fix: remove sensitive fields from user API response and improve home page error handling

base/src/main/java/com/tinyengine/it/common/exception/ExceptionEnum.java

@@ -321,8 +321,17 @@ public enum ExceptionEnum implements IBaseError {
     /**
      * Cm 339 exception enum.
      */
-    CM339("CM339", "token检验失败，请重新登录");
+    CM339("CM339", "token检验失败，请重新登录"),
 
+    /**
+     * Cm 340 exception enum.
+     */
+    CM340("CM340", "请求资源不存在"),
+
+    /**
+     * Cm 341 exception enum.
+     */
+    CM341("CM341", "组织在当前用户组织列表中匹配不到");
     /**
      * 错误码
      */

base/src/main/java/com/tinyengine/it/controller/AiChatController.java

@@ -78,7 +78,7 @@ public class AiChatController {
     @SystemControllerLog(description = "AI chat")
     @PostMapping("/ai/chat")
     public ResponseEntity<?> aiChat(@RequestBody ChatRequest request,
-        @RequestHeader(value = "Authorization", required = false) String authorization) throws Exception {
+        @RequestHeader(value = "Authorization", required = true) String authorization) throws Exception {
 
         if (authorization != null && authorization.startsWith("Bearer ")) {
             String token = authorization.replace("Bearer ", "");
@@ -117,7 +117,7 @@ public ResponseEntity<?> aiChat(@RequestBody ChatRequest request,
     @SystemControllerLog(description = "AI completions")
     @PostMapping("/chat/completions")
     public ResponseEntity<?> completions(@RequestBody ChatRequest request,
-        @RequestHeader(value = "Authorization", required = false) String authorization) throws Exception {
+        @RequestHeader(value = "Authorization", required = true) String authorization) throws Exception {
         if (authorization != null && authorization.startsWith("Bearer ")) {
             String token = authorization.replace("Bearer ", "");
             request.setApiKey(token);

base/src/main/java/com/tinyengine/it/controller/UserController.java

@@ -88,7 +88,10 @@ public Result<User> me() {
             user.setUsername(loginUserContext.getLoginUserId());
         }
         user.setTenant(tenants);
-
+        user.setPassword(null);
+        user.setPrivateKey(null);
+        user.setPublicKey(null);
+        user.setSalt(null);
         return Result.success(user);
     }
 

base/src/main/java/com/tinyengine/it/login/config/LoginConfig.java

@@ -39,7 +39,10 @@ public void addInterceptors(InterceptorRegistry registry) {
                 // 登录相关
                 "/platform-center/api/user/login",
                 // 忘记密码
-                "/platform-center/api/user/forgot-password"
+                "/platform-center/api/user/forgot-password",
+                // AI
+                "/app-center/api/ai/chat",
+                "/app-center/api/chat/completions"
             );
     }
 }

base/src/main/java/com/tinyengine/it/login/controller/LoginController.java

@@ -31,6 +31,7 @@
 import com.tinyengine.it.model.entity.Tenant;
 import com.tinyengine.it.model.entity.User;
 import com.tinyengine.it.service.app.UserService;
+import com.tinyengine.it.service.platform.TenantService;
 import io.jsonwebtoken.Claims;
 import io.jsonwebtoken.Jwts;
 import io.swagger.v3.oas.annotations.Operation;
@@ -238,10 +239,12 @@ public Result<ValidationResult> validateToken(@RequestParam String token) {
     @SystemControllerLog(description = "设置当前组织")
     @GetMapping("/user/tenant")
     public Result<SSOTicket> setTenant(@RequestParam Integer tenantId) {
-        List<Tenant> tenants = loginUserContext.getTenants();
+        List<Tenant> tenants = authUsersUnitsRolesMapper.queryAllTenantByUserId(Integer.valueOf(loginUserContext.getLoginUserId()));
+
         if (tenantId == null) {
             return Result.failed(ExceptionEnum.CM320);
         }
+
         if (tenants == null || tenants.isEmpty()) {
             return Result.failed(ExceptionEnum.CM337);
         }
@@ -259,7 +262,7 @@ public Result<SSOTicket> setTenant(@RequestParam Integer tenantId) {
         }
 
         if (!found) {
-            return Result.failed(ExceptionEnum.CM337);
+            return Result.failed(ExceptionEnum.CM341);
         }
 
         // 通过 RequestContextHolder 获取请求

base/src/main/java/com/tinyengine/it/service/app/impl/PageServiceImpl.java

@@ -495,18 +495,16 @@ public Page addIsHome(Page pageInfo) {
      * @return the app home page id
      */
     public int getAppHomePageId(int appId) {
+        log.info("Getting home page ID for appId: {}, TenantId: {}", appId, loginUserContext.getTenantId());
         App appInfo = appMapper.queryAppById(appId, loginUserContext.getTenantId());
         // appHomePageId 存在为null的情况，即app没有设置首页
-        Integer homePage = appInfo.getHomePage();
-
-        // 将 homePage 转换为整数，如果为空则默认为 0
-        int id;
-        if (homePage == null) {
-            id = 0;
-            return id;
+        if (appInfo == null) {
+            throw new ServiceException(ExceptionEnum.CM340.getResultCode(), "App not found for ID: " + appId+",TenantId:"+loginUserContext.getTenantId());
         }
-        id = homePage;
-        return id;
+        // 将 homePage 转换为整数，如果为空则默认为 0
+        Integer homePage = appInfo.getHomePage();
+        log.info("Retrieved home page ID: {} for appId: {}", homePage, appId);
+        return homePage != null ? homePage : 0;
     }
 
     /**