举类型冲突
+    private const CipherMode AesCipherMode = CipherMode.CBC;
+
+    // 填充模式 - 重命名以避免与枚举类型冲突
+    private const PaddingMode AesPaddingMode = PaddingMode.PKCS7;
+
+    /// <summary>
+    /// AES 加密
+    /// </summary>
+    /// <param name="plainText">明文</param>
+    /// <param name="key">字符串密钥（将被处理为256位）</param>
+    /// <returns>加密后的Base64字符串（包含IV）</returns>
+    public static string Encrypt(string plainText, string key)
+    {
+        if (string.IsNullOrEmpty(plainText))
+            throw new ArgumentNullException(nameof(plainText));
+        if (string.IsNullOrEmpty(key))
+            throw new ArgumentNullException(nameof(key));
+
+        // 处理密钥为指定长度
+        var keyBytes = ProcessKey(key);
+        // 生成随机IV
+        var iv = GenerateRandomIv();
+
+        using var aes = CreateAesProvider(keyBytes, iv);
+        using var encryptor = aes.CreateEncryptor(aes.Key, aes.IV);
+        using var ms = new MemoryStream();
+        // 先写入IV，解密时需要用到
+        ms.Write(iv, 0, iv.Length);
+
+        using (var cs = new CryptoStream(ms, encryptor, CryptoStreamMode.Write))
+        using (var sw = new StreamWriter(cs))
+        {
+            sw.Write(plainText);
+        }
+
+        return Convert.ToBase64String(ms.ToArray());
+    }
+
+    /// <summary>
+    /// AES 解密
+    /// </summary>
+    /// <param name="cipherText">加密后的Base64字符串</param>
+    /// <param name="key">字符串密钥（与加密时相同）</param>
+    /// <returns>解密后的明文</returns>
+    public static string Decrypt(string cipherText, string key)
+    {
+        if (string.IsNullOrEmpty(cipherText))
+            throw new ArgumentNullException(nameof(cipherText));
+        if (string.IsNullOrEmpty(key))
+            throw new ArgumentNullException(nameof(key));
+
+        var cipherBytes = Convert.FromBase64String(cipherText);
+
+        // 从加密数据中提取IV
+        var iv = new byte[BlockSize / 8];
+        Array.Copy(cipherBytes, 0, iv, 0, iv.Length);
+
+        // 处理密钥为指定长度
+        var keyBytes = ProcessKey(key);
+
+        using var aes = CreateAesProvider(keyBytes, iv);
+        using var decryptor = aes.CreateDecryptor(aes.Key, aes.IV);
+        using var ms = new MemoryStream(cipherBytes, iv.Length, cipherBytes.Length - iv.Length);
+        using var cs = new CryptoStream(ms, decryptor, CryptoStreamMode.Read);
+        using var sr = new StreamReader(cs);
+        return sr.ReadToEnd();
+    }
+
+    /// <summary>
+    /// 处理密钥为指定长度（256位）
+    /// </summary>
+    private static byte[] ProcessKey(string key)
+    {
+        // 使用SHA256哈希处理密钥，确保得到32字节(256位)的密钥
+        return SHA256.HashData(Encoding.UTF8.GetBytes(key));
+    }
+
+    /// <summary>
+    /// 生成随机初始化向量
+    /// </summary>
+    private static byte[] GenerateRandomIv()
+    {
+        using var aes = Aes.Create();
+        aes.BlockSize = BlockSize;
+        aes.GenerateIV();
+        return aes.IV;
+    }
+
+    /// <summary>
+    /// 创建并配置AES加密服务提供器
+    /// </summary>
+    private static Aes CreateAesProvider(byte[] key, byte[] iv)
+    {
+        var aes = Aes.Create();
+        aes.KeySize = KeySize;
+        aes.BlockSize = BlockSize;
+        aes.Mode = AesCipherMode;
+        aes.Padding = AesPaddingMode;
+        aes.Key = key;
+        aes.IV = iv;
+        return aes;
+    }
+}

Helpers/SimApiAuth.cs

@@ -1,6 +1,4 @@
-#nullable enable
 using System;
-using System.Collections.Generic;
 using System.Text.Json;
 using Microsoft.Extensions.Caching.Distributed;
 using SimApi.Communications;
@@ -25,6 +23,18 @@ public class SimApiAuth(IDistributedCache cache)
         return token;
     }
 
+    /// <summary>
+    /// 更新登陆信息
+    /// </summary>
+    /// <param name="loginItem"></param>
+    /// <param name="token"></param>
+    /// <returns></returns>
+    public string Update(SimApiLoginItem loginItem, string token)
+    {
+        cache.SetString(token, JsonSerializer.Serialize(loginItem));
+        return token;
+    }
+
     /// <summary>
     /// 获取登陆信息
     /// </summary>
@@ -33,7 +43,7 @@ public class SimApiAuth(IDistributedCache cache)
     public SimApiLoginItem? GetLogin(string token)
     {
         var login = cache.GetString(token);
-        return login != null ? JsonSerializer.Deserialize<SimApiLoginItem>(login) : default;
+        return login != null ? JsonSerializer.Deserialize<SimApiLoginItem>(login) : null;
     }
 
     /// <summary>

Helpers/SimApiCache.cs

@@ -0,0 +1,32 @@
+using System.Text.Json;
+using Microsoft.Extensions.Caching.Distributed;
+
+namespace SimApi.Helpers;
+
+public class SimApiCache(IDistributedCache cache)
+{
+    private const string Prefix = "SimApi:Cache:";
+
+    public void Set(string key, object value, DistributedCacheEntryOptions? options = null)
+    {
+        if (options is not null)
+        {
+            cache.SetString(Prefix + key, SimApiUtil.Json(value), options);
+        }
+        else
+        {
+            cache.SetString(Prefix + key, SimApiUtil.Json(value));
+        }
+    }
+
+    public string? Get(string key)
+    {
+        return cache.GetString(Prefix + key);
+    }
+
+    public T? Get<T>(string key)
+    {
+        var data = cache.GetString(Prefix + key);
+        return data == null ? default : JsonSerializer.Deserialize<T>(data);
+    }
+}

Helpers/SimApiHttpClient.cs

@@ -0,0 +1,67 @@
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using System.Net.Http;
+using System.Net.Http.Json;
+using SimApi.Communications;
+
+namespace SimApi.Helpers;
+
+public class SimApiHttpClient(string? appId, string appKey)
+{
+    public string SignName { get; init; } = "sign";
+    public string TimestampName { get; init; } = "timestamp";
+    public string NonceName { get; init; } = "nonce";
+    public string? AppIdName { get; init; } = "appId";
+    public string[] SignFields { get; init; } = [];
+
+
+    public T? SignQuery<T>(string url, object body, Dictionary<string, string>? queries = null)
+    {
+        var queryUrl = SignFields.Aggregate(string.Empty,
+            (current, signField) => current + $"{signField}={queries?[signField]}&");
+        if (!string.IsNullOrEmpty(AppIdName))
+        {
+            queryUrl += $"{AppIdName}={appId}&";
+        }
+
+        queryUrl += $"{TimestampName}={(int)SimApiUtil.TimestampNow}&{NonceName}={Guid.NewGuid()}";
+        var signStr = $"{queryUrl}&{appKey}";
+        var path = $"{url}?{queryUrl}&{SignName}={SimApiUtil.Md5(signStr)}";
+
+        if (queries != null)
+        {
+            path = queries.Where(q => !SignFields.Contains(q.Key))
+                .Aggregate(path, (current, q) => current + $"&{q.Key}={q.Value}");
+        }
+
+        var http = new HttpClient();
+        var resp = http.PostAsJsonAsync(path, body).Result;
+        return resp.Content.ReadFromJsonAsync<T>().Result;
+    }
+
+    public T? AesQuery<T>(string url, object body)
+    {
+        if (!string.IsNullOrEmpty(AppIdName))
+        {
+            url += $"?{AppIdName}={appId}";
+        }
+
+        var req = new SimApiOneFieldRequest<string>
+        {
+            Data = SimApiAesUtil.Encrypt(SimApiUtil.Json(body), appKey)
+        };
+        var http = new HttpClient();
+        var resp = http.PostAsJsonAsync(url, req).Result;
+        return resp.Content.ReadFromJsonAsync<T>().Result;
+    }
+
+    public T? AesSignQuery<T>(string url, object body, Dictionary<string, string>? queries = null)
+    {
+        var req = new SimApiOneFieldRequest<string>
+        {
+            Data = SimApiAesUtil.Encrypt(SimApiUtil.Json(body), appKey)
+        };
+        return SignQuery<T>(url, req, queries);
+    }
+}

