From 191b69edb057ce74c94650659a5ae1c2b5aa9cf3 Mon Sep 17 00:00:00 2001
From: wangdan-fit2cloud <dan.wang@fit2cloud.com>
Date: Mon, 21 Sep 2026 10:11:13 +0800
Subject: [PATCH] feat: portal

---
 ui/src/api/API_README.md                      |   4 +
 .../admin/workspace/knowledge/knowledge.ts    |  16 ++
 ui/src/api/types/portal.ts                    |   1 +
 ui/src/views/VIEW_README.md                   |  18 +-
 ui/src/views/knowledge/KnowledgeView.vue      |  16 ++
 .../KeywordIndexKnowledgeAction.vue           |  33 +++
 .../knowledge-card/action-dropdown/index.ts   |   2 +
 .../KnowledgeMcpConfigDialog.vue              |  51 +++++
 .../McpConfigKnowledgeAction.vue              |  43 ++++
 .../portal-setting/PortalSettingView.vue      |  15 +-
 .../components/ButtonEditPortal.vue           |   6 +-
 .../components/ButtonPortalAuthSetting.vue    | 197 +++++++++++-------
 .../components/ButtonPortalCorsSetting.vue    |  37 +++-
 13 files changed, 346 insertions(+), 93 deletions(-)
 create mode 100644 ui/src/views/knowledge/knowledge-card/action-dropdown/KeywordIndexKnowledgeAction.vue
 create mode 100644 ui/src/views/knowledge/knowledge-card/action-dropdown/mcp-config-action/KnowledgeMcpConfigDialog.vue
 create mode 100644 ui/src/views/knowledge/knowledge-card/action-dropdown/mcp-config-action/McpConfigKnowledgeAction.vue

diff --git a/ui/src/api/API_README.md b/ui/src/api/API_README.md
index 66b1cfce0b9..625f882a544 100644
--- a/ui/src/api/API_README.md
+++ b/ui/src/api/API_README.md
@@ -149,6 +149,10 @@ v3 编辑表单提交 `{ name, description }`，标题上限 64、更新说明
 
 ### 知识库维护
 
+`getKnowledgeMcpConfig(knowledgeId)` 与 `postKnowledgeKeywordIndex(knowledgeId)` 为预留接口方法，
+目前不发送 HTTP 请求：前者返回空配置文本，后者模拟成功。后续确认后端协议后替换方法内部实现。
+MCP 入口加载配置后打开只读及复制弹窗；分词索引入口仅调用方法并在成功后提示“操作成功”。
+
 `exportKnowledgeExcel`、`exportKnowledgeZip`、`exportKnowledge` 分别通过 GET 请求知识库
 `/<knowledgeId>/export`、`export_zip`、`export_knowledge`，复用 `getExportFile` 下载。
 三种结果分别为文档 Excel、包含图片的文档 ZIP 和可导入创建的知识库 ZIP；优先使用服务端文件名。
diff --git a/ui/src/api/admin/workspace/knowledge/knowledge.ts b/ui/src/api/admin/workspace/knowledge/knowledge.ts
index 525cf059646..c22c35e4512 100644
--- a/ui/src/api/admin/workspace/knowledge/knowledge.ts
+++ b/ui/src/api/admin/workspace/knowledge/knowledge.ts
@@ -90,7 +90,23 @@ const postKnowledgeImport = (file: File, folderId: string) => {
   return post<FormData, { knowledge_id: string; type: KnowledgeItem['type'] }>(`${getPrefix()}/import_knowledge`, payload)
 }
 
+/** 获取知识库 MCP 配置详情，暂返回空配置供交互联调。 */
+const getKnowledgeMcpConfig = (knowledgeId: string): Promise<string> => {
+  // TODO 接入 MCP 配置查询接口，使用 knowledgeId 获取配置文本。
+  void knowledgeId
+  return Promise.resolve('')
+}
+
+/** 执行知识库分词索引，暂模拟成功供交互联调。 */
+const postKnowledgeKeywordIndex = (knowledgeId: string): Promise<void> => {
+  // TODO 接入分词索引接口，使用 knowledgeId 提交索引任务。
+  void knowledgeId
+  return Promise.resolve()
+}
+
 export default {
+  getKnowledgeMcpConfig,
+  postKnowledgeKeywordIndex,
   exportKnowledgeExcel,
   exportKnowledgeZip,
   exportKnowledge,
diff --git a/ui/src/api/types/portal.ts b/ui/src/api/types/portal.ts
index 487af09d0c3..112e0d7ab02 100644
--- a/ui/src/api/types/portal.ts
+++ b/ui/src/api/types/portal.ts
@@ -2,6 +2,7 @@ import type { Dict } from './common'
 
