ooderAgent 龙虾时代的统一认证体系

{
  "header": {
    "alg": "RS256",
    "typ": "JWT",
    "kid": "jdsserver-key-001"
  },
  "payload": {
    "sub": "user-001",
    "iss": "jdsserver",
    "aud": "ooderagent",
    "exp": 1712851200,
    "iat": 1712764800,
    "jti": "token-uuid-001",
    "type": "USER",
    "mcpAgentId": "mcp-home-001",
    "networkId": "langxia-home-001",
    "bindingType": "HOME",
    "permissions": ["read", "write", "execute"]
  },
  "signature": "..."
}

public class UserMcpAgentBinding {
    private String bindingId;           // 绑定ID
    private String userId;              // 用户ID
    private String mcpAgentId;          // mcpAgent ID
    private String networkId;           // 龙虾网络ID
    private String bindingType;         // 绑定类型: HOME/COMPANY/CLIENT/CLOUD
    private String bindingName;         // 绑定名称 (如"家里的Agent")
    private String status;              // 状态: ACTIVE/INACTIVE
    private Long bindTime;              // 绑定时间
    private Long unbindTime;            // 解绑时间
    private Map<String, Object> metadata; // 元数据
}

public interface NorthboundAuthProtocol {
    
    // 用户认证
    AuthResult authenticateUser(String username, String password);
    
    // mcpAgent 网络认证
    AuthResult authenticateMcpAgent(String mcpAgentId, String secret);
    
    // mcpAgent 注册
    RegisterResult registerMcpAgent(String mcpAgentName, String networkType);
    
    // Token 验证
    TokenInfo validateToken(String token);
    
    // Token 刷新
    AuthResult refreshToken(String token);
    
    // Token 注销
    void revokeToken(String token);
    
    // 权限查询
    List<String> getPermissions(String subjectId, String resourceType, String resourceId);
}

public class AgentSessionDTO {
    private String agentId;             // Agent ID
    private String sessionToken;        // 会话 Token (来自 jdsserver)
    private String agentName;           // Agent 名称
    private String agentType;           // Agent 类型
    private String status;              // 状态
    private long loginTime;             // 登录时间
    private long lastHeartbeat;         // 最后心跳
    private long expireTime;            // 过期时间
    private String sceneGroupId;        // 场景组ID
    
    // v1.0.0 新增字段
    private String mcpAgentId;          // 所属 mcpAgent ID
    private String networkId;           // 所属龙虾网络ID
    private String userId;              // 所属用户ID (通过绑定关系)
    private String authSource;          // 认证来源: jdsserver
    private String jdsToken;            // jdsserver 颁发的原始 Token
    private String bindingType;         // 绑定类型
}

public class AgentAuditLog {
    private String logId;               // 日志ID
    private String agentId;             // Agent ID
    private String mcpAgentId;          // mcpAgent ID
    private String networkId;           // 龙虾网络ID
    private String userId;              // 用户ID (通过绑定关系)
    private String action;              // 操作类型
    private String resourceType;        // 资源类型
    private String resourceId;          // 资源ID
    private Map<String, Object> params; // 操作参数
    private Object result;              // 操作结果
    private Boolean success;            // 是否成功
    private String errorMessage;        // 错误信息
    private Long timestamp;             // 时间戳
    private String ipAddress;           // IP 地址
    private String traceId;             // 追踪ID
}