修复全量审查问题;设置接口PATCH化;回传指纹加固

internal/api/routes_oci.go

@@ -127,13 +127,21 @@ func registerOciObjectStorage(g *gin.RouterGroup, h *ociConfigHandler) {
 	g.GET("/oci-configs/:id/buckets/:bucket/objects/detail", h.objectDetail)
 	// 小文件中转:预览/编辑直读直写,不签发 PAR
 	g.GET("/oci-configs/:id/buckets/:bucket/objects/content", h.getObjectContent)
-	g.PUT("/oci-configs/:id/buckets/:bucket/objects/content", h.putObjectContent)
 	g.GET("/oci-configs/:id/buckets/:bucket/pars", h.listPARs)
 	g.POST("/oci-configs/:id/buckets/:bucket/pars", h.createPAR)
 	// parId 经 query 传递:OCI PAR id 含 "/" 等字符,路径参数无法匹配
 	g.DELETE("/oci-configs/:id/buckets/:bucket/pars", h.deletePAR)
 }
 
+// registerOciUploads 挂需放宽请求体上限的上传接口;router 侧以独立组绕开
+// v1 统一 1MB bodyLimit(multipart 除文件本体外还有边界与字段头开销)。
+// idp-icons 用独立路径,避免与 /identity-providers/:idpId 同段静态/参数混排。
+func registerOciUploads(g *gin.RouterGroup, ociConfigs *service.OciConfigService) {
+	h := &ociConfigHandler{svc: ociConfigs}
+	g.POST("/oci-configs/:id/idp-icons", h.uploadIdpIcon)
+	g.DELETE("/oci-configs/:id/idp-icons", h.deleteIdpIcon)
+}
+
 // registerOciCost 成本快照。
 func registerOciCost(g *gin.RouterGroup, h *ociConfigHandler) {
 	g.GET("/oci-configs/:id/costs", h.costs)
@@ -167,3 +175,11 @@ func registerOciTenantIAM(g *gin.RouterGroup, h *ociConfigHandler) {
 	g.POST("/oci-configs/:id/sign-on-exemptions", h.createMfaExemption)
 	g.DELETE("/oci-configs/:id/sign-on-exemptions/:ruleId", h.deleteMfaExemption)
 }
+
+// registerOciContentUploads 挂对象内容保存接口(编辑器直写,5MB 文件上限);
+// 必须留在独立的大 body limit 组:统一 1MB 组会先截断请求,handler 的 5MB
+// 上限与 swagger 声明就成了空话(2026-07 全量审查 #11)。
+func registerOciContentUploads(g *gin.RouterGroup, ociConfigs *service.OciConfigService) {
+	h := &ociConfigHandler{svc: ociConfigs}
+	g.PUT("/oci-configs/:id/buckets/:bucket/objects/content", h.putObjectContent)
+}