 export interface PortalAuthConfig extends Dict<unknown> {
   login_value?: string[]
+  default_value?: string
   max_attempts?: number
   failed_attempts?: number
   lock_time?: number
diff --git a/ui/src/views/VIEW_README.md b/ui/src/views/VIEW_README.md
index 6e5fb7f59c5..6df932da2e8 100644
--- a/ui/src/views/VIEW_README.md
+++ b/ui/src/views/VIEW_README.md
@@ -178,6 +178,8 @@ src/views/knowledge/
 │   └── action-dropdown/
 │       ├── index.ts
 │       ├── SettingKnowledgeAction.vue   # 跳转知识库设置
+│       ├── KeywordIndexKnowledgeAction.vue # 分词索引入口
+│       ├── mcp-config-action/           # MCP 配置入口与专属只读弹窗
 │       ├── ExportKnowledgeAction.vue    # Excel、文档 ZIP 与知识库包导出
 │       ├── MoveKnowledgeAction.vue
 │       └── DeleteKnowledgeAction.vue
@@ -198,6 +200,10 @@ src/views/knowledge/
 组合单项转移、删除 Action，并管理批量选择、全选、批量转移与批量删除。共享知识库不展示这些操作。
 `SettingKnowledgeAction` 暂不增加权限判断，点击后携带当前
 `workspaceId` 和知识库 ID 跳转 `workspace-knowledge-setting`；阻止事件冒泡，避免同时触发卡片详情跳转。
+“设置”之后依次组合 `KeywordIndexKnowledgeAction` 和 `McpConfigKnowledgeAction`，接收完整
+Knowledge API 并复用页面操作 loading。分词索引不增加确认弹窗，调用成功后只提示“操作成功”；
+MCP 配置沿用工具的只读文本与悬浮复制交互，专属弹窗按需挂载、关闭后卸载。
+两者接口暂为本地占位，MCP 返回空文本，分词索引模拟成功，尚不执行服务端操作。
 `ExportKnowledgeAction` 接收完整 Knowledge API，暂不增加权限判断；悬停“导出”展开右侧
 子菜单，分别导出文档 Excel、文档 ZIP 和可再次导入的知识库包。
 导出复用页面操作 loading，防止重复请求，结束或失败后恢复；共享知识库不展示该入口。
@@ -401,7 +407,7 @@ Dialog。新增或重命名文件时，应同步更新所有导入和页面功
 | `system/identity/workspaces/WorkspaceListView.vue`                     | 工作空间列表页面                                                     |
 | `system/chat/user-groups/GroupsListView.vue`                           | 对话用户组及组成员管理页面                                           |
 | `system/chat/users/UserListView.vue`                                   | 对话用户列表、配额及用户导入管理页面                                 |
-| `system/chat/portal-setting/PortalSettingView.vue`                      | 门户基本信息、访问开关、认证配置与门户预览；跨域详细配置暂保留说明入口 |
+| `system/chat-management/portal-setting/PortalSettingView.vue`           | 门户基本信息、访问开关、认证配置、跨域地址编辑与门户预览 |
 | `system/settings/theme/ThemeSettingView.vue`                           | 系统外观设置和登录外观预览页面                                       |
 | `system/settings/authentication/AuthenticationView.vue`                | 系统登录及认证源配置页面                                             |
 | `system/settings/email/EmailSettingsView.vue`                          | 系统邮件 SMTP 服务配置页面                                           |
@@ -413,8 +419,14 @@ Dialog。新增或重命名文件时，应同步更新所有导入和页面功
 ## 备注要求
 
 门户设置的 `components/ButtonEditPortal.vue`、`ButtonPortalAuthSetting.vue` 和
-`ButtonPortalCorsSetting.vue` 分别封装对应按钮、弹窗及表单状态。页面保留默认配置、统一保存和
-预览布局；编辑组件暴露草稿预览，认证组件暴露 `open()` 供首次开启认证时联动打开。
+`ButtonPortalCorsSetting.vue` 分别封装对应按钮、浮层及表单状态。认证组件使用 `MkDrawer`，
+打开时与系统 `LoginSetting` 共用 `AuthSettingApi.getLoginSetting()`，通过返回的 `login_methods`
+生成登录方式选项，复用登录方式标签，初始保留账号登录。提供默认登录方式及验证码与账号锁定设置；默认方式
+仅可选已勾选项，取消勾选当前默认项时回退到首个可选项。认证组件暴露 `open()` 供首次开启认证
+时联动打开；当前认证配置仅保存到页面内存，取消不回写，刷新后恢复默认配置，待接口接入后持久化。
+跨域组件通过 `v-model` 接收地址数组，弹窗按一行一个地址编辑；保存时清理行首尾空白和空行，
+取消不回写，关闭后清理草稿。空数组表示不限制来源的配置意图；目前地址仅保存在页面内存，
+尚未对接 `cors_config` 或实际跨域策略。
 
