ryan
5412c385dc
fix(oauth): remove pending oauth auto-binding and enforce oidc policies
...
- Complete removal of completePendingOAuthBinding logic to prevent unintended account takeovers (AUTH-ROUTE-1).
- Add strict OIDC policy checks (global switch and source active states) across authorization and callback paths (AUTH-POLICY-1).
- Fix OIDC test cases to properly clear the Redis-backed system config cache using composite keys.
2026-06-13 10:06:49 +08:00
ryan
895788974c
fix(oauth): secure OAuth state session binding to prevent account takeover
...
Bind OAuth state payloads to the initiating session token and user ID.
Verifies session token hash continuity during callback, and validates that
the user ID completing the binding flow matches the user ID that initiated it.
2026-06-13 09:55:07 +08:00
ryan
50d21b431b
feat(valkey): migrate redis to valkey and fix updater custom prefix selection
...
Replace redis:7-alpine with valkey:8.0-alpine and configure MaintNotificationsConfig ModeDisabled to suppress handshake warnings on Valkey. Resolve updater bug by dynamically matching custom repository asset name prefixes like PixezSync.
2026-06-12 15:44:49 +08:00
ryan
3228574a8c
兼容包名
2026-06-12 15:32:47 +08:00
ryan
752101612e
打印日志
2026-06-12 15:17:45 +08:00
ryan
c9642fb5e2
修复退出异常问题
2026-06-12 14:32:27 +08:00
ryan
c916f566d9
系统控制台完成更新
2026-06-12 14:12:03 +08:00
ryan
6a1f89936e
登录界面优化
2026-06-12 11:35:48 +08:00
ryan
d9df78d2c7
邮箱注册要求
2026-06-12 10:55:24 +08:00
ryan
1fe5118029
登录状态记录
2026-06-12 10:15:29 +08:00
ryan
62fcd245f2
fix: 映射后台任务查询接口的 task_type 参数为 Asynq 任务名以解决类型过滤无数据问题
2026-06-11 23:28:50 +08:00
ryan
7c125ccef2
fix: 修复任务执行记录列表按任务类型和状态过滤失效的 Bug 并更新 Swagger
2026-06-11 20:14:02 +08:00
ryan
46760d4286
缓存处理修补
2026-06-11 19:07:22 +08:00
ryan
5915b31519
图片预热任务
2026-06-11 17:49:08 +08:00
ryan
7da4b72d24
任务日志优化
2026-06-11 16:56:53 +08:00
ryan
f14875a8de
图片缓存不过期
2026-06-11 15:57:31 +08:00
ryan
1eef5336e3
修复文件管理页面分页问题
2026-06-11 15:52:35 +08:00
ryan
533f783268
质量优化
2026-06-11 15:36:46 +08:00
ryan
6b93320404
接口参数调整
2026-06-11 15:32:44 +08:00
ryan
ad97ca7df1
图片压缩调用缓存
2026-06-11 15:23:15 +08:00
ryan
0221d4de14
缓存框架
2026-06-11 15:12:09 +08:00
ryan
e8e0326879
图片压缩
2026-06-11 14:58:17 +08:00
ryan
eb9f6023f0
文件管理权限控制
2026-06-11 14:17:36 +08:00
ryan
5e0de01c4b
文件管理权限控制
2026-06-11 14:09:32 +08:00
ryan
312bc7d4d5
框架表改名 w_{name}
2026-06-11 09:27:15 +08:00
ryan
786fe71778
优化定时任务
2026-06-11 09:20:28 +08:00
ryan
616242fad8
去除 access_token 访问写库逻辑
2026-06-11 09:09:17 +08:00
ryan
6cbc368dc1
修复任务日志显示问题
2026-06-11 09:03:40 +08:00
ryan
c1a1904a67
修复重复注册问题
2026-06-11 09:03:24 +08:00
ryan
3023d47eec
解耦任务框架与业务任务
2026-06-11 08:52:44 +08:00
ryan
5dedff1324
修复任务参数类型转换
2026-06-11 08:40:08 +08:00
ryan
5241055030
根据名称获取认证源(名称比较不区分大小写)
2026-06-11 08:06:46 +08:00
ryan
983228227e
AccessToken 默认非管理员权限
2026-06-10 22:50:44 +08:00
ryan
e6a6182a0c
优化任务管理
2026-06-10 20:15:12 +08:00
ryan
db163034c0
优化任务管理
2026-06-10 19:36:35 +08:00
ryan
15b3c83625
更新示例
2026-06-10 15:11:42 +08:00
ryan
57944398e6
质量优化
2026-06-10 13:50:58 +08:00
ryan
3ed4dec4a3
db manager
2026-06-10 13:42:42 +08:00
ryan
d05acd804f
精简
2026-06-10 11:33:33 +08:00
ryan
ebf644adb7
修复单位问题
2026-06-09 21:54:03 +08:00
ryan
32e4a32462
make build
2026-06-09 21:45:57 +08:00
ryan
05ef5ed7bd
数据导出
2026-06-09 21:18:58 +08:00
ryan
1c76c7158a
质量优化
2026-06-09 20:38:14 +08:00
ryan
673061265c
质量优化
2026-06-09 20:28:05 +08:00
ryan
50f39a6983
修复创建账号逻辑
2026-06-09 20:07:25 +08:00
ryan
055005688a
升级数据库后更新缓存
2026-06-09 16:47:49 +08:00
ryan
6b3c0217f0
goose 迁移
2026-06-09 16:47:49 +08:00
ryan
40e8a7cfa3
重构获取公共参数
2026-06-09 16:47:49 +08:00
ryan
bff09241d3
skill
2026-06-09 16:47:49 +08:00
ryan
73b220de3c
用户详情
2026-06-09 16:47:49 +08:00