From a481e0ae4c6519f9d1234f98bfa97b8b5a7c7e2e Mon Sep 17 00:00:00 2001
From: HenryDu8133 <813367384@qq.com>
Date: Sun, 13 Sep 2026 01:05:38 +0800
Subject: [PATCH] =?UTF-8?q?fix(auth):=20=E5=BE=AE=E4=BF=A1=E7=99=BB?=
 =?UTF-8?q?=E5=BD=95=E6=8C=89=E9=92=AE=E6=94=BE=E5=A4=A7+=E4=B8=BB?=
 =?UTF-8?q?=E9=A2=98=E8=89=B2=20&=20/api/auth/aggregate=20500=20=E8=AF=8A?=
 =?UTF-8?q?=E6=96=AD=E6=97=A5=E5=BF=97\n\nUI=20=E6=94=B9=E5=8A=A8=EF=BC=88?=
 =?UTF-8?q?=E5=BE=AE=E4=BF=A1=E7=99=BB=E5=BD=95=E6=8C=89=E9=92=AE=20+=20?=
 =?UTF-8?q?=E4=B8=AA=E4=BA=BA=E9=A1=B5=E7=BB=91=E5=AE=9A=E5=8D=A1=E7=89=87?=
 =?UTF-8?q?=EF=BC=89=EF=BC=9A\n-=20OAuthButtons.vue=EF=BC=9Aaggregate=20?=
 =?UTF-8?q?=E5=BE=AE=E4=BF=A1=E6=8C=89=E9=92=AE=2048x48=20=E2=86=92=2056x5?=
 =?UTF-8?q?6=EF=BC=8CSVG=20=E5=9B=BE=E6=A0=87=2022px=E2=86=9228px=EF=BC=9B?=
 =?UTF-8?q?=E9=BB=98=E8=AE=A4=E8=83=8C=E6=99=AF=E5=BE=AE=E4=BF=A1=E7=BB=BF?=
 =?UTF-8?q?=20#07C160=EF=BC=8Chover=20#06ad56=EF=BC=8Cactive=20#059a4c?=
 =?UTF-8?q?=EF=BC=9B=E6=AD=A3=E5=B8=B8=E6=80=81=E5=8A=A0=E7=BB=BF=E8=89=B2?=
 =?UTF-8?q?=E9=98=B4=E5=BD=B1=EF=BC=8C=E7=BA=AF=20#fff=20=E6=96=87?=
 =?UTF-8?q?=E5=AD=97=EF=BC=9B=E4=B8=8D=E5=86=8D=E5=92=8C=E7=9B=B8=E9=82=BB?=
 =?UTF-8?q?=20Google/GitHub=20=E4=BF=9D=E6=8C=81=E5=8E=9F=E5=B0=BA?=
 =?UTF-8?q?=E5=AF=B8=E4=B8=8D=E5=8F=98\n-=20OAuthBindingCard.vue=20?=
 =?UTF-8?q?=E4=B8=AA=E4=BA=BA=E9=A1=B5=E5=8D=A1=E7=89=87=EF=BC=9Aaggregate?=
 =?UTF-8?q?(aggregate)=EF=BC=9A=E5=BE=AE=E4=BF=A1=E5=9B=BE=E6=A0=87?=
 =?UTF-8?q?=E6=A1=86=2040x40=E2=86=9248x48=EF=BC=88h-10=E2=86=92h-12?=
 =?UTF-8?q?=EF=BC=89=EF=BC=8C=E5=9B=BE=E6=A0=87=2022px=E2=86=9226px?=
 =?UTF-8?q?=EF=BC=8C=E8=83=8C=E6=99=AF/=E8=BE=B9=E6=A1=86/=E6=96=87?=
 =?UTF-8?q?=E5=AD=97=E7=94=A8=E5=BE=AE=E4=BF=A1=E7=BB=BF=20#07C160?=
 =?UTF-8?q?=EF=BC=9B=E6=9C=AA=E7=BB=91=E5=AE=9A=E5=BE=AE=E4=BF=A1=E8=89=B2?=
 =?UTF-8?q?=20=E7=AB=8B=E5=8D=B3=E7=BB=91=E5=AE=9A=E5=BE=AE=E4=BF=A1=20?=
 =?UTF-8?q?=E6=8C=89=E9=92=AE=20=E5=AD=97=E5=8F=B7=E4=BB=8E=20xs=E2=86=92s?=
 =?UTF-8?q?m=EF=BC=8Cpy=201.5=E2=86=922.5=EF=BC=8C=E6=96=87=E6=A1=88=20?=
 =?UTF-8?q?=E7=AB=8B=E5=8D=B3=E7=BB=91=E5=AE=9A=E2=86=92=E7=AB=8B=E5=8D=B3?=
 =?UTF-8?q?=E7=BB=91=E5=AE=9A=E5=BE=AE=E4=BF=A1\n\n500=20=E6=8E=92?=
 =?UTF-8?q?=E9=94=99=E6=97=A5=E5=BF=97=EF=BC=88/api/auth/aggregate?=
 =?UTF-8?q?=EF=BC=89=EF=BC=9A\n-=20loadAggregateSettings=EF=BC=9A=E5=85=88?=
 =?UTF-8?q?=E5=8F=96=20env=20fallback=20=E5=89=8D=E7=BD=AE=EF=BC=8CDB=20se?=
 =?UTF-8?q?lect=20=E5=8C=85=20try/catch=20=E4=B8=8D=E6=8A=9B=EF=BC=9B?=
 =?UTF-8?q?=E5=B9=B6=E6=89=93=E5=8D=B0=20[AggregateOAuth]=20enabled/appId/?=
 =?UTF-8?q?appKey=20=E9=95=BF=E5=BA=A6/loginType/endpoint=20=E7=8A=B6?=
 =?UTF-8?q?=E6=80=81(DB=3D=3F=20=E9=85=8D=E7=BD=AE=20/=20ENV=3D=3F=20?=
 =?UTF-8?q?=E9=85=8D=E7=BD=AE=20/=20dbEnabled=E5=9B=9E=E9=80=80=E9=80=BB?=
 =?UTF-8?q?=E8=BE=91\n-=20auxxStrategy.getAuthorizeUrl=20=E5=85=A8?=
 =?UTF-8?q?=E9=93=BE=E8=B7=AF=E7=BB=93=E6=9E=84=E5=8C=96=E6=97=A5=E5=BF=97?=