 - 新增路由级页面时，必须在“页面功能登记”中添加一条简洁、明确的功能说明。
 - 页面职责改变、文件重命名或目录移动时，必须同步修改登记内容。
diff --git a/ui/src/views/knowledge/KnowledgeView.vue b/ui/src/views/knowledge/KnowledgeView.vue
index d7011fdbe95..7ad79561964 100644
--- a/ui/src/views/knowledge/KnowledgeView.vue
+++ b/ui/src/views/knowledge/KnowledgeView.vue
@@ -17,6 +17,8 @@ import {
   AuthorizeKnowledgeAction,
   DeleteKnowledgeAction,
   ExportKnowledgeAction,
+  KeywordIndexKnowledgeAction,
+  McpConfigKnowledgeAction,
   MoveKnowledgeAction,
   RelatedResourcesKnowledgeAction,
   SettingKnowledgeAction,
@@ -228,6 +230,20 @@ function handleBatchDelete() {
                   <!-- TODO 生成问题 -->
                   <!-- 设置 -->
                   <SettingKnowledgeAction label="设置" :knowledge="knowledge" />
+                  <!-- 分词索引 -->
+                  <KeywordIndexKnowledgeAction
+                    v-model:loading="knowledgeOperationLoading"
+                    label="分词索引"
+                    :api="KnowledgeApi"
+                    :knowledge="knowledge"
+                  />
+                  <!-- MCP 配置详情 -->
+                  <McpConfigKnowledgeAction
+                    v-model:loading="knowledgeOperationLoading"
+                    label="MCP 配置详情"
+                    :api="KnowledgeApi"
+                    :knowledge="knowledge"
+                  />
                   <!-- 资源授权 -->
                   <AuthorizeKnowledgeAction label="资源授权" :knowledge="knowledge" />
 
