移除Host头验证中间件及相关逻辑，简化OAuth相关API的请求处理，优化代码结构和可读性。

app/routes/callback.tsx

@@ -1,23 +1,8 @@
 import { type LoaderFunctionArgs, redirect } from "@remix-run/node";
-import { createUserSession, saveUserInfo, type UserRole } from "~/api/login/auth.server";
+import { createUserSession, saveUserInfo } from "~/api/login/auth.server";
 import { JWTUtils, type UserInfoForJWT } from "~/utils/jwt";
-import { validateRequest, logSecurityEvent } from "~/middleware/host-validation";
 
 export async function loader({ request }: LoaderFunctionArgs) {
-  // ==================== Host头验证 ====================
-  // OAuth回调是安全敏感的操作，需要严格验证请求来源
-  const hostValidation = validateRequest(request);
-  if (!hostValidation.valid) {
-    // 记录安全事件
-    logSecurityEvent('host_validation_failed', hostValidation.error || 'Unknown validation error', request);
-    
-    console.error('❌ OAuth回调Host验证失败:', hostValidation.error);
-    return redirect("/login?error=invalid_host");
-  }
-  
-  // console.log('✅ OAuth回调Host验证通过');
-  // ==================== Host头验证结束 ====================
-  
   const url = new URL(request.url);
   const origin = url.origin; // 获取请求的源 (e.g., "http://10.79.97.17:51703")
   const code = url.searchParams.get("code");
@@ -158,7 +143,7 @@ export async function loader({ request }: LoaderFunctionArgs) {
     // 使用统一的session创建函数
     return createUserSession({
       isAuthenticated: true,
-      userRole: userRole as UserRole,
+      userRole: userRole as 'common' | 'developer',
       redirectTo,
       accessToken: tokenResponse.access_token,
       refreshToken: tokenResponse.refresh_token,