Helpers/SimApiJobWebAuth.cs

@@ -0,0 +1,33 @@
+using System;
+using System.Linq;
+using System.Text;
+using Hangfire.Dashboard;
+using Microsoft.AspNetCore.Http;
+
+namespace SimApi.Helpers;
+
+public class SimApiJobWebAuth(string user, string pass) : IDashboardAuthorizationFilter
+{
+    public bool Authorize(DashboardContext context)
+    {
+        var httpContext = context.GetHttpContext();
+        var authHeader = httpContext.Request.Headers.Authorization.FirstOrDefault();
+        if (authHeader != null && authHeader.StartsWith("Basic "))
+        {
+            var encodedUsernamePassword = authHeader.Split(' ', 2, StringSplitOptions.RemoveEmptyEntries)[1].Trim();
+            var decodedUsernamePassword = Encoding.UTF8.GetString(Convert.FromBase64String(encodedUsernamePassword));
+            var username = decodedUsernamePassword.Split(':', 2)[0];
+            var password = decodedUsernamePassword.Split(':', 2)[1];
+
+            if (username == user && password == pass)
+            {
+                return true;
+            }
+        }
+
+        httpContext.Response.StatusCode = 401;
+        httpContext.Response.Headers.WWWAuthenticate = "Basic realm=\"SimApiBasicAuth\"";
+        httpContext.Response.WriteAsync("").Wait();
+        return false;
+    }
+}

Helpers/SimApiResponseFilter.cs

@@ -0,0 +1,34 @@
+using System;
+using System.Linq;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.Filters;
+using SimApi.Attributes;
+using SimApi.Communications;
+
+namespace SimApi.Helpers;
+
+public class SimApiResponseFilter : IResultFilter
+{
+    public void OnResultExecuting(ResultExecutingContext context)
+    {
+        if (context.ActionDescriptor.EndpointMetadata.Any(meta => meta is OriginResponseAttribute))
+        {
+            return;
+        }
+
+        context.Result = context.Result switch
+        {
+            // 检查结果是否为 null
+            null => new OkObjectResult(new SimApiBaseResponse()),
+            ObjectResult { Value: SimApiBaseResponse simApiBaseResponse } =>
+                new OkObjectResult(simApiBaseResponse),
+            ObjectResult objectResult => new OkObjectResult(new SimApiBaseResponse<object>(objectResult.Value!)),
+            EmptyResult => new OkObjectResult(new SimApiBaseResponse()),
+            _ => context.Result
+        };
+    }
+
+    public void OnResultExecuted(ResultExecutedContext context)
+    {
+    }
+}

Helpers/SimApiUtil.cs

@@ -1,5 +1,7 @@
 using System;
+using System.IO;
 using System.Linq;
+using System.Reflection;
 using System.Security.Cryptography;
 using System.Text;
 using System.Text.Encodings.Web;
@@ -7,6 +9,7 @@ using System.Text.Json;
 using System.Text.Json.Serialization;
 using System.Text.RegularExpressions;
 using System.Text.Unicode;
+using System.Xml.Serialization;
 
 namespace SimApi.Helpers;
 
@@ -22,11 +25,59 @@ public static class SimApiUtil
     /// </summary>
     public static JsonSerializerOptions JsonOption => new()
     {
+        // ReferenceHandler = ReferenceHandler.Preserve,
         Encoder = JavaScriptEncoder.Create(UnicodeRanges.All),
         PropertyNamingPolicy = JsonNamingPolicy.CamelCase,
-        DefaultIgnoreCondition = JsonIgnoreCondition.WhenWritingNull
+        // DefaultIgnoreCondition = JsonIgnoreCondition.WhenWritingNull
     };
 
+    public static string SimApiVersion
+    {
+        get
+        {
+            // 这里使用当前类（属于 NuGet 包）的程序集
+            var assembly = typeof(SimApiUtil).Assembly;
+
+            // 优先获取 AssemblyInformationalVersion（通常对应 NuGet 包版本，可能包含预发布标签）
+            var informationalVersion =
+                assembly.GetCustomAttribute<AssemblyInformationalVersionAttribute>()?.InformationalVersion;
+            if (!string.IsNullOrEmpty(informationalVersion))
+            {
+                return informationalVersion;
+            }
+
+            // 若不存在，则获取 AssemblyVersion（编译时版本）
+            var version = assembly.GetName().Version?.ToString();
+            return version ?? "Unknown";
+        }
+    }
+
+    public static string AppVersion
+    {
+        get
+        {
+            // 获取外层应用的入口程序集（通常是启动项目的程序集）
+            var entryAssembly = Assembly.GetEntryAssembly();
+            if (entryAssembly == null)
+            {
+                // 特殊场景（如单元测试、某些宿主环境）下，入口程序集可能为 null，可尝试获取调用栈中的上层程序集
+                entryAssembly = Assembly.GetCallingAssembly(); // 或 Assembly.GetExecutingAssembly() 视场景调整
+            }
+
+            // 优先获取应用的 AssemblyInformationalVersion
+            var informationalVersion = entryAssembly.GetCustomAttribute<AssemblyInformationalVersionAttribute>()
+                ?.InformationalVersion;
+            if (!string.IsNullOrEmpty(informationalVersion))
+            {
+                return informationalVersion;
+            }
+
+            // 若不存在，则获取 AssemblyVersion
+            var version = entryAssembly.GetName().Version?.ToString();
+            return version ?? "Unknown";
+        }
+    }
+
     /// <summary>
     /// 当前秒级时间戳
     /// </summary>
@@ -62,12 +113,43 @@ public static class SimApiUtil
         return stringBuilder.ToString();
     }
 
+    /// <summary>
+    /// sha1加密字符串
+    /// </summary>
+    /// <param name="source">源字符串</param>
+    /// <param name="mode">加密结果"x2"结果为32位,"x3"结果为48位,"x4"结果为64位</param>
+    /// <returns></returns>
+    public static string Sha1(string source, string mode = "x2")
+    {
+        var hash = SHA1.HashData(Encoding.UTF8.GetBytes(source));
+        var sb = new StringBuilder(hash.Length * 2);
+        foreach (var b in hash)
+        {
+            sb.Append(b.ToString(mode));
+        }
+
+        return sb.ToString();
+    }
+
+    /// <summary>
+    /// 将XML字符串序列化为对象
+    /// </summary>
+    /// <param name="source"></param>
+    /// <typeparam name="T"></typeparam>
+    /// <returns></returns>
+    public static T XmlDeserialize<T>(string source)
+    {
+        var xmlConvertor = new XmlSerializer(typeof(T));
+        using var reader = new StringReader(source);
+        return (T)xmlConvertor.Deserialize(reader)!;
+    }
+
     /// <summary>
     /// 将对象序列化成JSON （控制台输出中文不会被编码）
     /// </summary>
     /// <param name="obj"></param>
     /// <returns></returns>
-    public static string Json(object obj)
+    public static string Json(object? obj)
     {
         return JsonSerializer.Serialize(obj, JsonOption);
     }

Middlewares/SimApiExceptionMiddleware.cs

@@ -1,5 +1,5 @@
 using System;
-using System.Linq;
+using System.IO;
 using System.Threading.Tasks;
 using Microsoft.AspNetCore.Http;
 using SimApi.Communications;
@@ -24,17 +24,19 @@ public class SimApiExceptionMiddleware(RequestDelegate next, ILogger<SimApiExcep
         try
         {
             await next(context);
-            switch (context.Response.StatusCode)
+            if (!context.Response.HasStarted)
             {
-                case 200:
-                    break;
-                case 404:
-                    throw new SimApiException(context.Response.StatusCode, "请求的接口不存在");
-                case 301:
-                case 302:
-                    break;
-                default:
-                    throw new SimApiException(context.Response.StatusCode);
+                switch (context.Response.StatusCode)
+                {
+                    case 200:
+                    case 301:
+                    case 302:
+                        break;
+                    case 404:
+                        throw new SimApiException(context.Response.StatusCode, "请求的接口不存在");
+                    default:
+                        throw new SimApiException(context.Response.StatusCode);
+                }
             }
         }
         catch (SimApiException ex)
@@ -42,7 +44,6 @@ public class SimApiExceptionMiddleware(RequestDelegate next, ILogger<SimApiExcep
             response = string.IsNullOrEmpty(ex.Message)
                 ? new SimApiBaseResponse(ex.Code)
                 : new SimApiBaseResponse(ex.Code, ex.Message);
-
             ErrorResponse(context, response);
         }
         catch (Exception ex)
@@ -61,9 +62,8 @@ public class SimApiExceptionMiddleware(RequestDelegate next, ILogger<SimApiExcep
     /// <param name="response"></param>
     private static void ErrorResponse(HttpContext context, SimApiBaseResponse response)
     {
-        if (context.Response.HasStarted) return;
         context.Response.StatusCode = 200;
         context.Response.Headers.Append("Content-Type", "application/json");
-        context.Response.WriteAsync(response.ToString());
+        context.Response.WriteAsync(response.ToString()).Wait();
     }
 }