diff --git a/ui/src/views/knowledge/knowledge-card/action-dropdown/KeywordIndexKnowledgeAction.vue b/ui/src/views/knowledge/knowledge-card/action-dropdown/KeywordIndexKnowledgeAction.vue
new file mode 100644
index 00000000000..6bf82239d01
--- /dev/null
+++ b/ui/src/views/knowledge/knowledge-card/action-dropdown/KeywordIndexKnowledgeAction.vue
@@ -0,0 +1,33 @@
+<script setup lang="ts">
+import { Share } from '@element-plus/icons-vue'
+import type KnowledgeApi from '@/api/admin/workspace/knowledge/knowledge'
+import type { KnowledgeItem } from '@/api/types'
+import { MsgSuccess } from '@/utils/message'
+
+defineOptions({ name: 'KeywordIndexKnowledgeAction' })
+
+const props = defineProps<{ api: typeof KnowledgeApi; knowledge: KnowledgeItem; label: string }>()
+const loading = defineModel<boolean>('loading', { default: false })
+
+/* 知识库分词索引 */
+function handleKeywordIndex() {
+  if (loading.value) return
+  loading.value = true
+  return props.api
+    .postKnowledgeKeywordIndex(props.knowledge.id)
+    .then(() => {
+      MsgSuccess('操作成功')
+    })
+    .finally(() => {
+      loading.value = false
+    })
+}
+</script>
+
+<template>
+  <!-- 执行分词索引 -->
+  <MkDropdownItem :disabled="loading" @click.stop="handleKeywordIndex">
+    <template #icon><MkIcon :icon="Share" /></template>
+    <span>{{ label }}</span>
+  </MkDropdownItem>
+</template>
diff --git a/ui/src/views/knowledge/knowledge-card/action-dropdown/index.ts b/ui/src/views/knowledge/knowledge-card/action-dropdown/index.ts
index 0062216a4d6..a1706a50852 100644
--- a/ui/src/views/knowledge/knowledge-card/action-dropdown/index.ts
+++ b/ui/src/views/knowledge/knowledge-card/action-dropdown/index.ts
@@ -1,4 +1,6 @@
 /** 知识库卡片菜单操作。 */
+export { default as KeywordIndexKnowledgeAction } from './KeywordIndexKnowledgeAction.vue'
+export { default as McpConfigKnowledgeAction } from './mcp-config-action/McpConfigKnowledgeAction.vue'
 export { default as ExportKnowledgeAction } from './ExportKnowledgeAction.vue'
 export { default as SettingKnowledgeAction } from './SettingKnowledgeAction.vue'
 export { default as MoveKnowledgeAction } from './MoveKnowledgeAction.vue'
diff --git a/ui/src/views/knowledge/knowledge-card/action-dropdown/mcp-config-action/KnowledgeMcpConfigDialog.vue b/ui/src/views/knowledge/knowledge-card/action-dropdown/mcp-config-action/KnowledgeMcpConfigDialog.vue
new file mode 100644
index 00000000000..9d43334e29c
--- /dev/null
+++ b/ui/src/views/knowledge/knowledge-card/action-dropdown/mcp-config-action/KnowledgeMcpConfigDialog.vue
@@ -0,0 +1,51 @@
+<script setup lang="ts">
+import { ref } from 'vue'
+import { copyText } from '@/utils/clipboard'
+
+defineOptions({ name: 'KnowledgeMcpConfigDialog' })
+
+const emit = defineEmits<{ closed: [] }>()
+
+/* 配置展示与复制 */
+const visible = ref(false)
+const config = ref('')
+
+function open(mcpConfig: string) {
+  config.value = mcpConfig
+  visible.value = true
+}
+
+function handleClosed() {
+  config.value = ''
+  emit('closed')
+}
+
+defineExpose({ open })
+</script>
+
+<template>
+  <MkDialog v-model="visible" title="MCP 配置详情" @closed="handleClosed">
+    <div class="group knowledge-mcp-config-detail relative">
+      <el-input v-model="config" :autosize="{ minRows: 8, maxRows: 24 }" disabled type="textarea" />
+      <!-- 复制 MCP 配置 -->
+      <el-button
+        class="group-hover-visible absolute right-3 top-3 z-10 h-8 shadow-md"
+        circle
+        title="复制配置"
+        :disabled="!config"
+        @click="copyText(config)"
+      >
+        <MkIcon name="icon_copy_outlined" />
+      </el-button>
+    </div>
+  </MkDialog>
+</template>
+
+<style scoped lang="scss">
+.knowledge-mcp-config-detail {
+  :deep(.el-textarea__inner) {
+    color: var(--el-text-color-primary);
+    cursor: pointer;
+  }
+}
+</style>
diff --git a/ui/src/views/knowledge/knowledge-card/action-dropdown/mcp-config-action/McpConfigKnowledgeAction.vue b/ui/src/views/knowledge/knowledge-card/action-dropdown/mcp-config-action/McpConfigKnowledgeAction.vue
new file mode 100644
index 00000000000..530a6c5c1cb
--- /dev/null
+++ b/ui/src/views/knowledge/knowledge-card/action-dropdown/mcp-config-action/McpConfigKnowledgeAction.vue
@@ -0,0 +1,43 @@
+<script setup lang="ts">
+import { nextTick, ref, useTemplateRef } from 'vue'
+import type KnowledgeApi from '@/api/admin/workspace/knowledge/knowledge'
+import type { KnowledgeItem } from '@/api/types'
+import KnowledgeMcpConfigDialog from './KnowledgeMcpConfigDialog.vue'
+
+defineOptions({ name: 'McpConfigKnowledgeAction' })
+
+const props = defineProps<{ api: typeof KnowledgeApi; knowledge: KnowledgeItem; label: string }>()
+const loading = defineModel<boolean>('loading', { default: false })
+
+/* 知识库 MCP 配置详情 */
+const dialogMounted = ref(false)
+const mcpConfigDialogRef = useTemplateRef<InstanceType<typeof KnowledgeMcpConfigDialog>>('mcpConfigDialogRef')
+
+function handleOpenMcpConfig() {
+  if (loading.value) return
+  loading.value = true
+  return props.api
+    .getKnowledgeMcpConfig(props.knowledge.id)
+    .then((config) => {
+      dialogMounted.value = true
+      return nextTick(() => mcpConfigDialogRef.value?.open(config))
+    })
+    .finally(() => {
+      loading.value = false
+    })
+}
+
+function handleDialogClosed() {
+  dialogMounted.value = false
+}
+</script>
+
+<template>
+  <!-- 查看 MCP 配置详情 -->
+  <MkDropdownItem :disabled="loading" @click.stop="handleOpenMcpConfig">
+    <template #icon><MkIcon name="icon_describe_outlined" /></template>
+    <span>{{ label }}</span>
+  </MkDropdownItem>
+
+  <KnowledgeMcpConfigDialog v-if="dialogMounted" ref="mcpConfigDialogRef" @closed="handleDialogClosed" />
+</template>
diff --git a/ui/src/views/system/chat-management/portal-setting/PortalSettingView.vue b/ui/src/views/system/chat-management/portal-setting/PortalSettingView.vue
index ca9907f8d9e..ce1c8c35950 100644
--- a/ui/src/views/system/chat-management/portal-setting/PortalSettingView.vue
+++ b/ui/src/views/system/chat-management/portal-setting/PortalSettingView.vue
@@ -32,6 +32,8 @@ const portalSetting = reactive<PortalSetting>({
   cors_config: {},
 })
 const saving = ref(false)
+// 跨域地址暂存于页面，待接口协议确定后接入 cors_config。
+const portalCorsOrigins = ref<string[]>([])
 
