feat: integrate ZYT admin with IAM Hub

server/app/adminapi/validate/LoginValidate.php

@@ -60,7 +60,7 @@ class LoginValidate extends BaseValidate
         // 任一不满足都走原始密码校验。每次免密登录都会记一条 warning 日志，便于发现误开。
         if (self::isLocalDebugLoginBypassEnabled()) {
             $adminInfo = Admin::where('account', '=', $data['account'])
-                ->field(['password,disable'])
+                ->field(['password,disable,iam_managed'])
                 ->findOrEmpty();
             if ($adminInfo->isEmpty()) {
                 return '账号不存在';
@@ -68,6 +68,9 @@ class LoginValidate extends BaseValidate
             if ((int)($adminInfo['disable'] ?? 0) === 1) {
                 return '账号已禁用';
             }
+            if ((int) ($adminInfo['iam_managed'] ?? 0) === 1) {
+                return '请使用公司员工统一登录';
+            }
             Log::warning(sprintf(
                 '[LOCAL_DEBUG] login bypass password: account=%s, ip=%s',
                 (string)($data['account'] ?? ''),
@@ -96,7 +99,7 @@ class LoginValidate extends BaseValidate
         }
 
         $adminInfo = Admin::where('account', '=', $data['account'])
-            ->field(['password,disable'])
+            ->field(['password,disable,iam_managed'])
             ->findOrEmpty();
 
         if ($adminInfo->isEmpty()) {
@@ -107,6 +110,10 @@ class LoginValidate extends BaseValidate
             return '账号已禁用';
         }
 
+        if ((int) ($adminInfo['iam_managed'] ?? 0) === 1) {
+            return '请使用公司员工统一登录';
+        }
+
         if (empty($adminInfo['password'])) {
             $adminAccountSafeCache->record();
             return '账号不存在';
@@ -143,4 +150,4 @@ class LoginValidate extends BaseValidate
         return in_array($flag, ['1', 'true', 'yes', 'on'], true);
     }
 
-}
+}