修复全量审查问题;设置接口PATCH化;回传指纹加固

docs/swagger.yaml

@@ -176,6 +176,25 @@ definitions:
     - metadata
     - name
     type: object
+  internal_api.createIdpResponse:
+    properties:
+      enabled:
+        type: boolean
+      id:
+        type: string
+      jitEnabled:
+        type: boolean
+      name:
+        type: string
+      partnerProviderId:
+        type: string
+      setupWarning:
+        $ref: '#/definitions/internal_api.idpSetupWarning'
+      timeCreated:
+        type: string
+      type:
+        type: string
+    type: object
   internal_api.createInstanceRequest:
     properties:
       assignIpv6:
@@ -385,6 +404,24 @@ definitions:
       error:
         type: string
     type: object
+  internal_api.idpIconResponse:
+    properties:
+      fileName:
+        type: string
+      url:
+        type: string
+    type: object
+  internal_api.idpSetupWarning:
+    properties:
+      code:
+        type: string
+      message:
+        type: string
+      requestId:
+        type: string
+      resourceCreated:
+        type: boolean
+    type: object
   internal_api.importRequest:
     properties:
       alias:
@@ -2744,6 +2781,13 @@ definitions:
         type: array
       hasActiveTask:
         type: boolean
+      series:
+        description: |-
+          Series 按币种拆分的序列(合计降序);顶层 Currency/Total/Days 恒为首个
+          (主)币种,多币种租户的其余币种只出现在 Series,不与主币种相加。
+        items:
+          $ref: '#/definitions/oci-portal_internal_service.OverviewCostSeries'
+        type: array
       total:
         type: number
     type: object
@@ -2754,6 +2798,17 @@ definitions:
       day:
         type: string
     type: object
+  oci-portal_internal_service.OverviewCostSeries:
+    properties:
+      currency:
+        type: string
+      days:
+        items:
+          $ref: '#/definitions/oci-portal_internal_service.OverviewCostDay'
+        type: array
+      total:
+        type: number
+    type: object
   oci-portal_internal_service.OverviewTasks:
     properties:
       active:
@@ -2869,6 +2924,21 @@ definitions:
       webhook:
         $ref: '#/definitions/oci-portal_internal_service.LogWebhookInfo'
     type: object
+  oci-portal_internal_service.SecurityPatch:
+    properties:
+      appUrl:
+        type: string
+      ipRateBurst:
+        type: integer
+      ipRateRps:
+        type: integer
+      loginFailLimit:
+        type: integer
+      loginLockMinutes:
+        type: integer
+      realIpHeader:
+        type: string
+    type: object
   oci-portal_internal_service.SecuritySettings:
     properties:
       appUrl:
@@ -3308,7 +3378,7 @@ paths:
         "200":
           description: OK
           schema:
-            $ref: '#/definitions/internal_api.pagedResponse-oci-portal_internal_model_AiCallLog'
+            $ref: '#/definitions/internal_api.pagedResponse-oci-portal_internal_model_AiContentLog'
       security:
       - BearerAuth: []
       summary: 分页查询内容日志
@@ -3411,7 +3481,7 @@ paths:
         "200":
           description: OK
           schema:
-            $ref: '#/definitions/internal_api.pagedResponse-oci-portal_internal_model_AiContentLog'
+            $ref: '#/definitions/internal_api.pagedResponse-oci-portal_internal_model_AiCallLog'
       security:
       - BearerAuth: []
       summary: AI 调用日志列表
@@ -3498,8 +3568,12 @@ paths:
         schema:
           $ref: '#/definitions/oci-portal_internal_service.UpdateCredentialsInput'
       responses:
+        "200":
+          description: 已更新,返回换发的新 token
+          schema:
+            $ref: '#/definitions/internal_api.tokenResponse'
         "204":
-          description: 已更新,请重新登录
+          description: 已更新但新 token 签发失败,需重新登录
         "401":
           description: 当前密码错误
           schema:
@@ -3530,8 +3604,12 @@ paths:
         required: true
         type: integer
       responses:
+        "200":
+          description: 已解绑,返回换发的新 token
+          schema:
+            $ref: '#/definitions/internal_api.tokenResponse'
         "204":
-          description: 已解绑
+          description: 已解绑但新 token 签发失败,需重新登录
         "409":
           description: 最后一个身份不可解绑
           schema:
@@ -3644,8 +3722,12 @@ paths:
         schema:
           type: object
       responses:
+        "200":
+          description: 已保存,返回换发的新 token
+          schema:
+            $ref: '#/definitions/internal_api.tokenResponse'
         "204":
-          description: 已保存
+          description: 已保存但新 token 签发失败,需重新登录
         "409":
           description: 未绑定外部身份
           schema:
@@ -3689,8 +3771,12 @@ paths:
         schema:
           type: object
       responses:
+        "200":
+          description: 已启用,返回换发的新 token
+          schema:
+            $ref: '#/definitions/internal_api.tokenResponse'
         "204":
-          description: 已启用
+          description: 已启用但新 token 签发失败,需重新登录
       security:
       - BearerAuth: []
       summary: 激活两步验证
@@ -3706,8 +3792,12 @@ paths:
         schema:
           type: object
       responses:
+        "200":
+          description: 已停用,返回换发的新 token
+          schema:
+            $ref: '#/definitions/internal_api.tokenResponse'
         "204":
-          description: 已停用
+          description: 已停用但新 token 签发失败,需重新登录
       security:
       - BearerAuth: []
       summary: 停用两步验证
@@ -4428,8 +4518,14 @@ paths:
         name: region
         type: string
