feat: add OIDC login support

- Introduced OIDC configuration options in config.example.yaml.
- Added OIDC client initialization and routes for OIDC login, callback, and exchange.
- Implemented OIDC login service to handle user authentication via OIDC.
- Created frontend components for OIDC login and callback handling.
- Updated user creation logic to support OIDC users and their identities.
- Enhanced error handling for OIDC login processes.

internal/bootstrap/init.go

@@ -1,7 +1,9 @@
 package bootstrap
 
 import (
+	"context"
 	"cs-agent/internal/ai/rag/vectordb"
+	"cs-agent/internal/oidcclient"
 	"cs-agent/internal/pkg/config"
 	"cs-agent/internal/pkg/logx"
 	"cs-agent/internal/services/cronx"
@@ -42,5 +44,9 @@ func Init(configPath string) error {
 	cronx.Init()
 
 	wxwork.Init()
+	if err := oidcclient.Init(context.Background()); err != nil {
+		slog.Error("init oidc failed", "error", err)
+		return err
+	}
 	return nil
 }

internal/bootstrap/routes.go

@@ -16,6 +16,9 @@ func registerApiAuthRoutes(group *gin.RouterGroup) {
 	group.POST("/wxwork_exchange", api.WxWorkExchange)
 	group.GET("/wxwork_login", api.WxWorkLogin)
 	group.GET("/wxwork_qr_login", api.WxWorkQRLogin)
+	group.GET("/oidc_callback", api.OIDCCallback)
+	group.POST("/oidc_exchange", api.OIDCExchange)
+	group.GET("/oidc_login", api.OIDCLogin)
 }
 
 func registerApiChannelRoutes(group *gin.RouterGroup) {

internal/bootstrap/server_route_test.go

@@ -31,6 +31,9 @@ func TestNewServerRegistersGinRoutes(t *testing.T) {
 
 	expected := []string{
 		http.MethodPost + " /api/auth/login",
+		http.MethodGet + " /api/auth/oidc_login",
+		http.MethodGet + " /api/auth/oidc_callback",
+		http.MethodPost + " /api/auth/oidc_exchange",
 		http.MethodGet + " /api/auth/profile",
 		http.MethodGet + " /api/dashboard/user/list",
 		http.MethodGet + " /api/dashboard/user/:id",