 const portalAccessUrl = new URL('/portal', window.location.origin).href
 const portalApiUrl = new URL('/api/portal', window.location.origin).href
@@ -59,6 +61,13 @@ function handleAccessChange(field: AccessField, value: string | number | boolean
   return savePortalSetting({ [field]: Boolean(value) })
 }
 
+/* 认证接口暂未接入，保存到当前页面配置供再次打开回填。 */
+function savePortalAuthSetting(payload: PortalSettingPayload) {
+  Object.assign(portalSetting, payload)
+  MsgSuccess('已应用到当前页面')
+  return Promise.resolve()
+}
+
 /* 编辑草稿预览与认证入口联动 */
 
 const authSettingButtonRef = useTemplateRef<InstanceType<typeof ButtonPortalAuthSetting>>('authSettingButtonRef')
@@ -136,15 +145,15 @@ const previewLogo = computed(() => portalSetting.logo)
               <span>身份认证</span>
               <div class="flex-align-center gap-2">
                 <!-- 配置身份认证 -->
-                <ButtonPortalAuthSetting ref="authSettingButtonRef" :setting="portalSetting" :saving="saving" :save="savePortalSetting" />
+                <ButtonPortalAuthSetting ref="authSettingButtonRef" :setting="portalSetting" :saving="saving" :save="savePortalAuthSetting" />
                 <el-switch :model-value="portalSetting.enable_auth" size="small" @change="handleAccessChange('enable_auth', $event)" />
               </div>
             </div>
             <div class="flex-between gap-2">
               <span>跨域设置</span>
               <div class="flex-align-center gap-2">
-                <!-- 查看跨域配置说明 -->
-                <ButtonPortalCorsSetting :disabled="saving" />
+                <!-- 配置跨域地址 -->
+                <ButtonPortalCorsSetting v-model="portalCorsOrigins" :disabled="saving" />
                 <el-switch :model-value="portalSetting.enable_cors" size="small" @change="handleAccessChange('enable_cors', $event)" />
               </div>
             </div>
diff --git a/ui/src/views/system/chat-management/portal-setting/components/ButtonEditPortal.vue b/ui/src/views/system/chat-management/portal-setting/components/ButtonEditPortal.vue
index 29edb2fc230..e8cb3fdbf58 100644
--- a/ui/src/views/system/chat-management/portal-setting/components/ButtonEditPortal.vue
+++ b/ui/src/views/system/chat-management/portal-setting/components/ButtonEditPortal.vue
@@ -60,16 +60,14 @@ function handleClosePortalEdit() {
   </el-button>
   <MkDialog v-model="editVisible" title="编辑" @closed="handleClosePortalEdit">
     <el-form ref="portalFormRef" :model="portalForm" :rules="portalRules" label-position="top" @submit.prevent>
-      <!-- <el-form-item label="门户 Logo">
-        <MkEditAvatar v-model="portalForm.logo" :default-icon="defaultLogo" :size="48" :editable="!saving" @change="handleLogoChange" />
-      </el-form-item> -->
       <el-form-item label="名称" prop="name">
+        <!-- <MkEditAvatar v-model="portalForm.logo" :default-icon="defaultLogo" :size="48" :editable="!saving" @change="handleLogoChange" /> -->
         <el-input v-model="portalForm.name" maxlength="64" show-word-limit :disabled="saving" placeholder="请输入门户名称" />
       </el-form-item>
     </el-form>
     <template #footer>
       <!-- 取消编辑 -->
-      <el-button :disabled="saving" @click="editVisible = false">取消</el-button>
+      <el-button plain :disabled="saving" @click="editVisible = false">取消</el-button>
       <!-- 保存门户信息 -->
       <el-button type="primary" :loading="saving" @click="handleSavePortalInfo">保存</el-button>
     </template>
diff --git a/ui/src/views/system/chat-management/portal-setting/components/ButtonPortalAuthSetting.vue b/ui/src/views/system/chat-management/portal-setting/components/ButtonPortalAuthSetting.vue
index e35e3c513a1..b2ed093d958 100644
--- a/ui/src/views/system/chat-management/portal-setting/components/ButtonPortalAuthSetting.vue
+++ b/ui/src/views/system/chat-management/portal-setting/components/ButtonPortalAuthSetting.vue
@@ -1,50 +1,63 @@
 <script setup lang="ts">
-import { reactive, ref } from 'vue'
-import type { PortalSetting, PortalSettingPayload } from '@/api/types'
-import { MsgError } from '@/utils/message'
+import { computed, reactive, ref, useTemplateRef } from 'vue'
+import type { FormInstance, FormRules } from 'element-plus'
+import { LOGIN_METHOD } from '@/api/enums'
+import AuthSettingApi from '@/api/admin/system/settings/auth-setting'
+import type { LoginMethod, PortalSetting, PortalSettingPayload } from '@/api/types'
+import { LOGIN_METHOD_LABELS } from '@/constants/auth'
 
