feat: support real browser auth import

frontend/src/views/Upstreams.vue

@@ -120,8 +120,7 @@
         <el-form-item v-if="!editingId" label="系统类型（快捷配置）">
           <el-select v-model="quickPlatform" @change="handlePlatformChange" style="width: 100%">
             <el-option label="Sub2API" value="sub2api" />
-            <el-option label="New-API (管理员Key)" value="new-api" />
-            <el-option label="New-API (普通账号)" value="new-api-user" />
+            <el-option label="New-API" value="new-api-user" />
             <el-option label="自定义" value="custom" />
           </el-select>
         </el-form-item>
@@ -405,6 +404,7 @@
     <AuthCaptureDialog
       v-model="authCaptureVisible"
       :initial-url="authCaptureInitialUrl"
+      :preferred-types="authCapturePreferredTypes"
       @select="handleAuthCaptureSelect"
     />
   </div>
@@ -416,7 +416,7 @@ import { ElMessage, ElMessageBox } from 'element-plus'
 import type { FormInstance } from 'element-plus'
 import dayjs from 'dayjs'
 import { Refresh, Plus, Edit, List, Delete, Warning, Clock, ArrowRight, Pointer, Key } from '@element-plus/icons-vue'
-import { upstreamsApi, type GeneratedUpstreamKey, type UpstreamData, type UpstreamBatchActionResponse } from '@/api'
+import { upstreamsApi, type AuthCaptureCandidate, type GeneratedUpstreamKey, type UpstreamData, type UpstreamBatchActionResponse } from '@/api'
 import AuthCaptureDialog from '@/components/AuthCaptureDialog.vue'
 
 const list = ref<(UpstreamData & { _testing?: boolean; _checking?: boolean })[]>([])
@@ -459,6 +459,12 @@ const authCaptureInitialUrl = computed(() => {
   return base + '/login'
 })
 
+const authCapturePreferredTypes = computed<AuthCaptureCandidate['type'][]>(() => {
+  if (quickPlatform.value === 'sub2api') return ['bearer_token', 'api_key', 'cookie_bundle', 'cookie']
+  if (quickPlatform.value === 'new-api-user') return ['cookie_bundle', 'cookie', 'bearer_token', 'api_key']
+  return ['bearer_token', 'api_key', 'cookie_bundle', 'cookie']
+})
+
 function openAuthCapture() {
   authCaptureVisible.value = true
 }
@@ -480,6 +486,9 @@ function handleAuthCaptureSelect(candidate: {
     // 完整 cookie 组：value 已是完整 "name1=v1; name2=v2" 字符串
     form.value.auth_type = 'cookie'
     form.value.auth_config.cookie_string = candidate.value
+    if (quickPlatform.value === 'sub2api') {
+      ElMessage.warning('Sub2API 通常需要 Bearer Token；Cookie 只能在确认上游支持 Cookie 鉴权时使用')
+    }
     if (candidate.new_api_user) {
       form.value.auth_config.new_api_user = candidate.new_api_user
       form.value.api_prefix = ''
@@ -498,6 +507,9 @@ function handleAuthCaptureSelect(candidate: {
     form.value.auth_config.cookie_string = candidate.cookie_name && candidate.cookie_value
       ? `${candidate.cookie_name}=${candidate.cookie_value}`
       : candidate.value
+    if (quickPlatform.value === 'sub2api') {
+      ElMessage.warning('Sub2API 通常需要 Bearer Token；Cookie 只能在确认上游支持 Cookie 鉴权时使用')
+    }
     if (candidate.new_api_user) {
       form.value.auth_config.new_api_user = candidate.new_api_user
       form.value.api_prefix = ''
@@ -542,14 +554,6 @@ function handlePlatformChange(val: string) {
     form.value.balance_endpoint = '/auth/me'
     form.value.balance_response_path = 'data.balance'
     form.value.balance_divisor = 1.0
-  } else if (val === 'new-api') {
-    form.value.api_prefix = ''
-    form.value.groups_endpoint = '/api/group/'
-    form.value.rate_endpoint = '/api/option/?key=GroupRatio'
-    form.value.auth_type = 'bearer'
-    form.value.balance_endpoint = '/api/user/self'
-    form.value.balance_response_path = 'data.quota'
-    form.value.balance_divisor = 500000
   } else if (val === 'new-api-user') {
     form.value.api_prefix = ''
     form.value.groups_endpoint = '/api/user/self/groups'
@@ -609,6 +613,16 @@ const healthyRate = computed(() => {
 
 const pendingChecks = computed(() => list.value.filter((item) => !item.last_checked_at).length)
 
+function isNewApiUserUpstream(row: UpstreamData | null) {
+  if (!row) return false
+  return row.api_prefix === ''
+    && (
+      row.groups_endpoint === '/api/user/self/groups'
+      || row.auth_config_masked?.login_path === '/api/user/login'
+      || Boolean(row.auth_config_masked?.new_api_user)
+    )
+}
+
 const latestCheckedAt = computed(() => {
   const times = list.value
     .map((item) => item.last_checked_at)
@@ -799,7 +813,7 @@ async function openKeyGenerate(row: UpstreamData) {
     rate_limit_5h: 0,
     rate_limit_1d: 0,
     rate_limit_7d: 0,
-    endpoint: '/keys',
+    endpoint: isNewApiUserUpstream(row) ? '/api/token' : '/keys',
   }
   useKeyExpiry.value = false
   keyExpiresDays.value = 30