ModelBinders/AesBodyModelBinder.cs

@@ -0,0 +1,106 @@
+using System;
+using System.IO;
+using System.Linq;
+using System.Text.Json;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc.ModelBinding;
+using SimApi.Communications;
+using SimApi.Helpers;
+
+namespace SimApi.ModelBinders;
+
+public class AesBodyModelBinder : IModelBinder
+{
+    public async Task BindModelAsync(ModelBindingContext bindingContext)
+    {
+        var request = bindingContext.HttpContext.Request;
+        request.EnableBuffering();
+        using var reader = new StreamReader(request.Body, leaveOpen: true);
+        var requestBody = await reader.ReadToEndAsync();
+        request.Body.Position = 0;
+
+        if (string.IsNullOrEmpty(requestBody))
+        {
+            bindingContext.ModelState.AddModelError("", "请求体不能为空");
+            bindingContext.Result = ModelBindingResult.Failed();
+            return;
+        }
+
+        SimApiOneFieldRequest<string>? aesRequest;
+        try
+        {
+            aesRequest = JsonSerializer.Deserialize<SimApiOneFieldRequest<string>>(requestBody, SimApiUtil.JsonOption);
+        }
+        catch (JsonException ex)
+        {
+            bindingContext.ModelState.AddModelError("", $"请求体格式错误：{ex.Message}");
+            bindingContext.Result = ModelBindingResult.Failed();
+            return;
+        }
+
+        if (aesRequest == null || string.IsNullOrEmpty(aesRequest.Data))
+        {
+            bindingContext.ModelState.AddModelError("", "请求体缺少密文Data字段");
+            bindingContext.Result = ModelBindingResult.Failed();
+            return;
+        }
+
+        // 3. 根据配置获取appId（参考上一节代码）
+        var keyProvider =
+            bindingContext.HttpContext.RequestServices.GetService(Type.GetType(bindingContext.BinderModelName!)!) as
+                AesBodyProviderBase;
+        string? appId = null;
+        if (!string.IsNullOrEmpty(keyProvider!.AppIdName))
+        {
+            appId = bindingContext.HttpContext.Request.Query[keyProvider.AppIdName]
+                .FirstOrDefault() ?? bindingContext.HttpContext.Request.Headers[keyProvider.AppIdName]
+                .FirstOrDefault();
+
+            if (string.IsNullOrEmpty(appId))
+            {
+                bindingContext.ModelState.AddModelError("",
+                    $"未找到{keyProvider.AppIdName}");
+                bindingContext.Result = ModelBindingResult.Failed();
+                return;
+            }
+        }
+
+        // 4. 通过接口获取密钥（解耦的核心：不再直接依赖数据库）
+        var key = keyProvider.GetKey(appId);
+        if (string.IsNullOrEmpty(key))
+        {
+            bindingContext.ModelState.AddModelError("", "获取密钥失败（应用不存在或密钥未配置）");
+            bindingContext.Result = ModelBindingResult.Failed();
+            return;
+        }
+
+        // 5. 解密和反序列化（保持原有逻辑）
+        try
+        {
+            var jsonStr = SimApiAesUtil.Decrypt(aesRequest.Data, key);
+            if (string.IsNullOrEmpty(jsonStr))
+            {
+                bindingContext.ModelState.AddModelError("", "解密失败");
+                bindingContext.Result = ModelBindingResult.Failed();
+                return;
+            }
+
+            var targetType = bindingContext.ModelType;
+            var deserializedModel = JsonSerializer.Deserialize(jsonStr, targetType, SimApiUtil.JsonOption);
+            if (deserializedModel == null)
+            {
+                bindingContext.ModelState.AddModelError("", "反序列化失败");
+                bindingContext.Result = ModelBindingResult.Failed();
+                return;
+            }
+
+            bindingContext.Result = ModelBindingResult.Success(deserializedModel);
+        }
+        catch (Exception ex)
+        {
+            bindingContext.ModelState.AddModelError("", $"处理异常：{ex.Message}");
+            bindingContext.Result = ModelBindingResult.Failed();
+        }
+    }
+}

ModelBinders/AesBodyProviderBase.cs

@@ -0,0 +1,19 @@
+using SimApi.Exceptions;
+
+namespace SimApi.ModelBinders;
+
+/// <summary>
+/// 密钥提供器接口（抽象密钥获取逻辑）
+/// </summary>
+public abstract class AesBodyProviderBase
+{
+    public virtual string? AppIdName { get; set; } = "appId";
+
+
+    /// <summary>
+    /// 根据appId获取对应的密钥
+    /// </summary>
+    /// <param name="appId">应用ID</param>
+    /// <returns>密钥（返回null表示获取失败）</returns>
+    public abstract string? GetKey(string? appId);
+}

ModelBinders/SimApiSignProviderBase.cs

@@ -0,0 +1,45 @@
+using SimApi.Exceptions;
+
+namespace SimApi.ModelBinders;
+
+public abstract class SimApiSignProviderBase
+{
+    /// <summary>
+    /// appId字段的名称
+    /// </summary>
+    public virtual string? AppIdName { get; set; } = "appId";
+
+    /// <summary>
+    /// 时间戳的字段名
+    /// </summary>
+    public virtual string TimestampName { get; set; } = "timestamp";
+
+    /// <summary>
+    /// 随机字符串的字段名
+    /// </summary>
+    public virtual string NonceName { get; set; } = "nonce";
+
+    /// <summary>
+    /// 签名的字段名
+    /// </summary>
+    public virtual string SignName { get; set; } = "sign";
+
+    /// <summary>
+    /// 请求过期时间, 如果为0, 不校验timestamp
+    /// </summary>
+    public virtual int QueryExpires { get; set; } = 5;
+
+    /// <summary>
+    /// 如果开启,必须配置redis, 每次请求将会缓存nonce
+    /// </summary>
+    public virtual bool DuplicateRequestProtection { get; set; } = true;
+
+    public virtual string[] SignFields { get; set; } = [];
+
+    /// <summary>
+    /// 根据appId获取对应的密钥
+    /// </summary>
+    /// <param name="appId">应用ID</param>
+    /// <returns>密钥（返回null表示获取失败）</returns>
+    public abstract string? GetKey(string? appId);
+}

SimApi.csproj

@@ -3,32 +3,28 @@
     <PropertyGroup>
         <OutputType>Library</OutputType>
         <PackOnBuild>true</PackOnBuild>
-        <Version>0.2.3</Version>
+        <IsPackable>true</IsPackable>
+        <Version>0.0.0</Version>
         <Authors>xRain@SimcuTeam</Authors>
         <Description>AspNetCore一个方便的API文档,捕获异常,统一输入输出的API类库</Description>
         <PackageId>Simcu.SimApi</PackageId>
-        <IsPackable>true</IsPackable>
-        <SymbolPackageFormat>snupkg</SymbolPackageFormat>
-        <IncludeSymbols>true</IncludeSymbols>
-        <ReleaseVersion>5.0.0</ReleaseVersion>
-        <SynchReleaseVersion>false</SynchReleaseVersion>
-        <GeneratePackageOnBuild>true</GeneratePackageOnBuild>
-        <PackageVersion>5.0.2</PackageVersion>
-        <TargetFramework>net8.0</TargetFramework>
         <Nullable>enable</Nullable>
+        <TargetFrameworks>net8.0;net9.0</TargetFrameworks>
+        <GeneratePackageOnBuild>true</GeneratePackageOnBuild>
     </PropertyGroup>
-
     <ItemGroup>
-        <Folder Include="Helpers\"/>
         <Folder Include="Communications\"/>
-        <Folder Include="Middlewares\"/>
         <Folder Include="Exceptions\"/>
     </ItemGroup>
     <ItemGroup>
-        <PackageReference Include="Minio" Version="6.0.3" />
-        <PackageReference Include="MQTTnet" Version="4.3.6.1152" />
-        <PackageReference Include="Swashbuckle.AspNetCore.Annotations" Version="6.7.1" />
-        <PackageReference Include="Swashbuckle.AspNetCore.SwaggerUI" Version="6.7.1" />
+        <PackageReference Include="Hangfire.AspNetCore" Version="1.8.22" />
+        <PackageReference Include="Hangfire.Console" Version="1.4.3"/>
+        <PackageReference Include="Hangfire.Redis.StackExchange" Version="1.12.0"/>
+        <PackageReference Include="Microsoft.Extensions.Caching.StackExchangeRedis" Version="9.0.10" />
+        <PackageReference Include="Minio" Version="7.0.0" />
+        <PackageReference Include="MQTTnet" Version="5.0.1.1416"/>
+        <PackageReference Include="Swashbuckle.AspNetCore.Annotations" Version="9.0.6" />
+        <PackageReference Include="Swashbuckle.AspNetCore.SwaggerUI" Version="9.0.6" />
     </ItemGroup>
     <ProjectExtensions>
         <MonoDevelop>

SimApiExtensions.cs

@@ -1,15 +1,25 @@
 using System;
+using System.Diagnostics;
+using System.Linq;
+using System.Reflection;
+using System.Text.Json;
+using Hangfire;
+using Hangfire.Console;
+using Hangfire.Redis.StackExchange;
 using SimApi.Helpers;
 using Microsoft.AspNetCore.Builder;
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.OpenApi.Models;
 using SimApi.Middlewares;
 using Microsoft.AspNetCore.HttpOverrides;
+using Microsoft.AspNetCore.Mvc;
 using Microsoft.Extensions.Hosting;
 using Microsoft.Extensions.Logging;
+using SimApi.Attributes;
 using SimApi.CoceSdk;
 using SimApi.Configurations;
 using SimApi.Logger;
+using SimApi.SwaggerFilters;
 
 namespace SimApi;
 
@@ -24,6 +34,12 @@ public static class SimApiExtensions
     {
         var simApiOptions = new SimApiOptions();
         options?.Invoke(simApiOptions);
+        if (simApiOptions.RedisConfiguration != null)
+        {
+            builder.AddStackExchangeRedisCache(x => x.Configuration = simApiOptions.RedisConfiguration);
+            builder.AddSingleton<SimApiCache>();
+        }
+
         if (simApiOptions.EnableLogger)
         {
             builder.AddLogging(logger =>
@@ -44,6 +60,30 @@ public static class SimApiExtensions
             builder.AddSingleton<CoceApp>();
         }
 
