11 Commits

Author	SHA1	Message	Date
ryan	895788974c	fix(oauth): secure OAuth state session binding to prevent account takeover ... Bind OAuth state payloads to the initiating session token and user ID. Verifies session token hash continuity during callback, and validates that the user ID completing the binding flow matches the user ID that initiated it.	2026-06-13 09:55:07 +08:00
ryan	5e0de01c4b	文件管理权限控制	2026-06-11 14:09:32 +08:00
ryan	616242fad8	去除 access_token 访问写库逻辑	2026-06-11 09:09:17 +08:00
ryan	983228227e	AccessToken 默认非管理员权限	2026-06-10 22:50:44 +08:00
ryan	d05acd804f	精简	2026-06-10 11:33:33 +08:00
ryan	c6eea8111d	fix(revive): rename unused parameters to _ for lint compliance	2026-06-09 15:03:13 +08:00
ryan	85f91b1ed7	更新 license .github	2026-06-08 20:38:17 +08:00
ryan	e3ef6c9d27	修改路径	2026-06-08 20:38:17 +08:00
ryan	62bd5d09d4	移除 risk	2026-06-08 20:37:57 +08:00
ryan	70a13dc107	upload+accessKey	2026-06-08 20:37:40 +08:00
ryan	8a782525de	压缩历史至 95081aff	2026-06-08 20:34:27 +08:00