 const props = defineProps<{ setting: PortalSetting; saving: boolean; save: (payload: PortalSettingPayload) => Promise<void> }>()
 
-/* 身份认证设置，仅修改已有后端消费的字段并保留其他配置 */
+/* 登录方式与默认登录方式 */
+const loginMethodOptions = ref<string[]>([LOGIN_METHOD.LOCAL])
+const loginMethodsLoading = ref(false)
+
+function loadLoginMethodOptions() {
+  loginMethodsLoading.value = true
+  return AuthSettingApi.getLoginSetting()
+    .then((setting) => {
+      loginMethodOptions.value = setting.login_methods ?? [LOGIN_METHOD.LOCAL]
+    })
+    .finally(() => {
+      loginMethodsLoading.value = false
+    })
+}
 const authVisible = ref(false)
 const enableAuthAfterSave = ref(false)
-const authForm = reactive({ localLogin: true, maxAttempts: 1, failedAttempts: 5, lockTime: 10 })
+const authFormRef = useTemplateRef<FormInstance>('authFormRef')
+const authForm = reactive({
+  loginMethods: [LOGIN_METHOD.LOCAL] as string[],
+  defaultLoginMethod: LOGIN_METHOD.LOCAL as string,
+  maxAttempts: 1,
+  failedAttempts: 5,
+  lockTime: 10,
+})
+const defaultLoginMethodOptions = computed(() => loginMethodOptions.value.filter((method) => authForm.loginMethods.includes(method)))
+const authRules: FormRules<typeof authForm> = {
+  loginMethods: [{ type: 'array', required: true, min: 1, message: '请选择至少一种登录方式', trigger: 'change' }],
+  defaultLoginMethod: [{ required: true, message: '请选择默认登录方式', trigger: 'change' }],
+}
 
+function handleLoginMethodsChange() {
+  if (!authForm.loginMethods.includes(authForm.defaultLoginMethod)) {
+    authForm.defaultLoginMethod = defaultLoginMethodOptions.value[0] ?? ''
+  }
+}
+
+/* 抽屉回填与重置，草稿不直接修改门户配置 */
 function open(enableAfterSave = false) {
-  handleClosed()
   enableAuthAfterSave.value = enableAfterSave
   const config = props.setting.auth_config
   Object.assign(authForm, {
-    localLogin: config?.login_value?.includes('LOCAL') ?? true,
-    maxAttempts: config?.max_attempts ?? 1,
-    failedAttempts: config?.failed_attempts ?? 5,
-    lockTime: config?.lock_time ?? 10,
+    loginMethods: [...(config.login_value ?? [LOGIN_METHOD.LOCAL])],
+    defaultLoginMethod: config.default_value ?? LOGIN_METHOD.LOCAL,
+    maxAttempts: config.max_attempts ?? 1,
+    failedAttempts: config.failed_attempts ?? 5,
+    lockTime: config.lock_time ?? 10,
   })
+  handleLoginMethodsChange()
   authVisible.value = true
-}
-
-function handleSaveAuthSetting() {
-  const config = props.setting.auth_config
-  const loginMethods = (config.login_value || []).filter((method) => method !== 'LOCAL')
-  if (authForm.localLogin) loginMethods.unshift('LOCAL')
-  if (!loginMethods.length) {
-    MsgError('请至少开启一种登录方式')
-    return
-  }
-  return props
-    .save({
-      ...(enableAuthAfterSave.value ? { enable_auth: true } : {}),
-      auth_config: {
-        ...config,
-        login_value: loginMethods,
-        max_attempts: authForm.maxAttempts,
-        failed_attempts: authForm.failedAttempts,
-        lock_time: authForm.lockTime,
-      },
-    })
-    .then(() => {
-      authVisible.value = false
-    })
+  loadLoginMethodOptions()
 }
 