+        if (simApiOptions.EnableJob)
+        {
+            builder.AddHangfire(x =>
+            {
+                var redisOption = new RedisStorageOptions();
+                if (simApiOptions.SimApiJobOptions.Database.HasValue)
+                {
+                    redisOption.Db = simApiOptions.SimApiJobOptions.Database.Value;
+                }
+
+                x.UseRedisStorage(simApiOptions.SimApiJobOptions.RedisConfiguration ??
+                                  simApiOptions.RedisConfiguration, redisOption);
+                x.UseConsole();
+            });
+            foreach (var server in simApiOptions.SimApiJobOptions.Servers)
+            {
+                builder.AddHangfireServer(hfs =>
+                {
+                    hfs.Queues = server.Queues;
+                    hfs.WorkerCount = server.WorkerNum;
+                });
+            }
+        }
+
         if (simApiOptions.EnableCors)
         {
             builder.AddCors(cors => cors.AddPolicy("any",
@@ -53,6 +93,19 @@ public static class SimApiExtensions
         if (simApiOptions.EnableSynapse)
         {
             builder.AddSingleton<Synapse>();
+            //自动依赖注入
+            var stackTrace = new StackTrace();
+            var callingMethod = stackTrace.GetFrame(stackTrace.FrameCount - 1)?.GetMethod();
+            var assembly = callingMethod?.DeclaringType?.Assembly;
+            var types = assembly?.GetTypes() ?? [];
+            foreach (var type in types)
+            {
+                var methodsWithSynapse = type.GetMethods()
+                    .Where(m => m.GetCustomAttribute<SynapseRpcAttribute>() != null ||
+                                m.GetCustomAttribute<SynapseEventAttribute>() != null);
+                if (!methodsWithSynapse.Any()) continue;
+                builder.AddScoped(type);
+            }
         }
 
         // 使用SimApiDoc
@@ -70,30 +123,46 @@ public static class SimApiExtensions
                     });
                 }
 
+                x.CustomSchemaIds(type => type.FullName?.Replace("+", "."));
+                x.OperationFilter<SimApiResponseOperationFilter>();
+                x.OperationFilter<SimApiSignOperationFilter>();
+                x.OperationFilter<AesBodyOperationFilter>();
+                x.SchemaFilter<GlobalDynamicObjectSchemaFilter>();
+                if (simApiOptions.EnableSimApiAuth)
+                {
+                    x.OperationFilter<SimApiAuthOperationFilter>();
+                }
+
+                x.DocInclusionPredicate((docName, apiDesc) =>
+                {
+                    // 获取接口标记的 GroupName（未标记则为 null）
+                    var actionGroupName = apiDesc.ActionDescriptor.EndpointMetadata
+                        .OfType<ApiExplorerSettingsAttribute>()
+                        .FirstOrDefault()?.GroupName;
+
+                    // 情况1：接口未标记任何 GroupName（actionGroupName 为 null）
+                    if (actionGroupName == null)
+                    {
+                        return docName == "api"; // 未分组接口只属于默认分组v1
+                    }
+
+                    return docName == actionGroupName;
+                });
+
                 x.EnableAnnotations();
                 var haveOauth = false;
-                var haveSimApiAuth = false;
                 var oauthFlows = new OpenApiOAuthFlows();
                 foreach (var auth in docOptions.ApiAuth.Type)
                 {
                     switch (auth)
                     {
                         case "SimApiAuth":
-                            x.AddSecurityRequirement(new OpenApiSecurityRequirement
-                            {
+                            x.AddSecurityDefinition("HeaderToken",
+                                new OpenApiSecurityScheme
                                 {
-                                    new OpenApiSecurityScheme
-                                    {
-                                        Reference = new OpenApiReference
-                                        {
-                                            Type = ReferenceType.SecurityScheme,
-                                            Id = "HeaderToken"
-                                        }
-                                    },
-                                    new[] { "readAccess", "writeAccess" }
-                                }
-                            });
-                            haveSimApiAuth = true;
+                                    Name = "Token",
+                                    In = ParameterLocation.Header
+                                });
                             break;
                         case "ClientCredentials":
                             oauthFlows.ClientCredentials = new OpenApiOAuthFlow
@@ -142,30 +211,6 @@ public static class SimApiExtensions
                         Description = docOptions.ApiAuth.Description,
                         In = ParameterLocation.Header
                     });
-                    x.AddSecurityRequirement(new OpenApiSecurityRequirement
-                    {
-                        {
-                            new OpenApiSecurityScheme
-                            {
-                                Reference = new OpenApiReference
-                                {
-                                    Type = ReferenceType.SecurityScheme,
-                                    Id = "oauth2"
-                                }
-                            },
-                            ["SimApiAuth"]
-                        }
-                    });
-                }
-
-                if (haveSimApiAuth)
-                {
-                    x.AddSecurityDefinition("HeaderToken",
-                        new OpenApiSecurityScheme
-                        {
-                            Name = "Token",
-                            In = ParameterLocation.Header
-                        });
                 }
             });
         }
@@ -192,6 +237,15 @@ public static class SimApiExtensions
             builder.AddSingleton<SimApiStorage>();
         }
 
+        if (simApiOptions.EnableSimApiResponseFilter)
+        {
+            builder.AddControllers(opt => opt.Filters.Add<SimApiResponseFilter>())
+                .AddJsonOptions(opt =>
+                {
+                    opt.JsonSerializerOptions.PropertyNamingPolicy = JsonNamingPolicy.CamelCase;
+                });
+        }
+
         builder.AddSingleton(simApiOptions);
         return builder;
     }
@@ -203,6 +257,13 @@ public static class SimApiExtensions
         var logger = builder.Services.GetRequiredService<ILogger<SimApiOptions>>();
 
         logger.LogInformation("当前时区: {LocalId}", TimeZoneInfo.Local.Id);
+        logger.LogInformation("主应用版本: {AppVersion}\nSimApi版本: {SimApiVersion}", SimApiUtil.AppVersion,
+            SimApiUtil.SimApiVersion);
+
+        if (options.RedisConfiguration != null)
+        {
+            logger.LogInformation("开始配置 RedisCache ...");
+        }
 
         //请求一下检测存储错误
         if (options.EnableSimApiStorage)
@@ -218,17 +279,17 @@ public static class SimApiExtensions
                 options.CoceSdkOptions.AppId);
         }
 
-        if (options.EnableLowerUrl)
-        {
-            logger.LogInformation("开始配置使用URL小写...");
-        }
-
         if (options.EnableSynapse)
         {
             var synapse = builder.Services.GetRequiredService<Synapse>();
             synapse.Init();
         }
 
+        if (options.EnableJob)
+        {
+            logger.LogInformation("开始配置 SimApiJob ...");
+        }
+
         return builder;
     }
 
@@ -240,10 +301,8 @@ public static class SimApiExtensions
     public static WebApplication UseSimApi(this WebApplication builder)
     {
         var options = builder.Services.GetRequiredService<SimApiOptions>();
-
         var logger = builder.Services.GetRequiredService<ILogger<SimApiOptions>>();
-
-        logger.LogInformation("当前时区: {LocalId}", TimeZoneInfo.Local.Id);
+        UseSimApi((IHost)builder);
         if (options.EnableForwardHeaders)
         {
             logger.LogInformation("开始配置ForwardedHeaders...");
@@ -256,46 +315,87 @@ public static class SimApiExtensions
             builder.UseCors("any");
         }
 
+        if (options.EnableSimApiResponseFilter)
+        {
+            logger.LogInformation("开始配置SimApiResponseFilter...");
+            builder.MapControllers();
+        }
+
         if (options.EnableSimApiAuth)
         {
             logger.LogInformation("开始配置SimApiAuth...");
             builder.UseMiddleware<SimApiAuthMiddleware>();
             builder.MapControllerRoute(name: "GetUserInfo", pattern: "/user/info",
-                defaults: new { controller = "SimApiCommon", action = "UserInfo" });
+                defaults: new
+                {
+                    controller = "SimApiAuth",
+                    action = "UserInfo"
+                });
             builder.MapControllerRoute(name: "CheckLogin", pattern: "/auth/check",
-                defaults: new { controller = "SimApiCommon", action = "CheckLogin" });
+                defaults: new
+                {
+                    controller = "SimApiAuth",
+                    action = "CheckLogin"
+                });
             builder.MapControllerRoute(name: "Logout", pattern: "/auth/logout",
-                defaults: new { controller = "SimApiCommon", action = "Logout" });
+                defaults: new
+                {
+                    controller = "SimApiAuth",
+                    action = "Logout"
+                });
             if (options.EnableCoceSdk)
             {
                 logger.LogInformation("开始配置CoceAppSdk...\nApi入口: {ApiUrl}\nAuth入口:{AuthUrl}n\nAppId: {AppId}",
                     options.CoceSdkOptions.ApiEndpoint, options.CoceSdkOptions.AuthEndpoint,
                     options.CoceSdkOptions.AppId);
                 builder.MapControllerRoute(name: "LoginUseCoce", pattern: "/auth/login",
-                    defaults: new { controller = "SimApiCoce", action = "Login" });
+                    defaults: new
+                    {
+                        controller = "Coce",
+                        action = "Login"
+                    });
                 builder.MapControllerRoute(name: "LoginUseCoce", pattern: "/user/groups",
-                    defaults: new { controller = "SimApiCoce", action = "ListGroups" });
+                    defaults: new
+                    {
+                        controller = "Coce",
+                        action = "ListGroups"
+                    });
                 builder.MapControllerRoute(name: "LoginUseCoce", pattern: "/auth/config",
-                    defaults: new { controller = "SimApiCoce", action = "GetConfig" });
+                    defaults: new
+                    {
+                        controller = "Coce",
+                        action = "GetConfig"
+                    });
             }
         }
 
