v2.9.0: 设置新增 ZITADEL 统一登录(OIDC Authorization Code+PKCE,身份主键 (issuer,subject),JIT 建号即管理员,docs/12);账号密码 tab 支持修改用户名(验密+重签会话);新增 docs/API.md 全量 API 文档;迁移 0006(oidc_identities/oidc_states)

console/src/app.ts

@@ -4,6 +4,7 @@
  * 路由分区:
  *   /api/health         健康检查
  *   /api/auth/*         用户登录/登出/会话(cookie)
+ *   /auth/*             ZITADEL 统一登录:status / login / callback(OIDC Authorization Code + PKCE)
  *   /api/accounts|domains|mailboxes|emails 管理资源 CRUD(会话保护)
  *   /api/settings/*     设置:全局 Webhook / 改密码(会话保护)
  *   /api/oauth/*        Cloudflare OAuth(会话保护)
@@ -23,6 +24,7 @@ import { internalRoutes } from "./routes/internal.ts";
 import { resourceRoutes } from "./routes/resources.ts";
 import { settingsRoutes } from "./routes/settings.ts";
 import { oauthRoutes } from "./routes/oauth.ts";
+import { oidcRoutes } from "./routes/oidc.ts";
 import { apiV1Routes } from "./routes/apiv1.ts";
 import { mcpRoutes } from "./routes/mcp.ts";
 import { adminRoutes } from "./routes/admin.ts";
@@ -50,6 +52,7 @@ export function createApp(
   app.get("/api/health", (c) => c.json({ ok: true, name: APP_NAME, version: APP_VERSION }));
 
   app.route("/api/auth", authRoutes());
+  app.route("/auth", oidcRoutes());
   app.route("/internal", internalRoutes());
   app.route("/api/oauth", oauthRoutes());
   app.route("/api/settings", settingsRoutes());