       responses:
+        "200":
+          description: 'all=1 时返回 {deleted: n}'
+          schema:
+            additionalProperties:
+              type: integer
+            type: object
         "204":
-          description: 删除成功,链接立即失效
+          description: 按 parId 删单条成功,链接立即失效
       security:
       - BearerAuth: []
       summary: 删除临时链接
@@ -4493,6 +4589,12 @@ paths:
           description: fullUrl 仅创建响应返回,请立即保存
           schema:
             $ref: '#/definitions/oci-portal_internal_oci.PAR'
+        "400":
+          description: accessType 或 expiresHours 非法
+          schema:
+            additionalProperties:
+              type: string
+            type: object
       security:
       - BearerAuth: []
       summary: 签发临时链接(PAR)
@@ -4665,6 +4767,8 @@ paths:
       tags:
       - 租户 IAM
     post:
+      description: 创建禁用态 IdP；若 IdP 已创建但 JIT 后置配置失败且回滚无法确认，仍返回 201，并在 setupWarning
+        中标明部分成功
       parameters:
       - description: 配置 ID
         in: path
@@ -4685,7 +4789,7 @@ paths:
         "201":
           description: Created
           schema:
-            $ref: '#/definitions/oci-portal_internal_oci.IdentityProviderInfo'
+            $ref: '#/definitions/internal_api.createIdpResponse'
       security:
       - BearerAuth: []
       summary: 创建身份提供商(SAML)
@@ -4798,6 +4902,85 @@ paths:
       summary: 更新身份域设置
       tags:
       - 租户 IAM
+  /api/v1/oci-configs/{id}/idp-icons:
+    delete:
+      description: 使用上传响应中的 fileName 删除身份域公开图片;404 按已删除处理
+      parameters:
+      - description: 配置 ID
+        in: path
+        name: id
+        required: true
+        type: integer
+      - description: 身份域 OCID(缺省 Default 域)
+        in: query
+        name: domainId
+        type: string
+      - description: 上传响应返回的 IdP 图标存储标识(images/idp-icon-<32hex>.<ext>)
+        in: query
+        name: fileName
+        required: true
+        type: string
+      responses:
+        "204":
+          description: 无内容
+        "400":
+          description: fileName 缺失或不是本服务生成的 IdP 图标标识
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+      security:
+      - BearerAuth: []
+      summary: 删除身份提供商图标
+      tags:
+      - 租户 IAM
+    post:
+      consumes:
+      - multipart/form-data
+      description: 上传到身份域公共图片存储(/storage/v1/Images),返回可填入 iconUrl 的公网地址
+      parameters:
+      - description: 配置 ID
+        in: path
+        name: id
+        required: true
+        type: integer
+      - description: 身份域 OCID(缺省 Default 域)
+        in: query
+        name: domainId
+        type: string
+      - description: 图标文件(png/jpg/jpeg/gif/svg/webp/ico,≤1MB)
+        in: formData
+        name: file
+        required: true
+        type: file
+      responses:
+        "200":
+          description: OK
+          schema:
+            $ref: '#/definitions/internal_api.idpIconResponse'
+        "400":
+          description: 缺文件字段、文件为空或文件名非法
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+        "413":
+          description: 文件超过 1MB
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+        "415":
+          description: 扩展名不支持或与文件内容不符
+          schema:
+            additionalProperties:
+              type: string
+            type: object
+      security:
+      - BearerAuth: []
+      summary: 上传身份提供商图标
+      tags:
+      - 租户 IAM
   /api/v1/oci-configs/{id}/images:
     get:
       parameters:
@@ -7090,9 +7273,9 @@ paths:
       summary: OAuth provider 配置
       tags:
       - 设置
-    put:
+    patch:
       parameters:
-      - description: provider 配置
+      - description: 出现的字段才会被更新
         in: body
         name: body
         required: true
@@ -7105,7 +7288,7 @@ paths:
             $ref: '#/definitions/oci-portal_internal_service.OAuthProvidersView'
       security:
       - BearerAuth: []
-      summary: 保存 OAuth provider 配置
+      summary: 部分更新 OAuth provider 配置
       tags:
       - 设置
   /api/v1/settings/security:
@@ -7120,14 +7303,14 @@ paths:
       summary: 返回安全设置
       tags:
       - 设置
-    put:
+    patch:
       parameters:
-      - description: 请求体
+      - description: 出现的字段才会被更新
         in: body
         name: body
         required: true
         schema:
-          $ref: '#/definitions/oci-portal_internal_service.SecuritySettings'
+          $ref: '#/definitions/oci-portal_internal_service.SecurityPatch'
       responses:
         "200":
           description: OK
@@ -7135,7 +7318,7 @@ paths:
             $ref: '#/definitions/oci-portal_internal_service.SecuritySettings'
       security:
       - BearerAuth: []
-      summary: 保存安全设置并返回最新值
+      summary: 部分更新安全设置并返回最新值
       tags:
       - 设置
   /api/v1/settings/task:
@@ -7292,7 +7475,7 @@ paths:
         name: id
         required: true
         type: integer
-      - description: 可更新字段
+      - description: 可更新字段;抢机 payload 的 count 语义为目标台数
         in: body
         name: body
         required: true
@@ -7303,6 +7486,14 @@ paths:
           description: OK
           schema:
             $ref: '#/definitions/oci-portal_internal_model.Task'
+        "400":
+          description: 参数非法或抢机目标不大于已完成数量
+          schema:
+            $ref: '#/definitions/internal_api.errorResponse'
+        "409":
+          description: 任务被并发修改,须刷新重试
+          schema:
+            $ref: '#/definitions/internal_api.errorResponse'
       security:
       - BearerAuth: []
       summary: 更新任务