 =?UTF-8?q?=EF=BC=9A\n=20=201)=20=E5=8F=82=E6=95=B0=E6=89=93=E5=8D=B0?=
 =?UTF-8?q?=EF=BC=88enabled/endpoint/safe=5Fok/redirect=5Furi/state=5Flen\?=
 =?UTF-8?q?n=20=202)=20=E9=85=8D=E7=BD=AE=E7=BC=BA=E5=A4=B1=E6=97=B6?=
 =?UTF-8?q?=E9=80=90=E6=9D=A1=E6=9E=9A=E4=B8=BE=E5=8E=9F=E5=9B=A0=EF=BC=88?=
 =?UTF-8?q?APP=5FID=20=E7=A9=BA=20/=20APP=5FKEY=20=E7=A9=BA=20/=20ENDPOINT?=
 =?UTF-8?q?=20=E7=A9=BA=20/=20enabled=3Dfalse=EF=BC=89\n=20=203)=20endpoin?=
 =?UTF-8?q?t=20=E4=B8=8D=E5=90=88=E6=B3=95=E6=97=B6=E5=8D=95=E7=8B=AC?=
 =?UTF-8?q?=E6=89=93=E5=8D=B0=20[AggregateOAuth][auxx][getAuthorizeUrl]=20?=
 =?UTF-8?q?endpoint=20=E4=B8=8D=E5=90=88=E6=B3=95=20+=20JSON(endpoint)\n?=
 =?UTF-8?q?=20=204)=20=E8=AF=B7=E6=B1=82=20auxx.cn/connect.php=3Fact=3Dlog?=
 =?UTF-8?q?in=20=E5=89=8D=E6=89=93=E5=8D=B0=20GET=20URL=EF=BC=88appkey=20?=
 =?UTF-8?q?=E6=9B=BF=E6=8D=A2=E4=B8=BA=20***=EF=BC=8C=E6=97=A5=E5=BF=97?=
 =?UTF-8?q?=E7=BB=9D=E4=B8=8D=E8=BE=93=E5=87=BA=E7=9C=9F=E5=AE=9E=E5=AF=86?=
 =?UTF-8?q?=E9=92=A5=EF=BC=89\n=20=205)=20$fetch=20=E6=88=90=E5=8A=9F?=
 =?UTF-8?q?=E6=89=93=E5=8D=B0=20code/msg/has=5Furl/url=5Fprefix\n=20=206)?=
 =?UTF-8?q?=20$fetch=20=E5=BC=82=E5=B8=B8=E6=89=93=E5=8D=B0=20err/status/b?=
 =?UTF-8?q?ody=20(response.=5Fdata=20=E6=88=96=20data=20=E5=89=8D=20400=20?=
 =?UTF-8?q?=E5=AD=97=EF=BC=89\n=20=207)=20$fetch=20=E5=8A=A0=2015000ms=20?=
 =?UTF-8?q?=E8=B6=85=E6=97=B6=EF=BC=8C=E9=81=BF=E5=85=8D=20Runner=20?=
 =?UTF-8?q?=E5=88=B0=20auxx=20=E4=B8=8D=E9=80=9A=E5=8D=A1=E6=AD=BB?=
 =?UTF-8?q?=E4=B8=80=E7=9B=B4=E6=8C=82=2030s\n=20=E4=BB=A5=E4=B8=8A?=
 =?UTF-8?q?=EF=BC=9B30s+=20=E6=89=8D=E8=A2=AB=20Nitro=20=E5=BC=BA=E5=88=B6?=
 =?UTF-8?q?=20500?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 app/components/Auth/OAuthBindingCard.vue |  12 +--
 app/components/Auth/OAuthButtons.vue     |  25 ++++-
 server/utils/oauth-strategies.ts         | 111 ++++++++++++++++++-----
 3 files changed, 116 insertions(+), 32 deletions(-)

diff --git a/app/components/Auth/OAuthBindingCard.vue b/app/components/Auth/OAuthBindingCard.vue
index 03f07f3..88bbcfc 100644
--- a/app/components/Auth/OAuthBindingCard.vue
+++ b/app/components/Auth/OAuthBindingCard.vue
@@ -121,9 +121,9 @@
       <div v-if="config.public.oauth.aggregate" :class="itemClass">
         <div class="flex items-center gap-4">
           <div
-            class="w-10 h-10 rounded-xl bg-green-500/10 flex items-center justify-center border border-green-500/20 text-green-500"
+            class="w-12 h-12 rounded-xl bg-[#07C160]/10 flex items-center justify-center border border-[#07C160]/25 text-[#07C160]"
           >
-            <svg viewBox="0 0 24 24" width="22" height="22" fill="currentColor" aria-hidden="true">
+            <svg viewBox="0 0 24 24" width="26" height="26" fill="currentColor" aria-hidden="true">
