7b379863b4
fix(upload): restrict cross-user private file access (UPLOAD-1)
...
- Add access_mode column to w_uploads table (0 = private, 1 = public) and initialize data in a single migration script
- Enforce strict ownership check for private files during download
- Allow public files to follow whitelisted public-access rules
- Default access_mode to public for avatars and private for generic uploads
- Update frontend service to support optional accessMode parameter
2026-06-13 10:13:41 +08:00
5412c385dc
fix(oauth): remove pending oauth auto-binding and enforce oidc policies
...
- Complete removal of completePendingOAuthBinding logic to prevent unintended account takeovers (AUTH-ROUTE-1).
- Add strict OIDC policy checks (global switch and source active states) across authorization and callback paths (AUTH-POLICY-1).
- Fix OIDC test cases to properly clear the Redis-backed system config cache using composite keys.
2026-06-13 10:06:49 +08:00
895788974c
fix(oauth): secure OAuth state session binding to prevent account takeover
...
Bind OAuth state payloads to the initiating session token and user ID.
Verifies session token hash continuity during callback, and validates that
the user ID completing the binding flow matches the user ID that initiated it.
2026-06-13 09:55:07 +08:00
3228574a8c
兼容包名
2026-06-12 15:32:47 +08:00
752101612e
打印日志
2026-06-12 15:17:45 +08:00
c916f566d9
系统控制台完成更新
2026-06-12 14:12:03 +08:00
6a1f89936e
登录界面优化
2026-06-12 11:35:48 +08:00
d9df78d2c7
邮箱注册要求
2026-06-12 10:55:24 +08:00
1fe5118029
登录状态记录
2026-06-12 10:15:29 +08:00
62fcd245f2
fix: 映射后台任务查询接口的 task_type 参数为 Asynq 任务名以解决类型过滤无数据问题
2026-06-11 23:28:50 +08:00
7c125ccef2
fix: 修复任务执行记录列表按任务类型和状态过滤失效的 Bug 并更新 Swagger
2026-06-11 20:14:02 +08:00
46760d4286
缓存处理修补
2026-06-11 19:07:22 +08:00
5915b31519
图片预热任务
2026-06-11 17:49:08 +08:00
f14875a8de
图片缓存不过期
2026-06-11 15:57:31 +08:00
1eef5336e3
修复文件管理页面分页问题
2026-06-11 15:52:35 +08:00
533f783268
质量优化
2026-06-11 15:36:46 +08:00
6b93320404
接口参数调整
2026-06-11 15:32:44 +08:00
ad97ca7df1
图片压缩调用缓存
2026-06-11 15:23:15 +08:00
0221d4de14
缓存框架
2026-06-11 15:12:09 +08:00
e8e0326879
图片压缩
2026-06-11 14:58:17 +08:00
eb9f6023f0
文件管理权限控制
2026-06-11 14:17:36 +08:00
5e0de01c4b
文件管理权限控制
2026-06-11 14:09:32 +08:00
312bc7d4d5
框架表改名 w_{name}
2026-06-11 09:27:15 +08:00
616242fad8
去除 access_token 访问写库逻辑
2026-06-11 09:09:17 +08:00
3023d47eec
解耦任务框架与业务任务
2026-06-11 08:52:44 +08:00
5dedff1324
修复任务参数类型转换
2026-06-11 08:40:08 +08:00
983228227e
AccessToken 默认非管理员权限
2026-06-10 22:50:44 +08:00
e6a6182a0c
优化任务管理
2026-06-10 20:15:12 +08:00
db163034c0
优化任务管理
2026-06-10 19:36:35 +08:00
15b3c83625
更新示例
2026-06-10 15:11:42 +08:00
57944398e6
质量优化
2026-06-10 13:50:58 +08:00
3ed4dec4a3
db manager
2026-06-10 13:42:42 +08:00
d05acd804f
精简
2026-06-10 11:33:33 +08:00
ebf644adb7
修复单位问题
2026-06-09 21:54:03 +08:00
05ef5ed7bd
数据导出
2026-06-09 21:18:58 +08:00
1c76c7158a
质量优化
2026-06-09 20:38:14 +08:00
673061265c
质量优化
2026-06-09 20:28:05 +08:00
50f39a6983
修复创建账号逻辑
2026-06-09 20:07:25 +08:00
40e8a7cfa3
重构获取公共参数
2026-06-09 16:47:49 +08:00
bff09241d3
skill
2026-06-09 16:47:49 +08:00
73b220de3c
用户详情
2026-06-09 16:47:49 +08:00
c6eea8111d
fix(revive): rename unused parameters to _ for lint compliance
2026-06-09 15:03:13 +08:00
e06f76436e
refactor: extract magic numbers to named constants for mnd lint compliance
2026-06-09 13:44:29 +08:00
b05d26c9c6
docs: add package and exported symbol comments for revive lint compliance
2026-06-09 13:42:06 +08:00
4ac9857fe8
代码质量优化
2026-06-09 12:28:12 +08:00
31f0fb4ceb
规约
2026-06-09 11:26:57 +08:00
61bc569bd8
clickhouse 日志采集
2026-06-09 10:39:59 +08:00
7a62a78fad
smtp 发件前验证配置
2026-06-09 09:01:14 +08:00
2ae55da52e
seo 检索开关
2026-06-09 08:56:25 +08:00
b0023787c5
fix
2026-06-09 08:51:53 +08:00
ryan