+        if (options.EnableVersionUrl)
+        {
+            builder.MapControllerRoute(name: "Versions", pattern: "/versions",
+                defaults: new
+                {
+                    controller = "SimApiCommon",
+                    action = "Versions"
+                });
+        }
+
         if (options.EnableSimApiDoc)
         {
             logger.LogInformation("开始配置SimApiDoc...");
             var docOptions = options.SimApiDocOptions;
-            builder.UseSwagger(x => x.RouteTemplate = "/swagger/{documentName}.json").UseSwaggerUI(x =>
-            {
-                x.DocumentTitle = docOptions.DocumentTitle;
-                foreach (var group in docOptions.ApiGroups)
+            builder.UseSwagger(x => x.RouteTemplate = "/swagger/{documentName}.json")
+                .UseSwaggerUI(x =>
                 {
-                    x.SwaggerEndpoint($"/swagger/{group.Id}.json", name: group.Name);
-                }
+                    x.DocumentTitle = docOptions.DocumentTitle;
+                    foreach (var group in docOptions.ApiGroups)
+                    {
+                        x.SwaggerEndpoint($"/swagger/{group.Id}.json", name: group.Name);
+                    }
 
-                x.EnableValidator();
-                x.SupportedSubmitMethods(docOptions.SupportedMethod);
-                x.DisplayRequestDuration();
-            });
+                    x.EnableValidator();
+                    x.SupportedSubmitMethods(docOptions.SupportedMethod);
+                    x.DisplayRequestDuration();
+                });
         }
 
         if (options.EnableSimApiException)
@@ -304,22 +404,22 @@ public static class SimApiExtensions
             builder.UseMiddleware<SimApiExceptionMiddleware>();
         }
 
-        //请求一下检测存储错误
-        if (options.EnableSimApiStorage)
-        {
-            logger.LogInformation("开始配置SimApiStorage...");
-            builder.Services.GetService<SimApiStorage>();
-        }
-
         if (options.EnableLowerUrl)
         {
             logger.LogInformation("开始配置使用URL小写...");
         }
 
-        if (options.EnableSynapse)
+        if (options is { EnableJob: true, SimApiJobOptions.DashboardUrl: not null })
         {
-            var synapse = builder.Services.GetRequiredService<Synapse>();
-            synapse.Init();
+            logger.LogInformation("开始配置 SimApiJob Web控制台...");
+            builder.UseHangfireDashboard(options.SimApiJobOptions.DashboardUrl, new DashboardOptions
+            {
+                Authorization =
+                [
+                    new SimApiJobWebAuth(options.SimApiJobOptions.DashboardAuthUser,
+                        options.SimApiJobOptions.DashboardAuthPass)
+                ]
+            });
         }
 
         return builder;

SwaggerFilters/AesBodyOperationFilter.cs

@@ -0,0 +1,52 @@
+using System.Collections.Generic;
+using System.Linq;
+using SimApi.Attributes;
+
+namespace SimApi.SwaggerFilters;
+
+using Microsoft.OpenApi.Models;
+using Swashbuckle.AspNetCore.SwaggerGen;
+using System.Reflection;
+
+/// <summary>
+/// 自定义 Swagger 过滤器：将标注 [AesBody] 的参数显示在 Request Body 中
+/// </summary>
+public class AesBodyOperationFilter : IOperationFilter
+{
+    public void Apply(OpenApiOperation operation, OperationFilterContext context)
+    {
+        foreach (var parameter in context.ApiDescription.ParameterDescriptions)
+        {
+            var hasAesBodyAttr = parameter.ParameterInfo()
+                .GetCustomAttribute<AesBodyAttribute>() != null;
+            if (!hasAesBodyAttr) continue;
+            // 1. 移除默认的 Query 参数描述（如果存在）
+            var queryParam = operation.Parameters
+                .FirstOrDefault(p => p.Name == parameter.Name);
+            if (queryParam != null)
+            {
+                operation.Parameters.Remove(queryParam);
+            }
+
+            // 2. 添加 Body 参数描述
+            // 获取参数类型的 Schema（Swagger 模型定义）
+            var schema = context.SchemaGenerator.GenerateSchema(
+                parameter.Type,
+                context.SchemaRepository);
+
+            // 将参数添加到 Request Body
+            operation.RequestBody = new OpenApiRequestBody
+            {
+                Content = new Dictionary<string, OpenApiMediaType>
+                {
+                    {
+                        "application/json", // 假设使用 JSON 格式
+                        new OpenApiMediaType { Schema = schema }
+                    }
+                },
+                Description = "内容为加密前内容,需要转换为JSON后使用AES加密后提交,提交格式为 {\"data\":\"AES密文\"}",
+                Required = true // 标记为必填
+            };
+        }
+    }
+}

SwaggerFilters/GlobalDynamicObjectSchemaFilter.cs

@@ -0,0 +1,62 @@
+using System;
+using Microsoft.OpenApi.Models;
+using Swashbuckle.AspNetCore.SwaggerGen;
+using System.Collections;
+using System.Collections.Generic;
+using System.Reflection;
+using Microsoft.OpenApi.Any;
+
+namespace SimApi.SwaggerFilters;
+
+public class GlobalDynamicObjectSchemaFilter : ISchemaFilter
+{
+    public void Apply(OpenApiSchema schema, SchemaFilterContext context)
+    {
+        if (!IsDynamicObjectType(context.Type)) return;
+        schema.AdditionalPropertiesAllowed = true;
+        schema.AdditionalProperties = new OpenApiSchema
+        {
+            Type = "object", // 表示 value 可以是任意类型（兼容所有类型）
+            Nullable = true
+        };
+
+        // 2. 覆盖默认示例，使用包含多种类型的示例
+        schema.Example = CreateMultiTypeExample();
+    }
+
+    // 判断是否为需要处理的“动态对象”类型
+    private bool IsDynamicObjectType(Type? type)
+    {
+        if (type == null) return false;
+        if (typeof(IDictionary).IsAssignableFrom(type) ||
+            (type.IsGenericType && type.GetGenericTypeDefinition() == typeof(Dictionary<,>)))
+        {
+            return true;
+        }
+        if (type == typeof(object))
+        {
+            return true;
+        }
+        return type.Name.Contains("AnonymousType") && type.Namespace == null;
+    }
+
+    // 创建包含多种类型的示例（覆盖默认的 string 示例）
+    private OpenApiObject CreateMultiTypeExample()
+    {
+        return new OpenApiObject
+        {
+            ["stringProp"] = new OpenApiString("example string"), // 字符串
+            ["numberProp"] = new OpenApiInteger(123), // 数字
+            ["boolProp"] = new OpenApiBoolean(true), // 布尔值
+            ["objectProp"] = new OpenApiObject // 嵌套对象
+            {
+                ["nestedKey"] = new OpenApiString("nested value")
+            },
+            ["arrayProp"] = new OpenApiArray // 数组
+            {
+                new OpenApiInteger(1),
+                new OpenApiString("two")
+            }
+        };
+    }
+}

SwaggerFilters/SimApiAuthOperationFilter.cs

@@ -0,0 +1,45 @@
+using System.Collections.Generic;
+using System.Linq;
+using System.Reflection;
+using Microsoft.OpenApi.Models;
+using Swashbuckle.AspNetCore.SwaggerGen;
+using SimApi.Attributes;
+
+namespace SimApi.SwaggerFilters
+{
+    public class SimApiAuthOperationFilter : IOperationFilter
+    {
+        public void Apply(OpenApiOperation operation, OperationFilterContext context)
+        {
+            // 检查接口或控制器是否标记了 [SimApiAuth] 特性
+            var requiresAuth =
+                // 方法上有 [SimApiAuth]
+                context.MethodInfo.GetCustomAttributes<SimApiAuthAttribute>(true).Any()
+                ||
+                // 控制器上有 [SimApiAuth]（继承到所有方法）
+                context.MethodInfo.DeclaringType?.GetCustomAttributes<SimApiAuthAttribute>(true).Any() == true;
+            if (requiresAuth)
+            {
+                // 添加授权要求：关联步骤 2 中定义的 "SimApiAuth" 安全方案
+                operation.Security = new List<OpenApiSecurityRequirement>
+                {
+                    new OpenApiSecurityRequirement
+                    {
+                        {
+                            new OpenApiSecurityScheme
+                            {
+                                Reference = new OpenApiReference
+                                {
+                                    Type = ReferenceType.SecurityScheme,
+                                    Id = "SimApiAuth" // 必须与 AddSecurityDefinition 的第一个参数一致
+                                }
+                            },
+                            [] // 无需指定作用域（scope）时留空
+                        }
+                    }
+                };
+            }
+            // 未标记 [SimApiAuth] 的接口：不添加安全要求，Swagger 不显示锁图标
+        }
+    }
+}

