feat: web sso (#7135)

api/controllers/web/passport.py

@@ -9,21 +9,23 @@ from controllers.web.error import WebSSOAuthRequiredError
 from extensions.ext_database import db
 from libs.passport import PassportService
 from models.model import App, EndUser, Site
+from services.enterprise.enterprise_service import EnterpriseService
 from services.feature_service import FeatureService
 
 
 class PassportResource(Resource):
     """Base resource for passport."""
     def get(self):
-
         system_features = FeatureService.get_system_features()
-        if system_features.sso_enforced_for_web:
-            raise WebSSOAuthRequiredError()
-
         app_code = request.headers.get('X-App-Code')
         if app_code is None:
             raise Unauthorized('X-App-Code header is missing.')
 
+        if system_features.sso_enforced_for_web:
+            app_web_sso_enabled = EnterpriseService.get_app_web_sso_enabled(app_code).get('enabled', False)
+            if app_web_sso_enabled:
+                raise WebSSOAuthRequiredError()
+        
         # get site from db and check if it is normal
         site = db.session.query(Site).filter(
             Site.code == app_code,