16 Commits

Author	SHA1	Message	Date
ryan	895788974c	fix(oauth): secure OAuth state session binding to prevent account takeover ... Bind OAuth state payloads to the initiating session token and user ID. Verifies session token hash continuity during callback, and validates that the user ID completing the binding flow matches the user ID that initiated it.	2026-06-13 09:55:07 +08:00
ryan	d9df78d2c7	邮箱注册要求	2026-06-12 10:55:24 +08:00
ryan	1fe5118029	登录状态记录	2026-06-12 10:15:29 +08:00
ryan	57944398e6	质量优化	2026-06-10 13:50:58 +08:00
ryan	d05acd804f	精简	2026-06-10 11:33:33 +08:00
ryan	673061265c	质量优化	2026-06-09 20:28:05 +08:00
ryan	c6eea8111d	fix(revive): rename unused parameters to _ for lint compliance	2026-06-09 15:03:13 +08:00
ryan	cd3d0c9f82	重构	2026-06-08 20:38:17 +08:00
ryan	02f458856d	用户优化	2026-06-08 20:38:17 +08:00
ryan	d99bd5231a	安全加固	2026-06-08 20:38:17 +08:00
ryan	85f91b1ed7	更新 license .github	2026-06-08 20:38:17 +08:00
ryan	e3ef6c9d27	修改路径	2026-06-08 20:38:17 +08:00
ryan	db68a130ce	嵌入与邮箱	2026-06-08 20:37:57 +08:00
ryan	9d0f9f0576	user	2026-06-08 20:37:40 +08:00
ryan	4b72419a96	去除默认OIDC	2026-06-08 20:37:40 +08:00
ryan	360a26f109	oauth	2026-06-08 20:34:28 +08:00