SwaggerFilters/SimApiResponseOperationFilter.cs

@@ -0,0 +1,118 @@
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using Microsoft.OpenApi.Models;
+using Swashbuckle.AspNetCore.SwaggerGen;
+using System.Reflection;
+using System.Threading.Tasks;
+using Microsoft.AspNetCore.Mvc;
+using SimApi.Attributes;
+using SimApi.Communications;
+
+namespace SimApi.SwaggerFilters;
+
+public class SimApiResponseOperationFilter : IOperationFilter
+{
+    public void Apply(OpenApiOperation operation, OperationFilterContext context)
+    {
+        // 1. 跳过标记了 [OriginResponseAttribute] 的接口（不包装）
+        if (context.MethodInfo.DeclaringType?.GetCustomAttributes<OriginResponseAttribute>(true).Any() == true
+            || context.MethodInfo.GetCustomAttributes<OriginResponseAttribute>(true).Any())
+        {
+            return;
+        }
+
+        // 2. 获取控制器方法声明的“原始返回类型”（如 Task<UserDto> → UserDto）
+        var returnType = GetUnwrappedReturnType(context.MethodInfo.ReturnType, context);
+        if (IsAlreadyWrappedType(returnType))
+        {
+            return; // 保留原始返回类型的文档描述
+        }
+
+        // 3. 定义包装后的目标类型（泛型/非泛型）
+        Type wrappedType;
+        if (returnType == typeof(void) || returnType == typeof(EmptyResult))
+        {
+            // 无数据：用非泛型 SimApiBaseResponse
+            wrappedType = typeof(SimApiBaseResponse);
+        }
+        else
+        {
+            // 有数据：用泛型 SimApiBaseResponse<T>（T 为原始返回类型）
+            wrappedType = typeof(SimApiBaseResponse<>).MakeGenericType(returnType);
+        }
+
+        // 4. 让 Swagger 生成包装类型的 Schema
+        var schema = context.SchemaGenerator.GenerateSchema(wrappedType, context.SchemaRepository);
+
+        // 5. 替换 Swagger 文档中的响应类型（只保留 200 OK 的响应，匹配过滤器逻辑）
+        operation.Responses.Clear(); // 清除默认响应（如 200 返回原始类型）
+        operation.Responses.Add("200", new OpenApiResponse
+        {
+            Description = "请求成功",
+            Content = new Dictionary<string, OpenApiMediaType>
+            {
+                {
+                    "application/json", // 只保留 JSON 格式（配合之前的全局配置）
+                    new OpenApiMediaType
+                    {
+                        Schema = schema
+                    }
+                }
+            }
+        });
+    }
+
+    private static Type GetUnwrappedReturnType(Type returnType, OperationFilterContext context)
+    {
+        // 处理 Task<T>（异步方法）
+        if (returnType.IsGenericType && returnType.GetGenericTypeDefinition() == typeof(Task<>))
+        {
+            returnType = returnType.GetGenericArguments()[0];
+        }
+
+        // 处理 IActionResult/ObjectResult（如 return Ok(userDto)）
+        if (!typeof(IActionResult).IsAssignableFrom(returnType)) return returnType;
+        // 从方法返回语句中提取原始类型（需结合特性，或默认用 object）
+        // 更精准的方式：让控制器方法用 [ProducesResponseType(typeof(UserDto), 200)] 声明原始类型
+        var producesAttr = context.MethodInfo.GetCustomAttributes<ProducesResponseTypeAttribute>()
+            .FirstOrDefault(a => a.StatusCode == 200);
+        if (producesAttr?.Type != null && producesAttr.Type != typeof(void))
+        {
+            return producesAttr.Type;
+        }
+
+        return typeof(object); // 无法识别时默认用 object
+    }
+
+    // 辅助方法：判断类型是否已经是 SimApiBaseResponse 及其泛型
+    private static bool IsAlreadyWrappedType(Type type)
+    {
+        // 情况1：类型本身是 SimApiBaseResponse 或其泛型
+        if (type == typeof(SimApiBaseResponse) ||
+            (type.IsGenericType && type.GetGenericTypeDefinition() == typeof(SimApiBaseResponse<>)))
+        {
+            return true;
+        }
+
+        // 情况2：类型是 SimApiBaseResponse 的子类（非泛型）
+        if (type.IsSubclassOf(typeof(SimApiBaseResponse)))
+        {
+            return true;
+        }
+
+        // 情况3：类型是 SimApiBaseResponse<T> 的子类（泛型）
+        // 检查是否继承自泛型父类 SimApiBaseResponse<>（任意 T）
+        if (type.BaseType is { IsGenericType: true })
+        {
+            var genericBaseType = type.BaseType.GetGenericTypeDefinition();
+            if (genericBaseType == typeof(SimApiBaseResponse<>))
+            {
+                return true;
+            }
+        }
+
+        // 其他情况：不是包装类型或其子类
+        return false;
+    }
+}

SwaggerFilters/SimApiSignOperationFilter.cs

@@ -0,0 +1,97 @@
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using System.Reflection;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.OpenApi.Models;
+using SimApi.Attributes;
+using SimApi.ModelBinders;
+using Swashbuckle.AspNetCore.SwaggerGen;
+
+namespace SimApi.SwaggerFilters;
+
+public class SimApiSignOperationFilter(IServiceProvider serviceProvider) : IOperationFilter
+{
+    public void Apply(OpenApiOperation operation, OperationFilterContext context)
+    {
+        // 1. 检查当前方法或类是否标注了 SimApiSignAttribute 及其子类
+        var signAttribute = context.MethodInfo.GetCustomAttribute<SimApiSignAttribute>(inherit: true)
+                            ?? context.MethodInfo.DeclaringType?.GetCustomAttribute<SimApiSignAttribute>(inherit: true);
+
+        if (signAttribute == null)
+        {
+            return;
+        }
+
+        var keyProviderType = signAttribute.KeyProvider;
+        if (!typeof(SimApiSignProviderBase).IsAssignableFrom(keyProviderType))
+        {
+            throw new InvalidOperationException($"KeyProvider 必须继承自 {nameof(SimApiSignProviderBase)}");
+        }
+
+        SimApiSignProviderBase? keyProvider;
+        try
+        {
+            keyProvider =
+                serviceProvider.CreateScope().ServiceProvider.GetService(keyProviderType) as SimApiSignProviderBase;
+        }
+        catch (Exception ex)
+        {
+            throw new InvalidOperationException($"无法从 DI 容器获取 {keyProviderType.Name} 实例：{ex.Message}");
+        }
+
+        if (keyProvider == null)
+        {
+            throw new InvalidOperationException($"{keyProviderType.Name} 未在 DI 容器中注册");
+        }
+
+        var signStr = keyProvider.SignFields.Aggregate(string.Empty, (current, field) => current + $"{field}=xxx&");
+        if (!string.IsNullOrEmpty(keyProvider.AppIdName))
+        {
+            signStr += $"{keyProvider.AppIdName}=xxx&";
+        }
+
+        signStr += $"{keyProvider.TimestampName}=xxx&{keyProvider.NonceName}=xxx&签名密钥";
+
+        var signParameters = new List<(string Name, string Description, bool Required)>
+        {
+            (keyProvider.TimestampName, "时间戳（秒级）", true),
+            (keyProvider.NonceName, "随机字符串", true),
+            (keyProvider.SignName, $"MD5签名结果,签名MD5字符串: {signStr}", true)
+        };
+        if (keyProvider.AppIdName != null)
+        {
+            signParameters.Add((keyProvider.AppIdName, "应用标识", true));
+        }
+
+        signParameters.AddRange(keyProvider.SignFields.Where(x => x != keyProvider.AppIdName)
+            .Select(f => (f, string.Empty, true)));
+
+        foreach (var (name, description, required) in signParameters)
+        {
+            if (operation.Parameters?.Any(p => p.Name == name) == true)
+            {
+                var tmp = operation.Parameters?.FirstOrDefault(p => p.Name == name);
+                if (tmp != null)
+                {
+                    tmp.Required = required;
+                    tmp.Description = description;
+                }
+                continue;
+            }
+
+            operation.Parameters ??= new List<OpenApiParameter>();
+            operation.Parameters.Add(new OpenApiParameter
+            {
+                Name = name,
+                In = ParameterLocation.Query, // 指定为 Query 参数
+                Description = description,
+                Required = required,
+                Schema = new OpenApiSchema
+                {
+                    Type = "string" // 签名相关参数通常为字符串类型
+                }
+            });
+        }
+    }
+}