 function handleOpenAuthSetting() {
@@ -53,7 +66,36 @@ function handleOpenAuthSetting() {
 
 function handleClosed() {
   enableAuthAfterSave.value = false
-  Object.assign(authForm, { localLogin: true, maxAttempts: 1, failedAttempts: 5, lockTime: 10 })
+  Object.assign(authForm, {
+    loginMethods: [LOGIN_METHOD.LOCAL],
+    defaultLoginMethod: LOGIN_METHOD.LOCAL,
+    maxAttempts: 1,
+    failedAttempts: 5,
+    lockTime: 10,
+  })
+  authFormRef.value?.clearValidate()
+}
+
+/* 保存认证配置，保留其他配置字段 */
+function handleSaveAuthSetting() {
+  authFormRef.value?.validate((valid) => {
+    if (!valid || props.saving || loginMethodsLoading.value) return
+    return props
+      .save({
+        ...(enableAuthAfterSave.value ? { enable_auth: true } : {}),
+        auth_config: {
+          ...props.setting.auth_config,
+          login_value: [...authForm.loginMethods],
+          default_value: authForm.defaultLoginMethod,
+          max_attempts: authForm.maxAttempts,
+          failed_attempts: authForm.failedAttempts,
+          lock_time: authForm.lockTime,
+        },
+      })
+      .then(() => {
+        authVisible.value = false
+      })
+  })
 }
 
 defineExpose({ open })
@@ -62,54 +104,57 @@ defineExpose({ open })
 <template>
   <!-- 配置身份认证 -->
   <el-button text type="primary" title="身份认证设置" :disabled="saving" @click="handleOpenAuthSetting">
-    <MkIcon name="icon-setting" />
+    <MkIcon name="icon_setting" />
   </el-button>
-  <MkDialog v-model="authVisible" title="身份认证设置" :show-close="!saving" @closed="handleClosed">
-    <el-form label-position="top" :disabled="saving" @submit.prevent>
-      <el-form-item label="登录方式">
-        <el-checkbox v-model="authForm.localLogin">本地账号登录</el-checkbox>
-        <p class="w-full text-sm text-N600">使用对话用户账号登录门户。</p>
-      </el-form-item>
-      <el-form-item label="登录失败几次后显示验证码（0 为始终显示，-1 为不显示）">
-        <el-input-number
-          v-model="authForm.maxAttempts"
-          :min="-1"
-          :max="100"
-          :precision="0"
-          :value-on-clear="1"
-          controls-position="right"
-          align="left"
-        />
+  <MkDrawer v-model="authVisible" title="身份认证设置" @closed="handleClosed">
+    <el-form
+      v-loading="loginMethodsLoading"
+      ref="authFormRef"
+      :model="authForm"
+      :rules="authRules"
+      label-position="top"
+      require-asterisk-position="right"
+      @submit.prevent
+    >
+      <el-form-item label="登录方式" prop="loginMethods">
+        <el-checkbox-group v-model="authForm.loginMethods" class="flex-wrap" @change="handleLoginMethodsChange">
+          <template v-for="loginMethod in loginMethodOptions" :key="loginMethod">
+            <el-checkbox :value="loginMethod" class="w-32">{{ LOGIN_METHOD_LABELS[loginMethod as LoginMethod] || loginMethod }}</el-checkbox>
+          </template>
+        </el-checkbox-group>
       </el-form-item>
-      <el-form-item label="连续登录失败次数上限">
-        <el-input-number
-          v-model="authForm.failedAttempts"
-          :min="1"
-          :max="100"
-          :precision="0"
-          :value-on-clear="5"
-          controls-position="right"
-          align="left"
-        />
+      <el-form-item label="默认登录方式" prop="defaultLoginMethod">
+        <el-select v-model="authForm.defaultLoginMethod" placeholder="请选择默认登录方式">
+          <el-option
+            v-for="loginMethod in defaultLoginMethodOptions"
+            :key="loginMethod"
+            :value="loginMethod"
+            :label="LOGIN_METHOD_LABELS[loginMethod as LoginMethod] || loginMethod"
+          />
+        </el-select>
       </el-form-item>
-      <el-form-item label="账号锁定时间（分钟）">
-        <el-input-number
-          v-model="authForm.lockTime"
-          :min="1"
-          :max="1440"
-          :precision="0"
-          :value-on-clear="10"
-          controls-position="right"
-          align="left"
-        />
+      <el-form-item label="账号登录验证码设置" required>
+        <div class="mk-gray-card-lg w-full space-y-4">
+          <div class="flex-align-center gap-2">
+            <span class="shrink-0">登录失败</span>
+            <el-input-number v-model="authForm.maxAttempts" class="w-32!" :min="-1" :max="100" :precision="0" :value-on-clear="1" />
+            <span class="shrink-0">次显示验证码</span>
+          </div>
+          <div class="flex-align-center gap-2">
+            <span class="shrink-0">登录失败</span>
+            <el-input-number v-model="authForm.failedAttempts" class="w-32!" :min="1" :max="100" :precision="0" :value-on-clear="5" />
+            <span class="shrink-0">次，锁定账号</span>
+            <el-input-number v-model="authForm.lockTime" class="w-32!" :min="1" :max="1440" :precision="0" :value-on-clear="10" />
+            <span class="shrink-0">分钟</span>
+          </div>
+        </div>
       </el-form-item>
-      <p class="text-sm text-N600">失败次数与锁定时间的自定义配置在专业版、企业版生效。</p>
     </el-form>
     <template #footer>
       <!-- 取消认证设置 -->
-      <el-button :disabled="saving" @click="authVisible = false">取消</el-button>
+      <el-button plain :disabled="saving" @click="authVisible = false">取消</el-button>
       <!-- 保存认证设置 -->
-      <el-button type="primary" :loading="saving" @click="handleSaveAuthSetting">保存</el-button>
+      <el-button type="primary" :loading="saving" :disabled="loginMethodsLoading" @click="handleSaveAuthSetting">保存</el-button>
     </template>
-  </MkDialog>
+  </MkDrawer>
 </template>
diff --git a/ui/src/views/system/chat-management/portal-setting/components/ButtonPortalCorsSetting.vue b/ui/src/views/system/chat-management/portal-setting/components/ButtonPortalCorsSetting.vue
index 2129e8700b8..c076cbbd360 100644
--- a/ui/src/views/system/chat-management/portal-setting/components/ButtonPortalCorsSetting.vue
+++ b/ui/src/views/system/chat-management/portal-setting/components/ButtonPortalCorsSetting.vue
@@ -1,25 +1,48 @@
 <script setup lang="ts">
 import { ref } from 'vue'
+import { MsgSuccess } from '@/utils/message'
 
