feat: 添加 OAuth 认证支持及相关改进

- 新增 OAuth 模块，支持 LinuxDo/GitHub/Google 等第三方登录
- 用户邮箱改为可选字段，支持无邮箱注册
- 新增模块配置验证状态 (config_validated/config_error)
- 系统设置界面改为分块独立保存
- 用户设置新增 OAuth 绑定管理和首次密码设置
- 登录界面支持 OAuth 按钮展示
- 邮箱验证设置移至邮件设置页面

tests/api/test_pipeline.py

@@ -341,11 +341,15 @@ class TestPipelineAdminAuth:
     @pytest.mark.asyncio
     async def test_authenticate_admin_success(self, pipeline: ApiRequestPipeline) -> None:
         """测试管理员认证成功"""
+        created_at = datetime.now(timezone.utc)
+
         mock_user = MagicMock()
         mock_user.id = "admin-123"
         mock_user.is_active = True
+        mock_user.is_deleted = False
         mock_user.role = UserRole.ADMIN
         mock_user.email = "admin@example.com"
+        mock_user.created_at = created_at
 
         mock_request = MagicMock()
         mock_request.headers = {"authorization": "Bearer valid-token"}
@@ -358,7 +362,7 @@ class TestPipelineAdminAuth:
             pipeline.auth_service,
             "verify_token",
             new_callable=AsyncMock,
-            return_value={"user_id": "admin-123"},
+            return_value={"user_id": "admin-123", "created_at": created_at.isoformat()},
         ):
             user, management_token = await pipeline._authenticate_admin(mock_request, mock_db)
 
@@ -369,11 +373,15 @@ class TestPipelineAdminAuth:
     @pytest.mark.asyncio
     async def test_authenticate_admin_lowercase_bearer(self, pipeline: ApiRequestPipeline) -> None:
         """测试 bearer (小写) 前缀也能正确解析"""
+        created_at = datetime.now(timezone.utc)
+
         mock_user = MagicMock()
         mock_user.id = "admin-123"
         mock_user.is_active = True
+        mock_user.is_deleted = False
         mock_user.role = UserRole.ADMIN
         mock_user.email = "admin@example.com"
+        mock_user.created_at = created_at
 
         mock_request = MagicMock()
         mock_request.headers = {"authorization": "bearer valid-token"}
@@ -386,7 +394,7 @@ class TestPipelineAdminAuth:
             pipeline.auth_service,
             "verify_token",
             new_callable=AsyncMock,
-            return_value={"user_id": "admin-123"},
+            return_value={"user_id": "admin-123", "created_at": created_at.isoformat()},
         ) as mock_verify:
             user, management_token = await pipeline._authenticate_admin(mock_request, mock_db)
 
@@ -405,10 +413,14 @@ class TestPipelineUserAuth:
     @pytest.mark.asyncio
     async def test_authenticate_user_lowercase_bearer(self, pipeline: ApiRequestPipeline) -> None:
         """测试 bearer (小写) 前缀也能正确解析"""
+        created_at = datetime.now(timezone.utc)
+
         mock_user = MagicMock()
         mock_user.id = "user-123"
         mock_user.is_active = True
+        mock_user.is_deleted = False
         mock_user.email = "user@example.com"
+        mock_user.created_at = created_at
 
         mock_request = MagicMock()
         mock_request.headers = {"authorization": "bearer valid-token"}
@@ -421,7 +433,7 @@ class TestPipelineUserAuth:
             pipeline.auth_service,
             "verify_token",
             new_callable=AsyncMock,
-            return_value={"user_id": "user-123"},
+            return_value={"user_id": "user-123", "created_at": created_at.isoformat()},
         ) as mock_verify:
             user, management_token = await pipeline._authenticate_user(mock_request, mock_db)