               <path d="M8.69 3.5C5.06 3.5 2.12 6.03 2.12 9.14c0 1.79 1.04 3.37 2.66 4.41l-.68 2.05 2.56-1.28c.52.11 1.06.17 1.61.17h.51c-.08-.36-.11-.73-.08-1.09H8.69c-2.59 0-4.69-1.93-4.69-4.31s2.1-4.31 4.69-4.31h1.37c.25-.98 1.09-1.7 2.09-1.7.43 0 .83.13 1.17.36C12.61 3.06 10.76 3.5 8.69 3.5zM10.4 5.62c-.93 0-1.69.76-1.69 1.69s.76 1.69 1.69 1.69 1.69-.76 1.69-1.69-.76-1.69-1.69-1.69zm7.19.91c-2.13 0-3.86 1.7-3.86 3.8s1.73 3.8 3.86 3.8c.5 0 1.02-.1 1.47-.27L21.5 15l-.67-1.95c1.21-.88 2-2.24 2-3.72 0-2.1-1.73-3.8-3.84-3.8-.1 0-.2 0-.4.01zm-1.84 2.69c-.66 0-1.2.54-1.2 1.2s.54 1.2 1.2 1.2 1.2-.54 1.2-1.2-.54-1.2-1.2-1.2z"/>
             </svg>
           </div>
@@ -131,7 +131,7 @@
             <span class="text-sm font-bold text-zinc-200">{{
               getProviderDisplayName('aggregate')
             }}</span>
-            <span v-if="aggregateIdentity" class="text-[11px] text-blue-500 font-medium mt-0.5">{{
+            <span v-if="aggregateIdentity" class="text-[11px] text-[#07C160] font-semibold mt-0.5">{{
               aggregateIdentity.providerUsername
             }}</span>
             <span v-else class="text-[11px] text-zinc-500 mt-0.5">未绑定</span>
@@ -140,7 +140,7 @@
 
         <button
           v-if="aggregateIdentity"
-          class="px-4 py-1.5 bg-rose-500/10 border border-rose-500/20 hover:bg-rose-500/20 text-rose-500 text-xs font-black rounded-xl transition-all disabled:opacity-50"
+          class="px-4 py-2 bg-rose-500/10 border border-rose-500/20 hover:bg-rose-500/20 text-rose-500 text-sm font-semibold rounded-xl transition-all disabled:opacity-50"
           :disabled="actionLoading"
           @click="confirmUnbind('aggregate')"
         >
@@ -148,11 +148,11 @@
         </button>
         <button
           v-else
-          class="px-4 py-1.5 bg-emerald-600 hover:bg-emerald-500 text-white text-xs font-black rounded-xl shadow-lg shadow-emerald-900/20 transition-all active:scale-95 disabled:opacity-50"
+          class="px-5 py-2.5 bg-[#07C160] hover:bg-[#06ad56] active:bg-[#059a4c] text-white text-sm font-bold rounded-xl shadow-lg shadow-[#07C160]/30 transition-all active:scale-95 disabled:opacity-50"
           :disabled="actionLoading"
           @click="handleBind('aggregate')"
         >
-          {{ actionLoading ? '跳转中...' : '立即绑定' }}
+          {{ actionLoading ? '跳转中...' : '立即绑定微信' }}
         </button>
       </div>
 
diff --git a/app/components/Auth/OAuthButtons.vue b/app/components/Auth/OAuthButtons.vue
index b21365f..8911837 100644
--- a/app/components/Auth/OAuthButtons.vue
+++ b/app/components/Auth/OAuthButtons.vue
@@ -31,7 +31,7 @@
         title="使用微信登录"
         @click="loginWith('aggregate')"
       >
-        <svg viewBox="0 0 24 24" width="22" height="22" fill="currentColor" aria-hidden="true">
+        <svg viewBox="0 0 24 24" width="28" height="28" fill="currentColor" aria-hidden="true">
