Merge pull request #625 from tapdata/TAP-12033

Tap 12033

Author: feynmx

apps/daas/src/i18n/langs/en.js

@@ -868,6 +868,84 @@ export default {
     'The full Distinguished Name (DN) of the user for authentication, i.e., the identity used to log in to the AD server, e.g., user@example.com',
   setting_Ldap_Bind_Password_doc:
     'The password corresponding to the Bind DN, used for authentication',
+  setting_SAML: 'SAML Authentication',
+  setting_SAML_Login_Enable: 'Use SAML Login',
+  setting_SP_Entity_ID: 'SP Entity ID',
+  setting_SP_ACS_URL: 'SP ACS URL',
+  setting_SP_SLO_URL: 'SP SLO URL',
+  setting_SP_Certificate: 'SP Certificate',
+  setting_IdP_Entity_ID: 'IdP Entity ID',
+  setting_IdP_SSO_URL: 'IdP SSO URL',
+  setting_IdP_SLO_URL: 'IdP SLO URL',
+  setting_IdP_Signing_Certificate: 'IdP Signing Certificate',
+  setting_NameID_Format: 'NameID Format',
+  setting_Want_Assertions_Signed: 'Require Signed Assertions',
+  setting_Sign_AuthnRequest: 'Sign AuthnRequest',
+  setting_Signature_Algorithm: 'Signature Algorithm',
+  setting_Clock_Skew_Seconds: 'Clock Skew (seconds)',
+  setting_Claim_Username: 'Username Attribute',
+  setting_Claim_Email: 'Email Attribute',
+  setting_Claim_Display_Name: 'Display Name Attribute',
+  setting_Claim_Groups: 'Groups Attribute',
+  setting_IdP_Initiated_Enabled: 'Allow IdP-Initiated SSO',
+  setting_JIT_Provisioning_Enabled: 'Enable JIT Provisioning',
+  setting_Login_Redirect_URL: 'Post-Login Redirect URL',
+  setting_Saml_Login_Enable_doc:
+    'Enable SAML 2.0 single sign-on login',
+  setting_Saml_Sp_Entity_Id_doc:
+    'Service Provider unique identifier. Recommended to use the ACS base URL, e.g. https://tapdata.example.com/api/sso/saml',
+  setting_Saml_Sp_Acs_Url_doc:
+    'Assertion Consumer Service URL that receives the SAML response. Fixed as https://<your-domain>/api/sso/saml/acs',
+  setting_Saml_Sp_Slo_Url_doc:
+    'Single Logout (SLO) URL advertised in the SP metadata, used to receive the IdP LogoutRequest/LogoutResponse. Fixed as https://<your-domain>/api/sso/saml/slo',
+  setting_Saml_Sp_Private_Key_doc:
+    'Service Provider private key (encrypted at rest, write-only). Generated together with the SP certificate via "Generate Key Pair".',
+  setting_Saml_Sp_Certificate_doc:
+    'Service Provider certificate (public key) in PEM format, included in the exported SP metadata. Generate it via "Generate Key Pair".',
+  setting_Saml_Idp_Entity_Id_doc:
+    'Identity Provider Entity ID. Auto-filled by "Import IdP Metadata".',
+  setting_Saml_Idp_Sso_Url_doc:
+    'Identity Provider SSO (login) URL. ADFS example: https://adfs.example.com/adfs/ls/',
+  setting_Saml_Idp_Slo_Url_doc:
+    'Identity Provider Single Logout (SLO) URL. ADFS example: https://adfs.example.com/adfs/ls/?wa=wsignout1.0',
+  setting_Saml_Idp_Signing_Certificate_doc:
+    'Identity Provider signing certificate used to verify assertions. Auto-filled by "Import IdP Metadata".',
+  setting_Saml_Name_Id_Format_doc:
+    'SAML NameID format; leave blank for the default. Example: urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress',
+  setting_Saml_Want_Assertions_Signed_doc:
+    'Require the IdP to sign assertions; TapData verifies the signature with the IdP signing certificate and rejects unsigned/tampered assertions. ADFS signs by default, keep this on.',
+  setting_Saml_Sign_Authn_Request_doc:
+    'Sign the SP-generated AuthnRequest with the SP private key. Enable only when the IdP requires SP-signed requests.',
+  setting_Saml_Signature_Algorithm_doc:
+    'XML signature algorithm; leave blank for the default (rsa-sha256). Avoid weak algorithms such as SHA-1/MD5.',
+  setting_Saml_Clock_Skew_Seconds_doc:
+    'Allowed clock skew (seconds) when validating assertion time conditions. Default 120; ensure NTP sync across hosts.',
+  setting_Saml_Claim_Username_doc:
+    'SAML attribute mapped to the username. ADFS example: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name',
+  setting_Saml_Claim_Email_doc:
+    'SAML attribute mapped to the email. ADFS example: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress',
+  setting_Saml_Claim_Display_Name_doc:
+    'SAML attribute mapped to the display name. ADFS example: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname',
+  setting_Saml_Claim_Groups_doc:
+    'SAML attribute mapped to the user groups. ADFS example: http://schemas.xmlsoap.org/claims/Group',
+  setting_Saml_Idp_Initiated_Enabled_doc:
+    'Allow IdP-initiated SSO (disabled by default for security)',
+  setting_Saml_Jit_Provisioning_Enabled_doc:
+    'Just-in-time provisioning: auto-create users on first SSO login (disabled by default)',
+  setting_Saml_Login_Redirect_Url_doc:
+    'Post-login redirect URL after a successful SSO login',
+  setting_saml_generate_keypair: 'Generate Key Pair',
+  setting_saml_export_sp_metadata: 'Export SP Metadata',
+  setting_saml_import_idp_metadata: 'Import IdP Metadata',
+  setting_saml_import_idp_metadata_label: 'Upload the IdP metadata XML file',
+  setting_saml_import_idp_metadata_placeholder:
+    'Or paste the IdP metadata XML here',
+  setting_saml_keypair_generated:
+    'Key pair generated. The private key is stored encrypted; click Save to persist the certificate.',
+  setting_saml_import_success:
+    'IdP metadata parsed. IdP fields have been filled; click Save to persist.',
+  setting_saml_import_empty:
+    'Please upload or paste the IdP metadata XML first',
   setting_Appearance: 'Appearance',
   setting_enableEnvTag: 'Environment Tag',
   setting_envTagContent: 'Custom Text',
@@ -897,6 +975,37 @@ export default {
   user_list_freeze_error: 'Freeze failed',
   user_list_check_success: 'Pass the check',
   user_list_check_error: 'Check failed',
+  user_import_batch_import: 'Batch Import',
+  user_import_dialog_title: 'Batch Import Users',
+  user_import_dialog_tip:
+    'Download the template, fill in the user list, then upload to validate and import.',
