feat: add Memind analytics admin and Umami SSO

server/app.mjs

@@ -1,4 +1,5 @@
 import fs from 'node:fs';
+import crypto from 'node:crypto';
 import path from 'node:path';
 import { spawn } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
@@ -220,6 +221,17 @@ export function createAdminApp(services) {
     next();
   }
 
+  adminApi.get('/analytics/sso', requireAdmin, async (req, res) => {
+    const sharedSecret = process.env.MEMIND_UMAMI_SSO_SECRET?.trim();
+    if (!sharedSecret) return res.status(503).json({ message: '未配置 Umami 单点登录密钥' });
+    const config = loadMindSpaceConfig ? await loadMindSpaceConfig(pool) : null;
+    const baseUrl = String(config?.analytics?.analyticsUrl || process.env.UMAMI_URL || 'http://127.0.0.1:3100').replace(/\/$/, '');
+    const username = process.env.UMAMI_SSO_USERNAME?.trim() || 'admin';
+    const encoded = Buffer.from(JSON.stringify({ username, exp: Math.floor(Date.now() / 1000) + 60, nonce: crypto.randomUUID() })).toString('base64url');
+    const signature = crypto.createHmac('sha256', sharedSecret).update(encoded).digest('base64url');
+    res.json({ url: `${baseUrl}/auth/memind?ticket=${encoded}.${signature}` });
+  });
+
   adminApi.get('/users', requireAdmin, async (req, res) => {
     const result = await userAuth.listUsers({
       page: Number(req.query.page) || 1,
@@ -325,6 +337,7 @@ export function createAdminApp(services) {
     if (!updateMindSpaceConfig) return res.status(503).json({ message: 'MindSpace 配置未启用' });
     const result = await updateMindSpaceConfig(pool, {
       publicPageLimit: req.body?.publicPageLimit,
+      analytics: req.body?.analytics,
     });
     res.json({ config: result });
   });