3 Commits

Author	SHA1	Message	Date
long-agent	b6aff65975	fix: unify handler response format in multiple handlers ... - captcha_handler.go: Fix GenerateCaptcha/VerifyCaptcha to use {code, message, data} - password_reset_handler.go: Fix all error responses to use {code, message} - settings_handler.go: Add missing "code" and "message" fields - sms_handler.go: Fix error responses to use {code, message} - sso_handler.go: Fix all error responses to use {code, message, data} - stats_handler.go: Add missing "message" field in success responses - theme_handler.go: Fix error responses to use {code, message} - totp_handler.go: Fix all responses to use {code, message, data} Standardize all JSON responses to {code: 0, message: "success", data: ...} for success and {code: XXX, message: "..."} for errors.	2026-04-11 13:06:58 +08:00
long-agent	765a50b7d4	fix: 生产安全修复 + Go SDK + CAS SSO框架 ... 安全修复: - CRITICAL: SSO重定向URL注入漏洞 - 修复redirect_uri白名单验证 - HIGH: SSO ClientSecret未验证 - 使用crypto/subtle.ConstantTimeCompare验证 - HIGH: 邮件验证码熵值过低(3字节) - 提升到6字节(48位熵) - HIGH: 短信验证码熵值过低(4字节) - 提升到6字节 - HIGH: Goroutine使用已取消上下文 - auth_email.go使用独立context+超时 - HIGH: SQL LIKE查询注入风险 - permission/role仓库使用escapeLikePattern 新功能: - Go SDK: sdk/go/user-management/ 完整SDK实现 - CAS SSO框架: internal/auth/cas.go CAS协议支持 其他: - L1Cache实例问题修复 - AuthMiddleware共享l1Cache - 设备指纹XSS防护 - 内存存储替代localStorage - 响应格式协议中间件 - 导出无界查询修复	2026-04-03 17:38:31 +08:00
long-agent	dcc1f186f8	feat: backend core - auth, user, role, permission, device, webhook, monitoring, cache, repository, service, middleware, API handlers	2026-04-02 11:19:50 +08:00