+  user_import_download_template: 'Download Template',
+  user_import_template_download_failed: 'Failed to download the template',
+  user_import_select_file: 'Please select a file first',
+  user_import_mode: 'On duplicate user',
+  user_import_mode_skip: 'Skip',
+  user_import_mode_update: 'Update',
+  user_import_validate: 'Validate',
+  user_import_validating: 'Validating…',
+  user_import_importing: 'Importing…',
+  user_import_confirm: 'Confirm Import',
+  user_import_preview_title: 'Validation result',
+  user_import_count_total: 'Total {count}',
+  user_import_count_create: 'Create {count}',
+  user_import_count_update: 'Update {count}',
+  user_import_count_skip: 'Skip {count}',
+  user_import_count_failed: 'Failed {count}',
+  user_import_col_row: 'Row',
+  user_import_col_status: 'Status',
+  user_import_col_message: 'Message',
+  user_import_status_CREATE: 'Create',
+  user_import_status_UPDATE: 'Update',
+  user_import_status_SKIP: 'Skip',
+  user_import_status_FAILED: 'Failed',
+  user_import_result_summary:
+    'Import finished: created {create}, updated {update}, skipped {skip}, failed {failed}',
+  user_import_result_partial:
+    'Import partially failed: created {create}, updated {update}, skipped {skip}, failed {failed}',
   user_status_notVerified: 'Not Verified',
   user_status_notActivated: 'Not Activated',
   user_status_activated: 'Activated',
@@ -1295,6 +1404,15 @@ export default {
     'Any requirement, please contact us by scanning WeChat QR below.',
   app_signIn_slogan: 'Use your data, as easy as water from tap',
   app_signIn_signIn: 'Sign in',
+  app_signIn_samlLogin: 'Single Sign-On (SAML)',
+  app_signIn_ssoProcessing: 'Signing you in...',
+  app_signIn_ssoFailed: 'Single sign-on failed. Please try again.',
+  app_signIn_ssoUserDisabled:
+    'Your account is disabled or frozen. Please contact an administrator.',
+  app_signIn_ssoUserPending:
+    'Your account is pending approval. Please contact an administrator.',
+  app_signIn_ssoUserNotFound:
+    'No matching TapData account was found for this SSO identity.',
   app_signIn_keepSignIn: 'Keep signed in',
   app_signIn_email_placeholder: 'Enter your email',
   login_email_and_ad_placeholder: 'Enter your email/LDAP username',
@@ -2407,13 +2525,13 @@ export default {
   webhook_server_url_empty: 'Please enter the server URL',
   webhook_server_url_error: 'Please enter a valid server URL',
   webhook_custom_template: 'Custom Template',
-  webhook_custom_template_tip: `{'{'} 
+  webhook_custom_template_tip: `{'{'}
     "action": "TaskAlter",
     "hookId": "\${'{'}hookId{'}'}",
     "actionTime": "\${'{'}actionTime{'}'}",
     "title": "\${'{'}title{'}'}",
     "content": "\${'{'}content{'}'}",
-    "actionData": {'{'} 
+    "actionData": {'{'}
         "status": "\${'{'}actionData.status{'}'}", // Indicates the current alarm status: ING (ongoing), RECOVER (recovered), CLOSE (closed)
         "statusTxt": "\${'{'}actionData.statusTxt{'}'}", // Indicates the current alarm status text: ongoing, recovered, closed
