v1.0.0

[1.0.0] - 2026-10-28

Added

• SForum identity provider adapter (sforum.connect.auth) for Authorization Code + PKCE S256
  against a configurable SForum site (default https://bbs.dalao.me).
• Token exchange speaks the SForum public-unsafe contract: a JSON body plus the csrf_ cookie
  and X-Csrf-Token double submit obtained from /api/oauth/csrf.
• Login, registration, and account-linking operations; provider.probe with the site's
  /api/oauth/docs and an authorize-endpoint fallback for older providers.
• Settings document with base_url, client_id, and client_secret; the base URL is prefilled
  with the official site and normalized (trailing slashes, pasted /api/oauth, path prefixes).
• Bounded, redirect-free HTTP client; access tokens are dropped after identity proof; every
  public error carries a stable reason and a redacted message.
• Brand assets built from the official SForum logo mark, plus CI/release pipelines and
  scripts/prepare-package.sh.

安装

1. 下载与服务器平台匹配的压缩包（linux_amd64 / linux_arm64 / darwin_arm64 / darwin_amd64），校验 sha256sum -c SHA256SUMS。
2. 装到 SForum：后台「插件管理 → 安装插件」上传 zip；或解压到某个外部源根的 plugins/sforum.connect/。
3. 后台启用 SForum Connect，按宿主提示完成一次 exact-artifact 信任确认。
4. 在远端 SForum 站点（默认 https://bbs.dalao.me）的「设置 → OAuth 应用」创建应用，回调填「登录方式」页显示的回调 URL。
5. 回到「登录方式」填 client_id/client_secret，运行探测，再开启登录、注册与账号绑定。

每个压缩包内的清单摘要与其中可执行文件一一对应，跨平台包不可混用。

兼容性

使用宿主 Protocol V2（sforum.host@2）、Manifest V3 与 identity.runtime@1，需要 SForum >=3.0.0。
远端需要 SForum OAuth2 Provider；旧版本没有 /api/oauth/docs 时探测会走兜底路径。