Synapse/EventServer.cs

@@ -19,39 +19,42 @@ public partial class Synapse
     {
         Client!.ApplicationMessageReceivedAsync += async e =>
         {
-            if (!e.ApplicationMessage.Topic.StartsWith(EventServerTopicPrefix)) return;
-            var reqBody = e.ApplicationMessage.ConvertPayloadToString();
-            var eventName = e.ApplicationMessage.Topic.Replace(EventServerTopicPrefix, string.Empty);
-            logger.LogDebug("Synapse Event Receive: {EventName}\n{Body}", eventName, reqBody);
-            var methods = EventRegistry
-                .Where(x => Regex.IsMatch(eventName,
-                    "^" + Regex.Escape(x.Key!).Replace("\\+", "[^/]+").Replace("\\#", ".*") + "$"))
-                .ToArray();
-            var tasks = methods.Select(method => Task.Run(() =>
-                {
-                    var callClass = sp.CreateScope().ServiceProvider.GetRequiredService(method.Class!);
-                    var mt = callClass.GetType().GetMethod(method.Method!);
-                    try
+            await Task.Run(async () =>
+            {
+                if (!e.ApplicationMessage.Topic.StartsWith(EventServerTopicPrefix)) return;
+                var reqBody = e.ApplicationMessage.ConvertPayloadToString();
+                var eventName = e.ApplicationMessage.Topic.Replace(EventServerTopicPrefix, string.Empty);
+                logger.LogDebug("Synapse Event Receive: {EventName}\n{Body}", eventName, reqBody);
+                var methods = EventRegistry
+                    .Where(x => Regex.IsMatch(eventName,
+                        "^" + Regex.Escape(x.Key!).Replace("\\+", "[^/]+").Replace("\\#", ".*") + "$"))
+                    .ToArray();
+                var tasks = methods.Select(method => Task.Run(() =>
                     {
-                        if (mt!.GetParameters().Length == 2)
+                        var callClass = sp.CreateScope().ServiceProvider.GetRequiredService(method.Class!);
+                        var mt = callClass.GetType().GetMethod(method.Method!);
+                        try
                         {
-                            var pt = mt.GetParameters()[1].ParameterType;
-                            mt.Invoke(callClass, pt == typeof(string)
-                                ? new object?[] { eventName, reqBody }
-                                : new object?[] { eventName, JsonSerializer.Deserialize(reqBody, pt, SimApiUtil.JsonOption) });
+                            if (mt!.GetParameters().Length == 2)
+                            {
+                                var pt = mt.GetParameters()[1].ParameterType;
+                                mt.Invoke(callClass, pt == typeof(string)
+                                    ? [eventName, reqBody]
+                                    : [eventName, JsonSerializer.Deserialize(reqBody, pt, SimApiUtil.JsonOption)]);
+                            }
+                            else
+                            {
+                                mt.Invoke(callClass, new object[] { eventName });
+                            }
                         }
-                        else
+                        catch (Exception ex)
                         {
-                            mt.Invoke(callClass, new object[] { eventName });
+                            logger.LogError("Synapse Event Processor Error: {Err}\n{Stack}", ex.Message, ex.StackTrace);
                         }
-                    }
-                    catch (Exception ex)
-                    {
-                        logger.LogError("Synapse Event Processor Error: {Err}\n{Stack}", ex.Message, ex.StackTrace);
-                    }
-                }))
-                .ToList();
-            await Task.WhenAll(tasks);
+                    }))
+                    .ToList();
+                await Task.WhenAll(tasks);
+            });
         };
         SubEventServerTopic();
     }

Synapse/RpcClient.cs

@@ -7,12 +7,13 @@ using Microsoft.Extensions.Logging;
 using MQTTnet;
 using SimApi.Communications;
 using SimApi.Helpers;
+using System.Collections.Concurrent;
 
 namespace SimApi;
 
 public partial class Synapse
 {
-    private Dictionary<string, TaskCompletionSource<string>> ResponseCompletionSources { get; } = new();
+    private ConcurrentDictionary<string, TaskCompletionSource<string>> ResponseCompletionSources { get; } = new();
 
     private string EventClientTopicPrefix => $"{Options.SysName}/{Options.AppName}/rpc/client/{Options.AppId}/";
 
@@ -25,7 +26,7 @@ public partial class Synapse
             var messageId = e.ApplicationMessage.Topic.Replace(EventClientTopicPrefix, string.Empty);
             if (!ResponseCompletionSources.TryGetValue(messageId, out var tcs)) return Task.CompletedTask;
             tcs.SetResult(reqBody);
-            ResponseCompletionSources.Remove(messageId);
+            ResponseCompletionSources.Remove(messageId, out _);
             return Task.CompletedTask;
         };
         SubRpcClientTopic();
@@ -38,8 +39,10 @@ public partial class Synapse
         Client!.SubscribeAsync(rcSubOpts).Wait();
     }
 
-    private string? FireRpc(string app, string action, object? param)
+    private string? FireRpc(string app, string action, object? param, Dictionary<string, string>? headers = null,
+        int? timeout = null)
     {
+        // 移除锁语句
         string paramJson;
         if (param is string strParam)
         {
@@ -53,24 +56,30 @@ public partial class Synapse
         var topic = $"{Options.SysName}/{app}/rpc/server/{action}";
         var messageId = Guid.NewGuid().ToString();
         var tcs = new TaskCompletionSource<string>();
-        ResponseCompletionSources.Add(messageId, tcs);
-        var message = new MqttApplicationMessageBuilder()
+        ResponseCompletionSources.TryAdd(messageId, tcs);
+        var messageBuilder = new MqttApplicationMessageBuilder()
             .WithTopic(topic)
             .WithPayload(paramJson)
-            .WithResponseTopic($"{Options.AppName},{Options.AppId}")
-            .WithContentType(messageId)
-            .WithRetainFlag(false)
-            .Build();
+            .WithResponseTopic($"{Options.AppName},{Options.AppId},{messageId}")
+            .WithContentType("application/json")
+            .WithRetainFlag(false);
+        foreach (var h in headers ?? new Dictionary<string, string>())
+        {
+            messageBuilder.WithUserProperty(h.Key, h.Value);
+        }
+
+        var message = messageBuilder.Build();
         if (!Client!.IsConnected) return null;
         Client.PublishAsync(message, CancellationToken.None).Wait();
         logger.LogDebug(
-            "Synapse RPC Client Request: ({PropsMessageId}) {OptionsAppName} -> {Action}@{App}\n{ParamJson}", messageId,
-            Options.AppName, action, app, paramJson);
+            "Synapse RPC Client Request: ({PropsMessageId}) {OptionsAppName} -> {Action}@{App}\n{ParamJson}\nHeaders: {Headers}",
+            messageId, Options.AppName, action, app, paramJson, JsonSerializer.Serialize(headers));
 
         string response;
         try
         {
-            if (tcs.Task.Wait(Options.RpcTimeout * 1000))
+            timeout ??= Options.RpcTimeout;
+            if (tcs.Task.Wait(timeout.Value * 1000))
             {
                 response = tcs.Task.Result;
                 logger.LogDebug(