         "level": "\${'{'}actionData.level{'}'}", // Alarm level: RECOVERY, NORMAL, WARNING, CRITICAL, EMERGENCY, ERROR, WARN, INFO

apps/daas/src/i18n/langs/zh-CN.js

@@ -814,6 +814,79 @@ export default {
   setting_Ldap_Bind_DN_doc:
     '用于进行身份验证的用户的完整Distinguished Name (DN)，即登录AD服务器的身份，示例：user@example.com',
   setting_Ldap_Bind_Password_doc: '与Bind DN对应的用户密码，用于身份验证',
+  setting_SAML: 'SAML登录设置',
+  setting_SAML_Login_Enable: '使用SAML登录',
+  setting_SP_Entity_ID: 'SP Entity ID',
+  setting_SP_ACS_URL: 'SP ACS 地址',
+  setting_SP_SLO_URL: 'SP SLO 地址',
+  setting_SP_Certificate: 'SP 证书',
+  setting_IdP_Entity_ID: 'IdP Entity ID',
+  setting_IdP_SSO_URL: 'IdP SSO 地址',
+  setting_IdP_SLO_URL: 'IdP SLO 地址',
+  setting_IdP_Signing_Certificate: 'IdP 签名证书',
+  setting_NameID_Format: 'NameID 格式',
+  setting_Want_Assertions_Signed: '要求断言签名',
+  setting_Sign_AuthnRequest: '签名 AuthnRequest',
+  setting_Signature_Algorithm: '签名算法',
+  setting_Clock_Skew_Seconds: '时钟偏差（秒）',
+  setting_Claim_Username: '用户名属性',
+  setting_Claim_Email: '邮箱属性',
+  setting_Claim_Display_Name: '显示名属性',
+  setting_Claim_Groups: '用户组属性',
+  setting_IdP_Initiated_Enabled: '允许 IdP 发起的 SSO',
+  setting_JIT_Provisioning_Enabled: '启用即时（JIT）预配',
+  setting_Login_Redirect_URL: '登录后跳转地址',
+  setting_Saml_Login_Enable_doc: '启用 SAML 2.0 单点登录',
+  setting_Saml_Sp_Entity_Id_doc:
+    'SP 唯一标识，建议用 ACS 的基地址。示例：https://tapdata.example.com/api/sso/saml',
+  setting_Saml_Sp_Acs_Url_doc:
+    'IdP 回发断言的地址，固定为 https://<你的域名>/api/sso/saml/acs',
+  setting_Saml_Sp_Slo_Url_doc:
+    'SP 元数据中公布的单点登出（SLO）地址，用于接收 IdP 的登出请求/响应，固定为 https://<你的域名>/api/sso/saml/slo',
+  setting_Saml_Sp_Private_Key_doc:
+    '服务提供方私钥（静态加密存储，只写），与 SP 证书通过「生成密钥对」成对生成',
+  setting_Saml_Sp_Certificate_doc:
+    'SP 证书（公钥，PEM），会被打包进导出的 SP 元数据。请通过「生成密钥对」生成',
+  setting_Saml_Idp_Entity_Id_doc: '身份提供方（IdP）实体 ID，由「导入 IdP 元数据」自动填充',
+  setting_Saml_Idp_Sso_Url_doc:
+    '身份提供方 SSO（登录）地址。ADFS 示例：https://adfs.example.com/adfs/ls/',
+  setting_Saml_Idp_Slo_Url_doc:
+    '身份提供方单点登出（SLO）地址。ADFS 示例：https://adfs.example.com/adfs/ls/?wa=wsignout1.0',
+  setting_Saml_Idp_Signing_Certificate_doc:
+    '身份提供方签名证书，用于验证断言签名，由「导入 IdP 元数据」自动填充',
+  setting_Saml_Name_Id_Format_doc:
+    'SAML NameID 格式；留空用默认。示例：urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress',
+  setting_Saml_Want_Assertions_Signed_doc:
+    '要求 IdP 对断言签名；TapData 会用 IdP 签名证书验签，签名不过即拒登，防止伪造/篡改。ADFS 默认签名，建议保持开启',
+  setting_Saml_Sign_Authn_Request_doc:
+    '用 SP 私钥对发给 IdP 的登录请求（AuthnRequest）签名；仅当 IdP 要求 SP 签名请求时开启',
+  setting_Saml_Signature_Algorithm_doc:
+    'XML 签名算法；留空用默认（rsa-sha256）。避免使用 SHA-1/MD5 等弱算法',
+  setting_Saml_Clock_Skew_Seconds_doc:
+    '校验断言时间条件时允许的时钟偏差（秒），默认 120；跨机注意 NTP 同步',
+  setting_Saml_Claim_Username_doc:
+    '映射为用户名的 SAML 属性名。ADFS 示例：http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name',
+  setting_Saml_Claim_Email_doc:
+    '映射为邮箱的 SAML 属性名。ADFS 示例：http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress',
