[功能] POW 有效期优化

openflare_server/service/agent_test.go

@@ -1,6 +1,9 @@
 package service
 
-import "testing"
+import (
+	"strings"
+	"testing"
+)
 
 func TestGetActiveConfigForAgentIncludesPoWConfig(t *testing.T) {
 	setupServiceTestDB(t)
@@ -39,3 +42,37 @@ func TestGetActiveConfigForAgentIncludesPoWConfig(t *testing.T) {
 		t.Fatal("expected agent config to include pow_config.json support file")
 	}
 }
+
+func TestGetActiveConfigForAgentUsesTenMinutePoWSessionDefault(t *testing.T) {
+	setupServiceTestDB(t)
+
+	_, err := CreateProxyRoute(ProxyRouteInput{
+		Domain:     "pow-default.example.com",
+		OriginURL:  "https://origin.internal",
+		Enabled:    true,
+		PoWEnabled: true,
+		PoWConfig:  `{}`,
+	})
+	if err != nil {
+		t.Fatalf("CreateProxyRoute failed: %v", err)
+	}
+
+	if _, err := PublishConfigVersion("root"); err != nil {
+		t.Fatalf("PublishConfigVersion failed: %v", err)
+	}
+
+	activeConfig, err := GetActiveConfigForAgent()
+	if err != nil {
+		t.Fatalf("GetActiveConfigForAgent failed: %v", err)
+	}
+
+	for _, file := range activeConfig.SupportFiles {
+		if file.Path == "pow_config.json" {
+			if !strings.Contains(file.Content, `"session_ttl":600`) {
+				t.Fatalf("expected default PoW session TTL to be 600 seconds, got %s", file.Content)
+			}
+			return
+		}
+	}
+	t.Fatal("expected agent config to include pow_config.json support file")
+}

openflare_server/service/proxy_route.go

@@ -1097,7 +1097,7 @@ func defaultPoWConfig() ProxyRoutePoWConfig {
 	return ProxyRoutePoWConfig{
 		Difficulty:   4,
 		Algorithm:    "fast",
-		SessionTTL:   86400,
+		SessionTTL:   600,
 		ChallengeTTL: 300,
 		Whitelist:    ProxyRoutePoWListConfig{IPs: []string{}, IPCidrs: []string{}, Paths: []string{}, PathRegexes: []string{}, UserAgents: []string{}},
 		Blacklist:    ProxyRoutePoWListConfig{IPs: []string{}, IPCidrs: []string{}, Paths: []string{}, PathRegexes: []string{}, UserAgents: []string{}},

openflare_server/web/features/proxy-routes/components/proxy-route-config-page.tsx

@@ -806,7 +806,7 @@ function PowSection({
       pow_enabled: route.pow_enabled,
       difficulty: powConfig?.difficulty ?? 4,
       algorithm: powConfig?.algorithm ?? 'fast',
-      session_ttl: powConfig?.session_ttl ?? 86400,
+      session_ttl: powConfig?.session_ttl ?? 600,
       challenge_ttl: powConfig?.challenge_ttl ?? 300,
       whitelist: buildPowListFromConfig(powConfig?.whitelist),
       blacklist: buildPowListFromConfig(powConfig?.blacklist),
@@ -818,7 +818,7 @@ function PowSection({
       pow_enabled: route.pow_enabled,
       difficulty: powConfig?.difficulty ?? 4,
       algorithm: powConfig?.algorithm ?? 'fast',
-      session_ttl: powConfig?.session_ttl ?? 86400,
+      session_ttl: powConfig?.session_ttl ?? 600,
       challenge_ttl: powConfig?.challenge_ttl ?? 300,
       whitelist: buildPowListFromConfig(powConfig?.whitelist),
       blacklist: buildPowListFromConfig(powConfig?.blacklist),
@@ -904,8 +904,8 @@ function PowSection({
         </ResourceField>
 
         <ResourceField
-          label="会话有效期（秒）"
-          hint="通过验证后 Cookie 的有效期。"
+          label="会话空闲有效期（秒）"
+          hint="通过验证后，若在此时间内没有新请求，Cookie 会失效；每次访问会自动续期。默认 600 秒。"
           error={form.formState.errors.session_ttl?.message}
         >
           <ResourceInput