f6f8c25930
fix(router): restrict CORS origin reflection to allowed hosts (AUTH-ROUTE-5)
...
- Extract isOriginAllowed helper to match Origin against server_address configurations
- Ensure arbitrary origins are not reflected and credentials are not allowed when server_address is unconfigured or mismatched
- Trim trailing slashes from allowed origins configuration for robust matching
- Add TestCORSMiddleware to cover all CORS matching and rejection scenarios
2026-06-13 10:23:20 +08:00
895788974c
fix(oauth): secure OAuth state session binding to prevent account takeover
...
Bind OAuth state payloads to the initiating session token and user ID.
Verifies session token hash continuity during callback, and validates that
the user ID completing the binding flow matches the user ID that initiated it.
2026-06-13 09:55:07 +08:00
c916f566d9
系统控制台完成更新
2026-06-12 14:12:03 +08:00
0221d4de14
缓存框架
2026-06-11 15:12:09 +08:00
5e0de01c4b
文件管理权限控制
2026-06-11 14:09:32 +08:00
db163034c0
优化任务管理
2026-06-10 19:36:35 +08:00
15b3c83625
更新示例
2026-06-10 15:11:42 +08:00
57944398e6
质量优化
2026-06-10 13:50:58 +08:00
3ed4dec4a3
db manager
2026-06-10 13:42:42 +08:00
d05acd804f
精简
2026-06-10 11:33:33 +08:00
05ef5ed7bd
数据导出
2026-06-09 21:18:58 +08:00
73b220de3c
用户详情
2026-06-09 16:47:49 +08:00
c6eea8111d
fix(revive): rename unused parameters to _ for lint compliance
2026-06-09 15:03:13 +08:00
e06f76436e
refactor: extract magic numbers to named constants for mnd lint compliance
2026-06-09 13:44:29 +08:00
61bc569bd8
clickhouse 日志采集
2026-06-09 10:39:59 +08:00
2ae55da52e
seo 检索开关
2026-06-09 08:56:25 +08:00
cd3d0c9f82
重构
2026-06-08 20:38:17 +08:00
0f65202659
个人信息页面增强
2026-06-08 20:38:17 +08:00
b96624a251
模板系统
2026-06-08 20:38:17 +08:00
85f91b1ed7
更新 license .github
2026-06-08 20:38:17 +08:00
e3ef6c9d27
修改路径
2026-06-08 20:38:17 +08:00
c6cc8c3305
logs
2026-06-08 20:38:01 +08:00
72c74803be
优化
2026-06-08 20:38:01 +08:00
db68a130ce
嵌入与邮箱
2026-06-08 20:37:57 +08:00
62bd5d09d4
移除 risk
2026-06-08 20:37:57 +08:00
72d72810b2
cap 与系统信息
2026-06-08 20:37:47 +08:00
9d0f9f0576
user
2026-06-08 20:37:40 +08:00
589ae08318
async task framework
2026-06-08 20:37:40 +08:00
70a13dc107
upload+accessKey
2026-06-08 20:37:40 +08:00
360a26f109
oauth
2026-06-08 20:34:28 +08:00
48d414e197
裁剪
...
swagger
移除 merchant
swagger
改造首页内容为通用后台管理系统定位
- 修改首页标题从 'LINUX DO Credit' 改为 'Modern Platform'
- 更新副标题为 '为二次开发而生'
- 更新首页描述为通用平台的特点
- 更新首页特性标签为 '开箱即用、高度可扩展、工业级基建'
- 修改展示卡片为技术栈和二次开发相关
- 更新开发者示例代码为通用的注册和 API Key 获取示例
- 更新页脚品牌名为 'Modern Platform'
- 调整页脚导航链接为通用平台相关内容
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
去除遗留
裁剪
移除 /api/v1/user/pay-key 相关代码
- 删除后端 UpdatePayKey 处理器函数和 UpdatePayKeyRequest 结构体
- 删除 User 模型中的 PayKey 字段
- 删除 User.VerifyPayKey 方法
- 删除 EncryptPayKeyFailed 错误常量
- 删除 /api/v1/user/pay-key PUT 路由
- 删除 OAuth 返回中的 IsPayKey 字段
- 删除前端 UserService.updatePayKey 方法
- 删除前端所有支付密钥 UI 和逻辑
- 更新相关的导出和注释
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
去除遗留
api 修正
系统配置
前端裁剪
后端裁剪
init
2026-06-08 20:34:28 +08:00
8a782525de
压缩历史至 95081aff
2026-06-08 20:34:27 +08:00
ryan