+  setting_Saml_Claim_Display_Name_doc:
+    '映射为显示名的 SAML 属性名。ADFS 示例：http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname',
+  setting_Saml_Claim_Groups_doc:
+    '映射为用户组的 SAML 属性名。ADFS 示例：http://schemas.xmlsoap.org/claims/Group',
+  setting_Saml_Idp_Initiated_Enabled_doc:
+    '允许 IdP 发起的 SSO（出于安全考虑默认关闭）',
+  setting_Saml_Jit_Provisioning_Enabled_doc:
+    '即时（JIT）预配：首次 SSO 登录时自动创建用户（默认关闭）',
+  setting_Saml_Login_Redirect_Url_doc: 'SSO 登录成功后的跳转地址',
+  setting_saml_generate_keypair: '生成密钥对',
+  setting_saml_export_sp_metadata: '导出 SP 元数据',
+  setting_saml_import_idp_metadata: '导入 IdP 元数据',
+  setting_saml_import_idp_metadata_label: '上传 IdP 元数据 XML 文件',
+  setting_saml_import_idp_metadata_placeholder: '或在此粘贴 IdP 元数据 XML',
+  setting_saml_keypair_generated:
+    '密钥对已生成，私钥已加密存储；点击「保存」以持久化证书',
+  setting_saml_import_success:
+    'IdP 元数据已解析，IdP 字段已回填；点击「保存」以持久化',
+  setting_saml_import_empty: '请先上传或粘贴 IdP 元数据 XML',
   setting_Appearance: '外观',
   setting_enableEnvTag: '环境标签',
   setting_envTagContent: '自定义文字',
@@ -843,6 +916,36 @@ export default {
   user_list_freeze_error: '冻结失败',
   user_list_check_success: '通过校验',
   user_list_check_error: '校验失败',
+  user_import_batch_import: '批量导入',
+  user_import_dialog_title: '批量导入用户',
+  user_import_dialog_tip: '下载模板并填写用户列表，然后上传进行校验和导入。',
+  user_import_download_template: '下载模板',
+  user_import_template_download_failed: '下载模板失败',
+  user_import_select_file: '请先选择文件',
+  user_import_mode: '用户已存在时',
+  user_import_mode_skip: '跳过',
+  user_import_mode_update: '更新',
+  user_import_validate: '校验',
+  user_import_validating: '正在校验…',
+  user_import_importing: '正在导入…',
+  user_import_confirm: '确认导入',
+  user_import_preview_title: '校验结果',
+  user_import_count_total: '共 {count}',
+  user_import_count_create: '新建 {count}',
+  user_import_count_update: '更新 {count}',
+  user_import_count_skip: '跳过 {count}',
+  user_import_count_failed: '失败 {count}',
+  user_import_col_row: '行号',
+  user_import_col_status: '状态',
+  user_import_col_message: '说明',
+  user_import_status_CREATE: '新建',
+  user_import_status_UPDATE: '更新',
+  user_import_status_SKIP: '跳过',
+  user_import_status_FAILED: '失败',
+  user_import_result_summary:
+    '导入完成：新建 {create}，更新 {update}，跳过 {skip}，失败 {failed}',
+  user_import_result_partial:
+    '导入部分失败：新建 {create}，更新 {update}，跳过 {skip}，失败 {failed}',
   user_status_notVerified: '未验证',
   user_status_notActivated: '未激活',
   user_status_activated: '已激活',
@@ -1222,6 +1325,12 @@ export default {
     '请扫描下方企业微信二维码, 联系我们获取支持',
   app_signIn_slogan: '像自来水一样方便地使用您的数据',
   app_signIn_signIn: '登录',
+  app_signIn_samlLogin: '单点登录 (SAML)',
+  app_signIn_ssoProcessing: '正在登录...',
+  app_signIn_ssoFailed: '单点登录失败，请重试。',
+  app_signIn_ssoUserDisabled: '账号已被冻结或禁用，请联系管理员。',
+  app_signIn_ssoUserPending: '账号正在等待审批，请联系管理员。',
+  app_signIn_ssoUserNotFound: '未找到与此 SSO 身份匹配的 TapData 账号。',
   app_signIn_keepSignIn: '保持登录状态',
   app_signIn_email_placeholder: '请输入邮箱',
   login_email_and_ad_placeholder: '请输入邮箱/LDAP 用户名',