feat(auth): 添加用户注册开关功能

- 在系统设置中新增 allowRegister 配置项控制用户注册
- 实现注册接口的开关检查机制
- 登录页面根据注册开关动态显示或隐藏注册选项
- 首次 Linux.do 登录创建用户时也受注册开关限制
- 更新系统配置文档说明新的认证配置项

docs/system-settings.md

@@ -22,6 +22,12 @@
     "defaultTextModel": "gpt-5.5",
     "systemPrompt": "",
     "allowCustomChannel": true
+  },
+  "auth": {
+    "allowRegister": true,
+    "linuxDo": {
+      "enabled": false
+    }
   }
 }
 ```
@@ -29,6 +35,7 @@
 | 字段 | 类型 | 说明 |
 | --- | --- | --- |
 | `modelChannel` | object | 模型渠道公开配置组 |
+| `auth` | object | 认证相关公开配置 |
 
 `modelChannel` 字段：
 
@@ -56,6 +63,13 @@
 | 云端渠道 | 使用后端 `/api/v1/*` 代理接口，请求会按模型名匹配 `private.value.channels` 中的可用渠道 |
 | 本地直连 | 默认可选；`allowCustomChannel` 关闭后不可选，用户在浏览器本地配置 `baseUrl`、`apiKey` 和模型列表后直接请求模型接口 |
 
+`auth` 字段：
+
+| 字段 | 类型 | 说明 |
+| --- | --- | --- |
+| `allowRegister` | boolean | 是否允许用户注册，默认允许；关闭后注册入口隐藏，注册接口拒绝新用户创建 |
+| `linuxDo.enabled` | boolean | 是否开启 Linux.do 登录 |
+
 ## private.value
 
 ```json

model/setting.go

@@ -46,7 +46,8 @@ type PublicSetting struct {
 }
 
 type PublicAuthSetting struct {
-	LinuxDo PublicLinuxDoAuthSetting `json:"linuxDo"`
+	AllowRegister *bool                    `json:"allowRegister"`
+	LinuxDo       PublicLinuxDoAuthSetting `json:"linuxDo"`
 }
 
 type PublicLinuxDoAuthSetting struct {

service/auth.go

@@ -59,6 +59,14 @@ func EnsureDefaultAdmin() error {
 }
 
 func Register(username string, password string) (model.AuthSession, error) {
+	settings, err := repository.GetSettings()
+	if err != nil {
+		return model.AuthSession{}, err
+	}
+	normalizedSettings := normalizeSettings(settings)
+	if normalizedSettings.Public.Auth.AllowRegister != nil && !*normalizedSettings.Public.Auth.AllowRegister {
+		return model.AuthSession{}, safeMessageError{message: "当前未开放注册"}
+	}
 	username = strings.TrimSpace(username)
 	if strings.ContainsAny(username, " \t\r\n") {
 		return model.AuthSession{}, safeMessageError{message: "用户名不能包含空格"}
@@ -163,6 +171,9 @@ func LoginWithLinuxDo(r *http.Request, code string, state string) (model.AuthSes
 		return model.AuthSession{}, redirect, err
 	}
 	if !ok {
+		if settings.Public.Auth.AllowRegister != nil && !*settings.Public.Auth.AllowRegister {
+			return model.AuthSession{}, redirect, safeMessageError{message: "当前未开放注册"}
+		}
 		user = model.User{
 			ID:          newID("user"),
 			Username:    linuxDoUsername(profile.Username, linuxDoID),

service/settings.go

@@ -78,6 +78,10 @@ func normalizePublicSetting(setting model.PublicSetting) model.PublicSetting {
 		enabled := true
 		setting.ModelChannel.AllowCustomChannel = &enabled
 	}
+	if setting.Auth.AllowRegister == nil {
+		enabled := true
+		setting.Auth.AllowRegister = &enabled
+	}
 	return setting
 }
 

