POST /auth/sso/initiate
根据指定的SSO提供商（SAML或OIDC）生成授权URL与state参数，通过PKCE和CSRF state保护，引导用户跳转至企业身份提供商进行认证。参考：SAML 2.0 Core §3.4、OpenID Connect Core 1.0 §3、RFC 7636 (PKCE)。
身份认证 `bearerAuth` application/json
Request Body
Schema: dto.SSOInitiateRequest
| Field | Type | Required | Example | Constraints | Description |
|---|
provider |
string |
Yes |
saml |
|
Provider |
return_url |
string |
No |
https://app.example.com/callback |
|
Return URL |
tenant_id |
string |
No |
tenant-001 |
|
Tenant ID |
Referenced Schemas
dto.SSOInitiateResponse
SSO登录启动响应
| Field | Type | Required | Example | Constraints | Description |
|---|
auth_url |
string |
No |
|
|
Authorization URL |
provider |
string |
No |
|
|
Provider |
return_url |
string |
No |
|
|
Return URL |
state |
string |
No |
|
|
State parameter |
tenant_id |
string |
No |
|
|
Tenant ID |
gitee_com_linmes_authms_base_dto.SimpleResponse
| Field | Type | Required | Example | Constraints | Description |
|---|
code |
integer |
No |
|
|
|
message |
string |
No |
|
|
|
timestamp |
string |
No |
|
|
|