           <path d="M8.69 3.5C5.06 3.5 2.12 6.03 2.12 9.14c0 1.79 1.04 3.37 2.66 4.41l-.68 2.05 2.56-1.28c.52.11 1.06.17 1.61.17h.51c-.08-.36-.11-.73-.08-1.09H8.69c-2.59 0-4.69-1.93-4.69-4.31s2.1-4.31 4.69-4.31h1.37c.25-.98 1.09-1.7 2.09-1.7.43 0 .83.13 1.17.36C12.61 3.06 10.76 3.5 8.69 3.5zM10.4 5.62c-.93 0-1.69.76-1.69 1.69s.76 1.69 1.69 1.69 1.69-.76 1.69-1.69-.76-1.69-1.69-1.69zm7.19.91c-2.13 0-3.86 1.7-3.86 3.8s1.73 3.8 3.86 3.8c.5 0 1.02-.1 1.47-.27L21.5 15l-.67-1.95c1.21-.88 2-2.24 2-3.72 0-2.1-1.73-3.8-3.84-3.8-.1 0-.2 0-.4.01zm-1.84 2.69c-.66 0-1.2.54-1.2 1.2s.54 1.2 1.2 1.2 1.2-.54 1.2-1.2-.54-1.2-1.2-1.2z"/>
         </svg>
       </button>
@@ -152,10 +152,27 @@ const loginWith = (provider: string) => {
   border-color: #dadce0;
 }
 
+.oauth-btn-wechat {
+  width: 56px;
+  height: 56px;
+  background: #07C160;
+  color: #ffffff;
+  border-color: #07C160;
+  box-shadow: 0 4px 12px rgba(7, 193, 96, 0.25);
+}
+
 .oauth-btn-wechat:hover {
-  background: var(--bg-secondary, #07c160);
-  color: var(--text-primary, #ffffff);
-  border-color: var(--border-secondary, #07c160);
+  background: #06ad56;
+  color: #ffffff;
+  border-color: #06ad56;
+  box-shadow: 0 6px 18px rgba(7, 193, 96, 0.35);
+}
+
+.oauth-btn-wechat:active {
+  background: #059a4c;
+  border-color: #059a4c;
+  transform: translateY(0);
+  box-shadow: 0 2px 8px rgba(7, 193, 96, 0.25);
 }
 
 .oauth-empty-hint {
diff --git a/server/utils/oauth-strategies.ts b/server/utils/oauth-strategies.ts
index cf3b7d7..c265b66 100644
--- a/server/utils/oauth-strategies.ts
+++ b/server/utils/oauth-strategies.ts
@@ -259,23 +259,34 @@ const strategies: Record<string, OAuthStrategy> = {
 }
 
 async function loadAggregateSettings() {
-  const row = await db
-    .select({
-      aggregateOAuthEnabled: systemSettings.aggregateOAuthEnabled,
-      aggregateOAuthAppId: systemSettings.aggregateOAuthAppId,
-      aggregateOAuthAppKey: systemSettings.aggregateOAuthAppKey,
-      aggregateOAuthLoginType: systemSettings.aggregateOAuthLoginType,
-      aggregateOAuthEndpoint: systemSettings.aggregateOAuthEndpoint
-    })
-    .from(systemSettings)
-    .orderBy(asc(systemSettings.id))
-    .limit(1)
-  const base = row[0] ?? null
   const envAppId = process.env.AGGREGATE_OAUTH_APP_ID
   const envAppKey = process.env.AGGREGATE_OAUTH_APP_KEY
   const envLoginType = process.env.AGGREGATE_OAUTH_LOGIN_TYPE
   const envEndpoint = process.env.AGGREGATE_OAUTH_ENDPOINT
   const hasEnvConfig = !!(envAppId && envAppKey && envEndpoint)
+
+  let base: any = null
+  try {
+    const row = await db
+      .select({
+        aggregateOAuthEnabled: systemSettings.aggregateOAuthEnabled,
+        aggregateOAuthAppId: systemSettings.aggregateOAuthAppId,
+        aggregateOAuthAppKey: systemSettings.aggregateOAuthAppKey,
+        aggregateOAuthLoginType: systemSettings.aggregateOAuthLoginType,
+        aggregateOAuthEndpoint: systemSettings.aggregateOAuthEndpoint
+      })
+      .from(systemSettings)
+      .orderBy(asc(systemSettings.id))
+      .limit(1)
