Skip to content

Tap 12033 #625

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
feynmx merged 5 commits into from
Aug 24, 2026
Merged

Tap 12033 #625

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
68386a1
feat: TAP-12033 support sso login
mnianqi Aug 17, 2026
42938da
feat: TAP-12033 add sp slo url
mnianqi Aug 20, 2026
7261361
feat: TAP-12033 hidden batch import user button when saml is not enabled
mnianqi Aug 20, 2026
bd04e95
feat: TAP-12033 resolve changes request
mnianqi Aug 21, 2026
c46fe2d
feat: TAP-12033 close import dialog when there is no failure
mnianqi Aug 21, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
122 changes: 120 additions & 2 deletions apps/daas/src/i18n/langs/en.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -868,6 +868,84 @@ export default {
'The full Distinguished Name (DN) of the user for authentication, i.e., the identity used to log in to the AD server, e.g., user@example.com',
setting_Ldap_Bind_Password_doc:
'The password corresponding to the Bind DN, used for authentication',
setting_SAML: 'SAML Authentication',
setting_SAML_Login_Enable: 'Use SAML Login',
setting_SP_Entity_ID: 'SP Entity ID',
setting_SP_ACS_URL: 'SP ACS URL',
setting_SP_SLO_URL: 'SP SLO URL',
setting_SP_Certificate: 'SP Certificate',
setting_IdP_Entity_ID: 'IdP Entity ID',
setting_IdP_SSO_URL: 'IdP SSO URL',
setting_IdP_SLO_URL: 'IdP SLO URL',
setting_IdP_Signing_Certificate: 'IdP Signing Certificate',
setting_NameID_Format: 'NameID Format',
setting_Want_Assertions_Signed: 'Require Signed Assertions',
setting_Sign_AuthnRequest: 'Sign AuthnRequest',
setting_Signature_Algorithm: 'Signature Algorithm',
setting_Clock_Skew_Seconds: 'Clock Skew (seconds)',
setting_Claim_Username: 'Username Attribute',
setting_Claim_Email: 'Email Attribute',
setting_Claim_Display_Name: 'Display Name Attribute',
setting_Claim_Groups: 'Groups Attribute',
setting_IdP_Initiated_Enabled: 'Allow IdP-Initiated SSO',
setting_JIT_Provisioning_Enabled: 'Enable JIT Provisioning',
setting_Login_Redirect_URL: 'Post-Login Redirect URL',
setting_Saml_Login_Enable_doc:
'Enable SAML 2.0 single sign-on login',
setting_Saml_Sp_Entity_Id_doc:
'Service Provider unique identifier. Recommended to use the ACS base URL, e.g. https://tapdata.example.com/api/sso/saml',
setting_Saml_Sp_Acs_Url_doc:
'Assertion Consumer Service URL that receives the SAML response. Fixed as https://<your-domain>/api/sso/saml/acs',
setting_Saml_Sp_Slo_Url_doc:
'Single Logout (SLO) URL advertised in the SP metadata, used to receive the IdP LogoutRequest/LogoutResponse. Fixed as https://<your-domain>/api/sso/saml/slo',
setting_Saml_Sp_Private_Key_doc:
'Service Provider private key (encrypted at rest, write-only). Generated together with the SP certificate via "Generate Key Pair".',
setting_Saml_Sp_Certificate_doc:
'Service Provider certificate (public key) in PEM format, included in the exported SP metadata. Generate it via "Generate Key Pair".',
setting_Saml_Idp_Entity_Id_doc:
'Identity Provider Entity ID. Auto-filled by "Import IdP Metadata".',
setting_Saml_Idp_Sso_Url_doc:
'Identity Provider SSO (login) URL. ADFS example: https://adfs.example.com/adfs/ls/',
setting_Saml_Idp_Slo_Url_doc:
'Identity Provider Single Logout (SLO) URL. ADFS example: https://adfs.example.com/adfs/ls/?wa=wsignout1.0',
setting_Saml_Idp_Signing_Certificate_doc:
'Identity Provider signing certificate used to verify assertions. Auto-filled by "Import IdP Metadata".',
setting_Saml_Name_Id_Format_doc:
'SAML NameID format; leave blank for the default. Example: urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress',
setting_Saml_Want_Assertions_Signed_doc:
'Require the IdP to sign assertions; TapData verifies the signature with the IdP signing certificate and rejects unsigned/tampered assertions. ADFS signs by default, keep this on.',
setting_Saml_Sign_Authn_Request_doc:
'Sign the SP-generated AuthnRequest with the SP private key. Enable only when the IdP requires SP-signed requests.',
setting_Saml_Signature_Algorithm_doc:
'XML signature algorithm; leave blank for the default (rsa-sha256). Avoid weak algorithms such as SHA-1/MD5.',
setting_Saml_Clock_Skew_Seconds_doc:
'Allowed clock skew (seconds) when validating assertion time conditions. Default 120; ensure NTP sync across hosts.',
setting_Saml_Claim_Username_doc:
'SAML attribute mapped to the username. ADFS example: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name',
setting_Saml_Claim_Email_doc:
'SAML attribute mapped to the email. ADFS example: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress',
setting_Saml_Claim_Display_Name_doc:
'SAML attribute mapped to the display name. ADFS example: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname',
setting_Saml_Claim_Groups_doc:
'SAML attribute mapped to the user groups. ADFS example: http://schemas.xmlsoap.org/claims/Group',
setting_Saml_Idp_Initiated_Enabled_doc:
'Allow IdP-initiated SSO (disabled by default for security)',
setting_Saml_Jit_Provisioning_Enabled_doc:
'Just-in-time provisioning: auto-create users on first SSO login (disabled by default)',
setting_Saml_Login_Redirect_Url_doc:
'Post-login redirect URL after a successful SSO login',
setting_saml_generate_keypair: 'Generate Key Pair',
setting_saml_export_sp_metadata: 'Export SP Metadata',
setting_saml_import_idp_metadata: 'Import IdP Metadata',
setting_saml_import_idp_metadata_label: 'Upload the IdP metadata XML file',
setting_saml_import_idp_metadata_placeholder:
'Or paste the IdP metadata XML here',
setting_saml_keypair_generated:
'Key pair generated. The private key is stored encrypted; click Save to persist the certificate.',
setting_saml_import_success:
'IdP metadata parsed. IdP fields have been filled; click Save to persist.',
setting_saml_import_empty:
'Please upload or paste the IdP metadata XML first',
setting_Appearance: 'Appearance',
setting_enableEnvTag: 'Environment Tag',
setting_envTagContent: 'Custom Text',
Expand Down Expand Up @@ -897,6 +975,37 @@ export default {
user_list_freeze_error: 'Freeze failed',
user_list_check_success: 'Pass the check',
user_list_check_error: 'Check failed',
user_import_batch_import: 'Batch Import',
user_import_dialog_title: 'Batch Import Users',
user_import_dialog_tip:
'Download the template, fill in the user list, then upload to validate and import.',
user_import_download_template: 'Download Template',
user_import_template_download_failed: 'Failed to download the template',
user_import_select_file: 'Please select a file first',
user_import_mode: 'On duplicate user',
user_import_mode_skip: 'Skip',
user_import_mode_update: 'Update',
user_import_validate: 'Validate',
user_import_validating: 'Validating…',
user_import_importing: 'Importing…',
user_import_confirm: 'Confirm Import',
user_import_preview_title: 'Validation result',
user_import_count_total: 'Total {count}',
user_import_count_create: 'Create {count}',
user_import_count_update: 'Update {count}',
user_import_count_skip: 'Skip {count}',
user_import_count_failed: 'Failed {count}',
user_import_col_row: 'Row',
user_import_col_status: 'Status',
user_import_col_message: 'Message',
user_import_status_CREATE: 'Create',
user_import_status_UPDATE: 'Update',
user_import_status_SKIP: 'Skip',
user_import_status_FAILED: 'Failed',
user_import_result_summary:
'Import finished: created {create}, updated {update}, skipped {skip}, failed {failed}',
user_import_result_partial:
'Import partially failed: created {create}, updated {update}, skipped {skip}, failed {failed}',
user_status_notVerified: 'Not Verified',
user_status_notActivated: 'Not Activated',
user_status_activated: 'Activated',
Expand Down Expand Up @@ -1295,6 +1404,15 @@ export default {
'Any requirement, please contact us by scanning WeChat QR below.',
app_signIn_slogan: 'Use your data, as easy as water from tap',
app_signIn_signIn: 'Sign in',
app_signIn_samlLogin: 'Single Sign-On (SAML)',
app_signIn_ssoProcessing: 'Signing you in...',
app_signIn_ssoFailed: 'Single sign-on failed. Please try again.',
app_signIn_ssoUserDisabled:
'Your account is disabled or frozen. Please contact an administrator.',
app_signIn_ssoUserPending:
'Your account is pending approval. Please contact an administrator.',
app_signIn_ssoUserNotFound:
'No matching TapData account was found for this SSO identity.',
app_signIn_keepSignIn: 'Keep signed in',
app_signIn_email_placeholder: 'Enter your email',
login_email_and_ad_placeholder: 'Enter your email/LDAP username',
Expand Down Expand Up @@ -2407,13 +2525,13 @@ export default {
webhook_server_url_empty: 'Please enter the server URL',
webhook_server_url_error: 'Please enter a valid server URL',
webhook_custom_template: 'Custom Template',
webhook_custom_template_tip: `{'{'}
webhook_custom_template_tip: `{'{'}
"action": "TaskAlter",
"hookId": "\${'{'}hookId{'}'}",
"actionTime": "\${'{'}actionTime{'}'}",
"title": "\${'{'}title{'}'}",
"content": "\${'{'}content{'}'}",
"actionData": {'{'}
"actionData": {'{'}
"status": "\${'{'}actionData.status{'}'}", // Indicates the current alarm status: ING (ongoing), RECOVER (recovered), CLOSE (closed)
"statusTxt": "\${'{'}actionData.statusTxt{'}'}", // Indicates the current alarm status text: ongoing, recovered, closed
"level": "\${'{'}actionData.level{'}'}", // Alarm level: RECOVERY, NORMAL, WARNING, CRITICAL, EMERGENCY, ERROR, WARN, INFO
Expand Down
109 changes: 109 additions & 0 deletions apps/daas/src/i18n/langs/zh-CN.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -814,6 +814,79 @@ export default {
setting_Ldap_Bind_DN_doc:
'用于进行身份验证的用户的完整Distinguished Name (DN)，即登录AD服务器的身份，示例：user@example.com',
setting_Ldap_Bind_Password_doc: '与Bind DN对应的用户密码，用于身份验证',
setting_SAML: 'SAML登录设置',
setting_SAML_Login_Enable: '使用SAML登录',
setting_SP_Entity_ID: 'SP Entity ID',
setting_SP_ACS_URL: 'SP ACS 地址',
setting_SP_SLO_URL: 'SP SLO 地址',
setting_SP_Certificate: 'SP 证书',
setting_IdP_Entity_ID: 'IdP Entity ID',
setting_IdP_SSO_URL: 'IdP SSO 地址',
setting_IdP_SLO_URL: 'IdP SLO 地址',
setting_IdP_Signing_Certificate: 'IdP 签名证书',
setting_NameID_Format: 'NameID 格式',
setting_Want_Assertions_Signed: '要求断言签名',
setting_Sign_AuthnRequest: '签名 AuthnRequest',
setting_Signature_Algorithm: '签名算法',
setting_Clock_Skew_Seconds: '时钟偏差（秒）',
setting_Claim_Username: '用户名属性',
setting_Claim_Email: '邮箱属性',
setting_Claim_Display_Name: '显示名属性',
setting_Claim_Groups: '用户组属性',
setting_IdP_Initiated_Enabled: '允许 IdP 发起的 SSO',
setting_JIT_Provisioning_Enabled: '启用即时（JIT）预配',
setting_Login_Redirect_URL: '登录后跳转地址',
setting_Saml_Login_Enable_doc: '启用 SAML 2.0 单点登录',
setting_Saml_Sp_Entity_Id_doc:
'SP 唯一标识，建议用 ACS 的基地址。示例：https://tapdata.example.com/api/sso/saml',
setting_Saml_Sp_Acs_Url_doc:
'IdP 回发断言的地址，固定为 https://<你的域名>/api/sso/saml/acs',
setting_Saml_Sp_Slo_Url_doc:
'SP 元数据中公布的单点登出（SLO）地址，用于接收 IdP 的登出请求/响应，固定为 https://<你的域名>/api/sso/saml/slo',
setting_Saml_Sp_Private_Key_doc:
'服务提供方私钥（静态加密存储，只写），与 SP 证书通过「生成密钥对」成对生成',
setting_Saml_Sp_Certificate_doc:
'SP 证书（公钥，PEM），会被打包进导出的 SP 元数据。请通过「生成密钥对」生成',
setting_Saml_Idp_Entity_Id_doc: '身份提供方（IdP）实体 ID，由「导入 IdP 元数据」自动填充',
setting_Saml_Idp_Sso_Url_doc:
'身份提供方 SSO（登录）地址。ADFS 示例：https://adfs.example.com/adfs/ls/',
setting_Saml_Idp_Slo_Url_doc:
'身份提供方单点登出（SLO）地址。ADFS 示例：https://adfs.example.com/adfs/ls/?wa=wsignout1.0',
setting_Saml_Idp_Signing_Certificate_doc:
'身份提供方签名证书，用于验证断言签名，由「导入 IdP 元数据」自动填充',
setting_Saml_Name_Id_Format_doc:
'SAML NameID 格式；留空用默认。示例：urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress',
setting_Saml_Want_Assertions_Signed_doc:
'要求 IdP 对断言签名；TapData 会用 IdP 签名证书验签，签名不过即拒登，防止伪造/篡改。ADFS 默认签名，建议保持开启',
setting_Saml_Sign_Authn_Request_doc:
'用 SP 私钥对发给 IdP 的登录请求（AuthnRequest）签名；仅当 IdP 要求 SP 签名请求时开启',
setting_Saml_Signature_Algorithm_doc:
'XML 签名算法；留空用默认（rsa-sha256）。避免使用 SHA-1/MD5 等弱算法',
setting_Saml_Clock_Skew_Seconds_doc:
'校验断言时间条件时允许的时钟偏差（秒），默认 120；跨机注意 NTP 同步',
setting_Saml_Claim_Username_doc:
'映射为用户名的 SAML 属性名。ADFS 示例：http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name',
setting_Saml_Claim_Email_doc:
'映射为邮箱的 SAML 属性名。ADFS 示例：http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress',
setting_Saml_Claim_Display_Name_doc:
'映射为显示名的 SAML 属性名。ADFS 示例：http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname',
setting_Saml_Claim_Groups_doc:
'映射为用户组的 SAML 属性名。ADFS 示例：http://schemas.xmlsoap.org/claims/Group',
setting_Saml_Idp_Initiated_Enabled_doc:
'允许 IdP 发起的 SSO（出于安全考虑默认关闭）',
setting_Saml_Jit_Provisioning_Enabled_doc:
'即时（JIT）预配：首次 SSO 登录时自动创建用户（默认关闭）',
setting_Saml_Login_Redirect_Url_doc: 'SSO 登录成功后的跳转地址',
setting_saml_generate_keypair: '生成密钥对',
setting_saml_export_sp_metadata: '导出 SP 元数据',
setting_saml_import_idp_metadata: '导入 IdP 元数据',
setting_saml_import_idp_metadata_label: '上传 IdP 元数据 XML 文件',
setting_saml_import_idp_metadata_placeholder: '或在此粘贴 IdP 元数据 XML',
setting_saml_keypair_generated:
'密钥对已生成，私钥已加密存储；点击「保存」以持久化证书',
setting_saml_import_success:
'IdP 元数据已解析，IdP 字段已回填；点击「保存」以持久化',
setting_saml_import_empty: '请先上传或粘贴 IdP 元数据 XML',
setting_Appearance: '外观',
setting_enableEnvTag: '环境标签',
setting_envTagContent: '自定义文字',
Expand Down Expand Up @@ -843,6 +916,36 @@ export default {
user_list_freeze_error: '冻结失败',
user_list_check_success: '通过校验',
user_list_check_error: '校验失败',
user_import_batch_import: '批量导入',
user_import_dialog_title: '批量导入用户',
user_import_dialog_tip: '下载模板并填写用户列表，然后上传进行校验和导入。',
user_import_download_template: '下载模板',
user_import_template_download_failed: '下载模板失败',
user_import_select_file: '请先选择文件',
user_import_mode: '用户已存在时',
user_import_mode_skip: '跳过',
user_import_mode_update: '更新',
user_import_validate: '校验',
user_import_validating: '正在校验…',
user_import_importing: '正在导入…',
user_import_confirm: '确认导入',
user_import_preview_title: '校验结果',
user_import_count_total: '共 {count}',
user_import_count_create: '新建 {count}',
user_import_count_update: '更新 {count}',
user_import_count_skip: '跳过 {count}',
user_import_count_failed: '失败 {count}',
user_import_col_row: '行号',
user_import_col_status: '状态',
user_import_col_message: '说明',
user_import_status_CREATE: '新建',
user_import_status_UPDATE: '更新',
user_import_status_SKIP: '跳过',
user_import_status_FAILED: '失败',
user_import_result_summary:
'导入完成：新建 {create}，更新 {update}，跳过 {skip}，失败 {failed}',
user_import_result_partial:
'导入部分失败：新建 {create}，更新 {update}，跳过 {skip}，失败 {failed}',
user_status_notVerified: '未验证',
user_status_notActivated: '未激活',
user_status_activated: '已激活',
Expand Down Expand Up @@ -1222,6 +1325,12 @@ export default {
'请扫描下方企业微信二维码, 联系我们获取支持',
app_signIn_slogan: '像自来水一样方便地使用您的数据',
app_signIn_signIn: '登录',
app_signIn_samlLogin: '单点登录 (SAML)',
app_signIn_ssoProcessing: '正在登录...',
app_signIn_ssoFailed: '单点登录失败，请重试。',
app_signIn_ssoUserDisabled: '账号已被冻结或禁用，请联系管理员。',
app_signIn_ssoUserPending: '账号正在等待审批，请联系管理员。',
app_signIn_ssoUserNotFound: '未找到与此 SSO 身份匹配的 TapData 账号。',
app_signIn_keepSignIn: '保持登录状态',
app_signIn_email_placeholder: '请输入邮箱',
login_email_and_ad_placeholder: '请输入邮箱/LDAP 用户名',
Expand Down
Loading
Loading