 defineProps<{ disabled?: boolean }>()
+const allowedOrigins = defineModel<string[]>({ default: () => [] })
 
-/* 跨域设置入口 */
+/* 跨域地址草稿，取消不修改已保存配置。 */
 const corsVisible = ref(false)
+const corsAddressDraft = ref('')
+const corsAddressPlaceholder =
+  '请输入允许的跨域地址，开启后不输入跨域地址则不限制。\n跨域地址一行一个，如：\nhttp://127.0.0.1:5678\nhttps://dataease.io'
+
 function handleOpenCorsSetting() {
+  handleClosed()
+  corsAddressDraft.value = allowedOrigins.value.join('\n')
   corsVisible.value = true
 }
+
+function handleSaveCorsSetting() {
+  allowedOrigins.value = corsAddressDraft.value
+    .split(/\r?\n/)
+    .map((address) => address.trim())
+    .filter(Boolean)
+  MsgSuccess('已应用到当前页面')
+  corsVisible.value = false
+}
+
+function handleClosed() {
+  corsAddressDraft.value = ''
+}
 </script>
 
 <template>
-  <!-- 查看跨域配置说明 -->
+  <!-- 配置跨域地址 -->
   <el-button text type="primary" title="跨域设置" :disabled="disabled" @click="handleOpenCorsSetting">
-     <MkIcon name="icon-setting" />
+    <MkIcon name="icon_setting" />
   </el-button>
-  <MkDialog v-model="corsVisible" title="跨域设置" :width="480">
-    <p class="text-N600">跨域访问配置暂未开放，请联系管理员配置允许访问的来源。</p>
+  <MkDialog v-model="corsVisible" title="跨域设置" @closed="handleClosed">
+    <el-input v-model="corsAddressDraft" type="textarea" :rows="8" :placeholder="corsAddressPlaceholder" :disabled="disabled" />
     <template #footer>
-      <!-- 关闭跨域设置说明 -->
-      <el-button type="primary" @click="corsVisible = false">知道了</el-button>
+      <!-- 取消跨域设置 -->
+      <el-button plain @click="corsVisible = false">取消</el-button>
+      <!-- 保存跨域地址 -->
+      <el-button type="primary" :disabled="disabled" @click="handleSaveCorsSetting">保存</el-button>
     </template>
   </MkDialog>
 </template>