+    base = row[0] ?? null
+  } catch (e: any) {
+    console.warn(
+      '[AggregateOAuth][WARN] loadAggregateSettings 查询 DB 失败，回退只用 process.env 配置。' +
+        ` DB 错误：${e?.message || String(e)}。 envAppId=${envAppId ? '已配置(len=' + String(envAppId).length + ')' : '空'} ` +
+        ` envEndpoint=${envEndpoint ? '已配置(' + envEndpoint + ')' : '空'}`
+    )
+  }
+
   const dbEnabled = base?.aggregateOAuthEnabled
   const dbHasConfig = !!(
     base?.aggregateOAuthAppId &&
@@ -288,7 +299,7 @@ async function loadAggregateSettings() {
   const loginType = ((base?.aggregateOAuthLoginType as string) || envLoginType || '') as string
   const endpoint = ((base?.aggregateOAuthEndpoint as string) || envEndpoint || '') as string
 
-  return {
+  const result: any = {
     aggregateOAuthEnabled: enabled && !!(appId && appKey && endpoint),
     aggregateOAuthAppId: appId,
     aggregateOAuthAppKey: appKey,
@@ -296,7 +307,19 @@ async function loadAggregateSettings() {
     aggregateOAuthEndpoint: endpoint,
     _dbHasConfig: dbHasConfig,
     _hasEnvConfig: hasEnvConfig
-  } as any
+  }
+
+  console.log(
+    '[AggregateOAuth] loadAggregateSettings -> ' +
+      ` enabled=${result.aggregateOAuthEnabled}` +
+      ` appId=${appId ? 'len=' + String(appId).length : 'EMPTY'}` +
+      ` appKey=${appKey ? 'len=' + String(appKey).length : 'EMPTY'}` +
+      ` loginType=${loginType || 'EMPTY'}` +
+      ` endpoint=${endpoint || 'EMPTY'}` +
+      ` (DB=${dbHasConfig ? '有' : '无'}配置, ENV=${hasEnvConfig ? '有' : '无'}配置, dbEnabled=${dbEnabled ?? '未设置->回退ENV'})`
+  )
+
+  return result
 }
 
 function normalizeEndpoint(endpoint: string): string {
@@ -321,34 +344,78 @@ function isAuxxEndpoint(endpoint: string): boolean {
 const auxxStrategy: OAuthStrategy = {
   async getAuthorizeUrl(redirectUri: string, state: string) {
     const settings = await loadAggregateSettings()
+    console.log(
+      '[AggregateOAuth][auxx][getAuthorizeUrl] ' +
+        `enabled=${settings?.aggregateOAuthEnabled}` +
+        ` endpoint=${settings?.aggregateOAuthEndpoint || 'EMPTY'}` +
+        ` endpoint_safe_ok=${isSafeAggregateOAuthUrl(settings?.aggregateOAuthEndpoint || '')}` +
+        ` redirect_uri=${redirectUri}` +
+        ` state_len=${String(state || '').length}`
+    )
     if (!settings?.aggregateOAuthEnabled || !settings.aggregateOAuthAppId || !settings.aggregateOAuthAppKey || !settings.aggregateOAuthEndpoint) {
-      throw createError({ statusCode: 500, message: '聚合登录未配置' })
+      const hint = []
+      if (!settings?.aggregateOAuthEnabled) hint.push('aggregateOAuthEnabled=false')
+      if (!settings?.aggregateOAuthAppId) hint.push('APP_ID 空')
+      if (!settings?.aggregateOAuthAppKey) hint.push('APP_KEY 空')
+      if (!settings?.aggregateOAuthEndpoint) hint.push('ENDPOINT 空')
+      console.error('[AggregateOAuth][auxx][getAuthorizeUrl] 配置缺失：', hint.join(' | '))
+      throw createError({ statusCode: 500, message: '聚合登录未配置：' + hint.join(' / ') })