Synapse/RpcServer.cs

@@ -20,82 +20,95 @@ public partial class Synapse
 
     private void RunRpcServer()
     {
-        Client!.ApplicationMessageReceivedAsync += e =>
+        Client!.ApplicationMessageReceivedAsync += async e =>
         {
-            if (!e.ApplicationMessage.Topic.StartsWith(RpcServerTopicPrefix)) return Task.CompletedTask;
-            var reqBody = e.ApplicationMessage.ConvertPayloadToString();
-            var action = e.ApplicationMessage.Topic.Replace(RpcServerTopicPrefix, string.Empty);
-            var appInfo = e.ApplicationMessage.ResponseTopic.Split(",");
-            logger.LogDebug(
-                "Synapse RPC Server Receive: ({BasicPropertiesMessageId}) {BasicPropertiesReplyTo} -> {BasicPropertiesType}@{OptionsAppName}\n{S}",
-                e.ApplicationMessage.ContentType, appInfo[0], action, Options.AppName,
-                reqBody);
-            SimApiBaseResponse res;
-            var method = RpcRegistry.FirstOrDefault(x => x.Key == action);
-            if (method == null)
+            await Task.Run(() =>
             {
-                res = new SimApiBaseResponse(404, "method not found");
-            }
-            else
-            {
-                var callClass = sp.CreateScope().ServiceProvider.GetRequiredService(method.Class!);
-                var mt = callClass.GetType().GetMethod(method.Method!);
-                try
+                if (!e.ApplicationMessage.Topic.StartsWith(RpcServerTopicPrefix)) return;
+                var reqBody = e.ApplicationMessage.ConvertPayloadToString();
+                var action = e.ApplicationMessage.Topic.Replace(RpcServerTopicPrefix, string.Empty);
+                var appInfo = e.ApplicationMessage.ResponseTopic.Split(",");
+                logger.LogDebug(
+                    "Synapse RPC Server Receive: ({BasicPropertiesMessageId}) {BasicPropertiesReplyTo} -> {BasicPropertiesType}@{OptionsAppName}\n{S}",
+                    appInfo[2], appInfo[0], action, Options.AppName, reqBody);
+                SimApiBaseResponse res;
+                var method = RpcRegistry.FirstOrDefault(x => x.Key == action);
+                if (method == null)
                 {
-                    var methodParams = mt!.GetParameters();
-                    object? ret;
-                    if (methodParams.Length == 0)
-                    {
-                        ret = mt.Invoke(callClass, []);
-                    }
-                    else
-                    {
-                        var pt = mt.GetParameters()[0].ParameterType;
-                        var param = pt == typeof(string)
-                            ? [reqBody]
-                            : new[] { JsonSerializer.Deserialize(reqBody, pt, SimApiUtil.JsonOption) };
-                        ret = mt.Invoke(callClass, param);
-                    }
-
-                    res = new SimApiBaseResponse<object?>
-                    {
-                        Data = ret
-                    };
+                    res = new SimApiBaseResponse(404, "method not found");
                 }
-                catch (TargetInvocationException ex)
+                else
                 {
-                    if (ex.InnerException is SimApiException ie)
+                    var callClass = sp.CreateScope().ServiceProvider.GetRequiredService(method.Class!);
+                    var mt = callClass.GetType().GetMethod(method.Method!);
+                    try
                     {
-                        logger.LogDebug("Synapse RPC调用错误: {Err}", ie.Message);
-                        res = new SimApiBaseResponse(ie.Code, ie.Message);
+                        var methodParams = mt!.GetParameters();
+                        object? ret;
+                        switch (methodParams.Length)
+                        {
+                            case 1:
+                                var pt = mt.GetParameters()[0].ParameterType;
+                                var param = pt == typeof(string)
+                                    ? [reqBody]
+                                    : new[] { JsonSerializer.Deserialize(reqBody, pt, SimApiUtil.JsonOption) };
+                                ret = mt.Invoke(callClass, param);
+                                break;
+                            case 2:
+                                var headerData =
+                                    e.ApplicationMessage.UserProperties.ToDictionary(x => x.Name, x => x.Value);
+                                var pt2 = mt.GetParameters()[0].ParameterType;
+                                var param2 = pt2 == typeof(string)
+                                    ? [reqBody]
+                                    : new[]
+                                    {
+                                        JsonSerializer.Deserialize(reqBody, pt2, SimApiUtil.JsonOption), headerData
+                                    };
+                                ret = mt.Invoke(callClass, param2);
+                                break;
+                            default:
+                                ret = mt.Invoke(callClass, []);
+                                break;
+                        }
+
+                        res = new SimApiBaseResponse<object?>
+                        {
+                            Data = ret
+                        };
                     }
-                    else
+                    catch (TargetInvocationException ex)
                     {
-                        logger.LogError("Synapse RPC 方法异常: {Err}\n{Stack}", ex.Message,ex.StackTrace);
+                        if (ex.InnerException is SimApiException ie)
+                        {
+                            logger.LogDebug("Synapse RPC调用错误: {Err}", ie.Message);
+                            res = new SimApiBaseResponse(ie.Code, ie.Message);
+                        }
+                        else
+                        {
+                            logger.LogError("Synapse RPC 方法异常: {Err}\n{Stack}", ex.Message, ex.StackTrace);
+                            res = new SimApiBaseResponse(500, ex.Message);
+                        }
+                    }
+                    catch (Exception ex)
+                    {
+                        logger.LogDebug("Synapse RPC调用失败: {Err}", ex.Message);
                         res = new SimApiBaseResponse(500, ex.Message);
                     }
                 }
-                catch (Exception ex)
-                {
-                    logger.LogDebug("Synapse RPC调用失败: {Err}", ex.Message);
-                    res = new SimApiBaseResponse(500, ex.Message);
-                }
-            }
 
-            var returnJson = JsonSerializer.Serialize((object)res, SimApiUtil.JsonOption);
-            var reply = $"{Options.SysName}/{appInfo[0]}/rpc/client/{appInfo[1]}/{e.ApplicationMessage.ContentType}";
-            var message = new MqttApplicationMessageBuilder()
-                .WithTopic(reply)
-                .WithPayload(returnJson)
-                .WithRetainFlag(false)
-                .Build();
-            if (!Client.IsConnected) return Task.CompletedTask;
-            Client.PublishAsync(message, CancellationToken.None).Wait();
-            logger.LogDebug(
-                "Synapse Rpc Server Return: ({BasicPropertiesMessageId}) {BasicPropertiesType}@{OptionsAppName} -> {BasicPropertiesReplyTo}\n{ReturnJson}",
-                e.ApplicationMessage.ContentType, action, Options.AppName, appInfo[0], returnJson);
-
-            return Task.CompletedTask;
+                var returnJson = JsonSerializer.Serialize((object)res, SimApiUtil.JsonOption);
+                var reply = $"{Options.SysName}/{appInfo[0]}/rpc/client/{appInfo[1]}/{appInfo[2]}";
+                var message = new MqttApplicationMessageBuilder()
+                    .WithTopic(reply)
+                    .WithPayload(returnJson)
+                    .WithRetainFlag(false)
+                    .Build();
+                if (!Client.IsConnected) return;
+                Client.PublishAsync(message, CancellationToken.None).Wait();
+                logger.LogDebug(
+                    "Synapse Rpc Server Return: ({BasicPropertiesMessageId}) {BasicPropertiesType}@{OptionsAppName} -> {BasicPropertiesReplyTo}\n{ReturnJson}",
+                    appInfo[2], action, Options.AppName, appInfo[0], returnJson);
+            });
         };
         SubRpcServerTopic();
     }

Synapse/Synapse.cs

@@ -8,7 +8,6 @@ using System.Threading.Tasks;
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
 using MQTTnet;
-using MQTTnet.Client;
 using MQTTnet.Formatter;
 using SimApi.Attributes;
 using SimApi.Communications;
@@ -22,7 +21,7 @@ public partial class Synapse(SimApiOptions simApiOptions, ILogger<Synapse> logge
 {
     private SimApiSynapseOptions Options { get; } = simApiOptions.SimApiSynapseOptions;
 
-    private MqttFactory MqttFactory { get; } = new();
+    private MqttClientFactory MqttFactory { get; } = new();
     public IMqttClient? Client { get; set; }
 
     private List<RegisterItem> EventRegistry { get; set; } = new();
@@ -87,9 +86,12 @@ public partial class Synapse(SimApiOptions simApiOptions, ILogger<Synapse> logge
     /// <param name="appName"></param>
     /// <param name="method"></param>
     /// <param name="param"></param>
+    /// <param name="headers"></param>
+    /// <param name="timeout"></param>
     /// <typeparam name="T"></typeparam>
     /// <returns></returns>
-    public SimApiBaseResponse<T> Rpc<T>(string appName, string method, dynamic? param = null)
+    public SimApiBaseResponse<T> Rpc<T>(string appName, string method, dynamic? param = null,
+        Dictionary<string, string>? headers = null, int? timeout = null)
     {
         var res = new SimApiBaseResponse(500, "Synapse Rpc Client Disabled!");
         if (Options.DisableRpcClient)
@@ -98,7 +100,7 @@ public partial class Synapse(SimApiOptions simApiOptions, ILogger<Synapse> logge
         }
         else
         {
-            var data = FireRpc(appName, method, param);
+            var data = FireRpc(appName, method, param, headers, timeout);
             res = JsonSerializer.Deserialize<SimApiBaseResponse<T>>(data, SimApiUtil.JsonOption);
         }
 
@@ -111,10 +113,13 @@ public partial class Synapse(SimApiOptions simApiOptions, ILogger<Synapse> logge
     /// <param name="appName"></param>
     /// <param name="method"></param>
     /// <param name="param"></param>
+    /// <param name="headers"></param>
+    /// <param name="timeout"></param>
     /// <returns></returns>
-    public SimApiBaseResponse<object> Rpc(string appName, string method, dynamic? param = null)
+    public SimApiBaseResponse<object> Rpc(string appName, string method, dynamic? param = null,
+        Dictionary<string, string>? headers = null, int? timeout = null)
     {
-        return Rpc<object>(appName, method, param);
+        return Rpc<object>(appName, method, param, headers, timeout);
     }
 
 
@@ -141,7 +146,7 @@ public partial class Synapse(SimApiOptions simApiOptions, ILogger<Synapse> logge
     }
 
     /// <summary>
-    ///  发送一个事件
+    ///  发送一个事件x
     /// </summary>
     /// <param name="eventName"></param>
     /// <param name="param"></param>
@@ -271,10 +276,19 @@ public partial class Synapse(SimApiOptions simApiOptions, ILogger<Synapse> logge
 
                     var callClass = sp.CreateScope().ServiceProvider.GetRequiredService(tmp.Class!);
                     var mt = callClass.GetType().GetMethod(tmp.Method);
-                    if (mt!.GetParameters().Length > 1)
+                    if (mt!.GetParameters().Length > 2)
                     {
                         logger.LogError(
-                            "Synapse Rpc Register Error: Only one or none parameter supported. {Key} -> {Method}@{Class}",
+                            "Synapse Rpc Register Error: Only 1,2 or none parameter supported. {Key} -> {Method}@{Class}",
+                            tmp.Key, tmp.Method, tmp.Class.Name);
+                        continue;
+                    }
+
+                    if (mt.GetParameters().Length == 2 &&
+                        mt.GetParameters()[1].ParameterType != typeof(Dictionary<string, string>))
+                    {
+                        logger.LogError(
+                            "Synapse Rpc Register Error: RpcMethod Parameter 2 must be Dictionary<string, string>. {Key} -> {Method}@{Class}",
                             tmp.Key, tmp.Method, tmp.Class.Name);
                         continue;
                     }