Merge remote-tracking branch 'shucheng/mk'

# Conflicts:
#	blade-service-api/blade-open-api/src/main/java/org/springblade/openapi/mk/api/IApi4MK.java
#	blade-service-api/pom.xml
#	blade-service/blade-file/src/main/java/org/springblade/file/FileApplication.java
#	blade-service/blade-file/src/main/resources/bootstrap.yml
#	blade-service/blade-openapi/src/main/java/org/springblade/openapi/OpenApiApplication.java
#	blade-service/blade-openapi/src/main/resources/bootstrap.yml
#	pom.xml

blade-auth/src/main/java/org/springblade/auth/AuthApplication.java

@@ -43,6 +43,8 @@ import org.springframework.session.data.redis.config.annotation.web.http.EnableR
 public class AuthApplication {
 
 	public static void main(String[] args) {
+		// 禁用框架注入的nacos import配置、config、discovery 配置
+		BladeApplication.disableNacosLaunchConfig();
 		BladeApplication.run(AppConstant.APPLICATION_AUTH_NAME, AuthApplication.class, args);
 	}
 

blade-auth/src/main/java/org/springblade/auth/endpoint/OAuth2MKEndpoint.java

@@ -0,0 +1,68 @@
+package org.springblade.auth.endpoint;
+
+import io.swagger.v3.oas.annotations.tags.Tag;
+import lombok.extern.slf4j.Slf4j;
+import org.springblade.core.oauth2.endpoint.AbstractOAuth2MKEndpoint;
+import org.springblade.core.oauth2.granter.TokenGranterFactory;
+import org.springblade.core.oauth2.handler.TokenHandler;
+import org.springblade.core.tool.utils.StringUtil;
+import org.springblade.core.tool.utils.UrlUtil;
+import org.springblade.thirdparty.mk.config.MKProperties;
+import org.springblade.thirdparty.mk.service.IMKService;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.stream.Stream;
+
+/**
+ * @author bfhuange
+ * @date 2024/9/17
+ */
+@RestController
+@Slf4j
+@Tag(name = "跳转mk认证", description = "跳转mk认证端点")
+public class OAuth2MKEndpoint extends AbstractOAuth2MKEndpoint {
+    /**
+     *  登录链接
+     */
+    private static final String LOGIN_URL_FORMAT = "%s%s?appId=%s&redirection_url=%s";
+
+    private final MKProperties mkProperties;
+    private final IMKService mkService;
+
+    public OAuth2MKEndpoint(TokenGranterFactory granterFactory, TokenHandler tokenHandler, MKProperties mkProperties, IMKService mkService) {
+        super(granterFactory, tokenHandler);
+        this.mkProperties = mkProperties;
+        this.mkService = mkService;
+    }
+
+    @Override
+    protected String generateLoginUrl(String refererUrl) {
+        // 重定向到来源
+        return String.format(LOGIN_URL_FORMAT, mkProperties.getLoginUrl(), mkProperties.getMkSsoLoginUrl(), mkProperties.getOauthAppId(), UrlUtil.encode(refererUrl));
+    }
+
+    @Override
+    protected String getAccountByMkCode(String mkCode) {
+        return mkService.getMKAccount(mkCode);
+    }
+
+    @Override
+    protected boolean checkRefererUrl(String refererUrl) {
+        if (!mkProperties.isCheckReferer()) {
+            // 未开启校验来源，校验通过
+            return true;
+        }
+        if (StringUtil.isBlank(mkProperties.getErpBaseUrls())) {
+            log.error("未配置erp地址，无法校验来源");
+            return false;
+        }
+        if (StringUtil.isBlank(refererUrl)) {
+            // 来源地址为空，通过，以便用于调试
+            return true;
+        }
+        // 匹配到一个erp基础地址就行了
+        return Stream.of(mkProperties.getErpBaseUrls().split(","))
+                .map(String::trim)
+                .anyMatch(refererUrl::startsWith);
+    }
+}

blade-auth/src/main/java/org/springblade/auth/exception/OAuth2MKExceptionHandler.java

@@ -0,0 +1,13 @@
+package org.springblade.auth.exception;
+
+import org.springblade.auth.endpoint.OAuth2MKEndpoint;
+import org.springblade.core.oauth2.exception.OAuth2ExceptionHandler;
+import org.springframework.web.bind.annotation.ControllerAdvice;
+
+/**
+ * @author bfhuange
+ * @date 2024/10/16
+ */
+@ControllerAdvice(basePackageClasses = OAuth2MKEndpoint.class)
+public class OAuth2MKExceptionHandler extends OAuth2ExceptionHandler {
+}