     }
     if (!isSafeAggregateOAuthUrl(settings.aggregateOAuthEndpoint)) {
-      throw createError({ statusCode: 500, message: '聚合登录端点不安全或格式错误' })
+      console.error(
+        '[AggregateOAuth][auxx][getAuthorizeUrl] endpoint 不合法，' +
+          'isSafeAggregateOAuthUrl 返回 false。endpoint=' +
+          JSON.stringify(settings.aggregateOAuthEndpoint)
+      )
+      throw createError({
+        statusCode: 500,
+        message:
+          '聚合登录端点不安全或格式错误：endpoint 必须是 https://xxx 或内网 http://localhost，当前值=' +
+          settings.aggregateOAuthEndpoint
+      })
     }
     const loginTypes = getAggregateOAuthLoginTypesOrDefault(settings.aggregateOAuthLoginType)
     const loginType = loginTypes[0] || 'qq'
     const endpoint = normalizeEndpoint(settings.aggregateOAuthEndpoint)
-    const loginQuery = new URLSearchParams({
+    const loginQueryObj: Record<string, string> = {
       act: 'login',
       appid: settings.aggregateOAuthAppId,
       appkey: settings.aggregateOAuthAppKey,
       type: loginType,
       redirect_uri: redirectUri
-    }).toString()
+    }
+    const loginQuery = new URLSearchParams(loginQueryObj).toString()
+    const debugQueryNoKey = new URLSearchParams({ ...loginQueryObj, appkey: '***' }).toString()
+    console.log(
+      `[AggregateOAuth][auxx][getAuthorizeUrl] 请求 auxx Step1：GET ${endpoint}/connect.php?${debugQueryNoKey}`
+    )
     try {
       const resp: any = await $fetch(`${endpoint}/connect.php?${loginQuery}`, {
-        headers: { Accept: 'application/json' }
+        headers: { Accept: 'application/json' },
+        timeout: 15000
       })
+      console.log(
+        '[AggregateOAuth][auxx][getAuthorizeUrl] auxx Step1 返回：' +
+          JSON.stringify({
+            code: resp?.code,
+            msg: resp?.msg,
+            has_url: !!resp?.url,
+            url_prefix: resp?.url ? String(resp.url).slice(0, 80) + '...' : null
+          })
+      )
       if (resp.code !== 0 || !resp.url) {
-        throw new Error(resp.msg || '获取登录跳转地址失败')
+        throw new Error(resp.msg || `获取登录跳转地址失败（auxx code=${resp?.code ?? 'N/A'}）`)
       }
       const sep = resp.url.includes('?') ? '&' : '?'
       return `${resp.url}${sep}state=${encodeURIComponent(state)}`
     } catch (e: any) {
-      console.error('Auxx OAuth authorize URL failed', e)
-      throw new Error(e.message || '获取登录跳转地址失败')
+      const status = e?.response?.status || e?.status || 'N/A'
+      const body = e?.response?._data ? JSON.stringify(e.response._data).slice(0, 400) : e?.data ? JSON.stringify(e.data).slice(0, 400) : null
+      console.error(
+        '[AggregateOAuth][auxx][getAuthorizeUrl] fetch 异常：' +
+          ` err=${e?.message || String(e)} status=${status} body=${body}`
+      )
+      throw new Error(e.message || '获取登录跳转地址失败（auxx 不可达或凭据错误）')
     }
   },
   async exchangeToken(code: string, redirectUri: string) {