web/src/app/(admin)/admin/settings/page.tsx

@@ -36,7 +36,7 @@ const emptySettings: AdminSettings = {
             systemPrompt: "",
             allowCustomChannel: true,
         },
-        auth: { linuxDo: { enabled: false } },
+        auth: { allowRegister: true, linuxDo: { enabled: false } },
     },
     private: { channels: [], promptSync: { enabled: true, cron: "*/5 * * * *" }, auth: { linuxDo: { clientId: "", clientSecret: "" } } },
 };
@@ -371,6 +371,11 @@ export default function AdminSettingsPage() {
                                             <Switch />
                                         </Form.Item>
                                     </Col>
+                                    <Col span={24}>
+                                        <Form.Item name={["public", "auth", "allowRegister"]} label="是否允许用户注册" extra="关闭后隐藏注册入口，注册接口也会拒绝新用户创建" valuePropName="checked">
+                                            <Switch />
+                                        </Form.Item>
+                                    </Col>
                                     <Col span={24}>
                                         <Typography.Title level={5}>模型算力点</Typography.Title>
                                         <Table
@@ -689,6 +694,7 @@ function normalizePublicSetting(setting: Partial<AdminSettings["public"]> = {}):
             modelCosts: normalizeModelCosts(setting.modelChannel?.modelCosts || []),
         },
         auth: {
+            allowRegister: setting.auth?.allowRegister !== false,
             linuxDo: {
                 enabled: setting.auth?.linuxDo?.enabled === true,
             },

web/src/app/(user)/login/page.tsx

@@ -32,6 +32,7 @@ function LoginContent() {
     const setSession = useUserStore((state) => state.setSession);
     const isLoading = useUserStore((state) => state.isLoading);
     const linuxDoEnabled = useConfigStore((state) => state.publicSettings?.auth?.linuxDo?.enabled === true);
+    const allowRegister = useConfigStore((state) => state.publicSettings?.auth?.allowRegister !== false);
     const [mode, setMode] = useState<"login" | "register">("login");
     const redirect = searchParams.get("redirect") || "/";
 
@@ -48,8 +49,16 @@ function LoginContent() {
         });
     }, [message, redirect, router, searchParams, setSession]);
 
+    useEffect(() => {
+        if (!allowRegister && mode === "register") setMode("login");
+    }, [allowRegister, mode]);
+
     const submit = async (values: LoginFormValues) => {
         try {
+            if (mode === "register" && !allowRegister) {
+                message.error("当前未开放注册");
+                return;
+            }
             if (mode === "register" && values.password !== values.confirmPassword) {
                 message.error("两次输入的密码不一致");
                 return;
@@ -87,10 +96,7 @@ function LoginContent() {
                             block
                             value={mode}
                             onChange={(value) => setMode(value as "login" | "register")}
-                            options={[
-                                { label: "登录", value: "login" },
-                                { label: "注册", value: "register" },
-                            ]}
+                            options={allowRegister ? [{ label: "登录", value: "login" }, { label: "注册", value: "register" }] : [{ label: "登录", value: "login" }]}
                         />
                     </Form.Item>
                     <Form.Item name="username" label={<span className="font-medium text-stone-800 dark:text-stone-200">用户名</span>} rules={[{ required: true, message: "请输入用户名" }]}>
@@ -104,7 +110,7 @@ function LoginContent() {
                             <Input.Password prefix={<LockOutlined />} autoComplete="new-password" />
                         </Form.Item>
                     ) : null}
-                    <Space direction="vertical" size={12} style={{ width: "100%" }}>
+                    <Space orientation="vertical" size={12} style={{ width: "100%" }}>
                         <Button block type="primary" htmlType="submit" loading={isLoading}>
                             {mode === "register" ? "注册" : "登录"}
                         </Button>

web/src/services/api/admin.ts

@@ -186,6 +186,7 @@ export type AdminModelCost = {
 export type AdminPublicSettings = {
     modelChannel: AdminPublicModelChannelSettings;
     auth: {
+        allowRegister: boolean;
         linuxDo: {
             enabled: boolean;
         };