test: 给教育大模型的临时PR，不合并到主分支

.changeset/nine-windows-beg.md

@@ -0,0 +1,5 @@
+---
+"@scow/mis-web": patch
+---
+
+如果 scow 没有该用户，但认证系统中有，直接在 scow 中创建

.changeset/seven-glasses-rest.md

@@ -0,0 +1,8 @@
+---
+"@scow/gateway": minor
+"@scow/cli": minor
+"@scow/docs": minor
+"@scow/auth": patch
+---
+
+修复 scow 存在的 web 安全漏洞

.changeset/tame-cows-share.md

@@ -0,0 +1,6 @@
+---
+"@scow/gateway": minor
+"@scow/cli": minor
+---
+
+认证系统支持外部 url

apps/mis-web/src/auth/token.ts

@@ -36,9 +36,23 @@ export async function validateToken(token: string): Promise<UserInfo | undefined
 
   const client = getClient(UserServiceClient);
 
-  const userInfo: GetUserInfoResponse = await asyncClientCall(client, "getUserInfo", {
+  let userInfo: GetUserInfoResponse = await asyncClientCall(client, "getUserInfo", {
     userId: resp.identityId,
   });
+
+  if (!userInfo) {
+    await asyncClientCall(client, "addUser", {
+      name: resp.identityId,
+      tenantName: "default",
+      email: resp.identityId + "@scow.com",
+      identityId: resp.identityId,
+    });
+
+    userInfo = await asyncClientCall(client, "getUserInfo", {
+      userId: resp.identityId,
+    });
+  }
+
   return {
     accountAffiliations: userInfo.affiliations,
     identityId: resp.identityId,

libs/web/src/layouts/base/header/UserIndicator.tsx

@@ -45,7 +45,7 @@ const HiddenOnSmallScreen = styled.span`
 `;
 
 export const UserIndicator: React.FC<Props> = ({
-  user, logout, userLinks, languageId,
+  user, userLinks, languageId,
 }) => {
 
   return (
@@ -80,9 +80,9 @@ export const UserIndicator: React.FC<Props> = ({
                     >{link.text}</Link>,
                   });
                 }) : [],
-                { key: "logout",
-                  onClick: logout,
-                  label: getCurrentLangLibWebText(languageId, "userIndicatorLogout") },
+                // { key: "logout",
+                //   onClick: logout,
+                //   label: getCurrentLangLibWebText(languageId, "userIndicatorLogout") },
               ],
             }}
           >