1、新增小程序相关接口

2、调整OA

doc/nacos/blade-dev.yaml

@@ -87,6 +87,7 @@ thirdParty:
   oa:
     # OA开放接口地址
     baseUrl: http://127.0.0.1:8080
+    queryPersonPageUrl: /gwzh/OA/OA_GET_USER_LIST
   track:
     # 轨迹开放接口地址
     baseUrl: http://127.0.0.1:8080
@@ -120,6 +121,11 @@ thirdParty:
     downloadFileUrl: ${MK_DOWNLOAD_FILE_URL:/openapi/sys-attach/fileStream/download}
     queryApprovalListUrl: ${MK_QUERY_APPROVAL_LIST_URL:/openapi/lbpm-approval/lbpmApproval/portal/list}
     queryProcessListUrl: ${MK_QUERY_PROCESS_LIST_URL:/openapi/sys-lbpm/sysLbpmProcess/openSupport/list}
+  wechat:
+    mini:
+      # 微信小程序（手机号一键登录 / openid）
+      appId: ${WECHAT_MINI_APP_ID:}
+      appSecret: ${WECHAT_MINI_APP_SECRET:}
 
 #百度OCR配置，API Key和Secret Key请通过环境变量注入
 baidu:

doc/nacos/blade-prod.yaml

@@ -59,6 +59,7 @@ thirdParty:
   oa:
     # OA开放接口地址
     baseUrl: http://127.0.0.1:8080
+    queryPersonPageUrl: /gwzh/OA/OA_GET_USER_LIST
   track:
     # 轨迹开放接口地址
     baseUrl: http://127.0.0.1:8080
@@ -92,6 +93,10 @@ thirdParty:
     downloadFileUrl: ${MK_DOWNLOAD_FILE_URL:/openapi/sys-attach/fileStream/download}
     queryApprovalListUrl: ${MK_QUERY_APPROVAL_LIST_URL:/openapi/lbpm-approval/lbpmApproval/portal/list}
     queryProcessListUrl: ${MK_QUERY_PROCESS_LIST_URL:/openapi/sys-lbpm/sysLbpmProcess/openSupport/list}
+  wechat:
+    mini:
+      appId: ${WECHAT_MINI_APP_ID:}
+      appSecret: ${WECHAT_MINI_APP_SECRET:}
 
 #百度OCR配置，API Key和Secret Key请通过环境变量注入
 baidu:

doc/nacos/blade.yaml

@@ -213,6 +213,9 @@ blade:
     #接口放行
     skip-url:
       - /test/**
+      # 退出登录：允许无令牌/令牌失效时也能调用（服务端对无用户直接返回成功）
+      - /oauth/logout/**
+      - /blade-auth/oauth/logout/**
     #授权认证配置
     auth:
       - method: ALL

doc/nacos/routes/blade-gateway-dev.json

@@ -27,6 +27,28 @@
     "filters": [],
     "uri": "lb://blade-transport"
   },
+  {
+    "id": "blade-user-alias-route",
+    "order": 0,
+    "predicates": [
+      {
+        "name": "Path",
+        "args": {
+          "pattern": "/blade-user/**"
+        }
+      }
+    ],
+    "filters": [
+      {
+        "name": "RewritePath",
+        "args": {
+          "regexp": "/blade-user/(?<segment>.*)",
+          "replacement": "/user/$\\{segment}"
+        }
+      }
+    ],
+    "uri": "lb://blade-system"
+  },
   {
     "id": "example-route",
     "order": 0,

doc/nacos/third-party-api.yaml

@@ -11,9 +11,15 @@ thirdParty:
   oa:
     # OA开放接口地址
     baseUrl: ${OA_BASE_URL:http://127.0.0.1:8080}
+    queryPersonPageUrl: ${OA_QUERY_PERSON_PAGE_URL:/gwzh/OA/OA_GET_USER_LIST}
   track:
     # 轨迹开放接口地址
     baseUrl: ${TRACK_BASE_URL:http://127.0.0.1:8080}
   mk:
     # MK开放接口地址
     baseUrl: ${MK_BASE_URL:http://127.0.0.1:8080}
+  wechat:
+    mini:
+      # 微信小程序 AppId / AppSecret（Nacos 配置，勿提交真实 secret）
+      appId: ${WECHAT_MINI_APP_ID:}
+      appSecret: ${WECHAT_MINI_APP_SECRET:}

doc/sql/update/add-mp-auth-permission.sql

@@ -0,0 +1,21 @@
+-- 小程序调度端入口权限码 mp_auth
+-- user-info 的 permission 来自按钮叶子 code；需把本菜单授权给调度/管理员角色
+-- 执行后：后台「角色管理 → 权限配置」勾选「小程序调度端」，或按需 INSERT blade_role_menu
+
+-- 父级菜单（小程序）
+INSERT IGNORE INTO `blade_menu`
+(`id`, `parent_id`, `code`, `name`, `alias`, `path`, `source`, `sort`, `category`, `action`, `is_open`, `component`, `remark`, `is_deleted`)
+VALUES
+(2091800000000000001, 0, 'miniprogram', '小程序', 'menu', '/miniprogram', 'iconfont iconicon_work', 98, 1, 0, 1, '', '小程序相关权限', 0);
+
+-- 按钮权限：mp_auth（叶子节点，会被 permissionCodes 收集）
+INSERT IGNORE INTO `blade_menu`
+(`id`, `parent_id`, `code`, `name`, `alias`, `path`, `source`, `sort`, `category`, `action`, `is_open`, `component`, `remark`, `is_deleted`)
+VALUES
+(2091800000000000002, 2091800000000000001, 'mp_auth', '小程序调度端', 'mp_auth', '', '', 1, 2, 0, 1, NULL, '登录后进入调度端首页', 0);
+
+-- 示例：给管理员角色（role_id 按环境实际调整，默认管理员 1123598816738675201）
+-- INSERT IGNORE INTO `blade_role_menu` (`id`, `menu_id`, `role_id`)
+-- VALUES
+-- (2091800000000000101, 2091800000000000001, 1123598816738675201),
+-- (2091800000000000102, 2091800000000000002, 1123598816738675201);

doc/sql/update/add-wechat-applet-grant-type.sql

@@ -0,0 +1,8 @@
+-- 为小程序客户端授权类型补充微信小程序登录（wechat_applet）
+-- 执行后建议清客户端缓存 / 重启 blade-auth
+
+UPDATE blade_client
+SET authorized_grant_types = CONCAT(authorized_grant_types, ',wechat_applet')
+WHERE client_id IN ('saber3', 'saber', 'sword', 'rider')
+  AND FIND_IN_SET('wechat_applet', REPLACE(authorized_grant_types, ' ', '')) = 0
+  AND is_deleted = 0;