Commit Graph

Select branches

Hide Pull Requests

fix/report-v6-p0-auth-and-idor

fix/status-review-sync-20260409

main

#1

Mono Color

• a332917142 fix: harden auth flows and align api contracts main Your Name 2026-05-30 21:29:24 +08:00
• 7ad65a0138 test: add more service layer tests Your Name 2026-05-30 17:34:48 +08:00
• 52161d5a9c test: add UserService unit tests (38+ test functions) Your Name 2026-05-30 17:28:55 +08:00
• 108ee462d3 test: add AuthService and CaptchaService unit tests Your Name 2026-05-30 14:54:36 +08:00
• af37de9eda test: add Export, Settings, and Theme handler tests (49 test functions) Your Name 2026-05-30 14:37:15 +08:00
• e3cec7cf01 test: add SSO, CustomField, and Avatar handler tests (72 test functions) Your Name 2026-05-30 11:07:56 +08:00
• 429fbfca9f docs: update REAL_PROJECT_STATUS.md with security test coverage Your Name 2026-05-30 10:50:22 +08:00
• ea12855fe1 test: add PasswordResetHandler and LogHandler security tests (37 test functions) Your Name 2026-05-30 10:48:41 +08:00
• 3bcbe6712f docs: update REAL_PROJECT_STATUS.md with handler test coverage milestone Your Name 2026-05-30 10:39:19 +08:00
• 66b484bb4d test: fix UserHandler test assertions to accept server error codes Your Name 2026-05-30 10:38:49 +08:00
• 65de976fe3 test: add comprehensive DeviceHandler tests for device management and trust Your Name 2026-05-30 10:35:55 +08:00
• 0d977c6d0c test: add comprehensive RBAC handler tests for roles and permissions Your Name 2026-05-30 10:28:36 +08:00
• e4c16dd6c5 test: add comprehensive TOTPHandler security tests Your Name 2026-05-30 10:19:50 +08:00
• 107c1e6e11 test: add comprehensive UserHandler tests with edge cases Your Name 2026-05-30 08:29:16 +08:00
• a575fe0fa3 test: add API contract integration tests Your Name 2026-05-29 21:49:16 +08:00
• 6455ed31a3 docs: update README and project status with coverage improvements Your Name 2026-05-29 21:33:58 +08:00
• 23113fedf3 test: add timezone package tests Your Name 2026-05-29 21:20:30 +08:00
• 7014936a75 test: add antigravity OAuth tests Your Name 2026-05-29 21:08:28 +08:00
• e5da23cea2 test: add CORS middleware tests Your Name 2026-05-29 21:06:43 +08:00
• e735f74c23 test: add domain constants tests Your Name 2026-05-29 21:04:33 +08:00
• dfca5e2272 test: expand httpclient pool tests Your Name 2026-05-29 20:52:04 +08:00
• 65309b95e7 test: add oauth package tests Your Name 2026-05-29 20:50:16 +08:00
• abcbc4e58d test: add antigravity model functions tests Your Name 2026-05-29 20:48:12 +08:00
• 23bfed3b61 test: add domain LoginType constants test Your Name 2026-05-29 20:29:08 +08:00
• e267bb8400 test: add openai request helper tests Your Name 2026-05-29 20:26:44 +08:00
• de329286c9 test: add sms_handler tests for SendCode endpoint Your Name 2026-05-29 20:21:07 +08:00
• 36a497ed7b test: expand responseheaders test coverage to 97.2% Your Name 2026-05-29 20:13:56 +08:00
• 707d35fb74 test: add middleware tests for cache_control, security_headers, trace_id Your Name 2026-05-29 20:11:26 +08:00
• 17a46c2770 test: add service header util tests Your Name 2026-05-29 18:37:52 +08:00
• 7a20548204 test: add social account domain tests Your Name 2026-05-29 17:52:16 +08:00
• e47dae6fc6 test: add geminicli codeassist types tests Your Name 2026-05-29 17:43:16 +08:00
• cd5dae4778 test: add sysutil and cache tests Your Name 2026-05-29 17:38:48 +08:00
• 281811e80b test: add security encryption tests Your Name 2026-05-29 17:28:57 +08:00
• 48e31166bf test: add monitoring collector tests Your Name 2026-05-29 17:23:44 +08:00
• 871bc79598 test: add repository and domain tests Your Name 2026-05-29 16:59:05 +08:00
• 9cc4305395 test: add pkg tests for gemini, openai, geminicli packages Your Name 2026-05-29 16:36:54 +08:00
• 0b17ab42c2 test: improve pkg coverage - pagination and ip packages Your Name 2026-05-29 16:33:54 +08:00
• ed399edb5f test: improve pkg package coverage Your Name 2026-05-29 16:24:23 +08:00
• 6351271f2d test: add server package tests Your Name 2026-05-29 16:04:40 +08:00
• ffcd820fed test: add domain model tests Your Name 2026-05-29 15:35:03 +08:00
• 4fa63dca43 test: add security validator tests Your Name 2026-05-29 15:10:57 +08:00
• 9f0eefd2f5 test: improve coverage for pagination and domain packages Your Name 2026-05-29 14:57:49 +08:00
• f0930489f1 test: add auth handler error classification tests Your Name 2026-05-29 14:38:08 +08:00
• 5d767abe72 test(docs): P2 optimization - add router tests and update README Your Name 2026-05-29 14:00:21 +08:00
• 01b80a9358 docs: add review fix closure report for 2026-05-29 Your Name 2026-05-29 13:41:55 +08:00
• 363c77d020 feat: atomic TOTP verification for DisableTOTP Your Name 2026-05-29 12:47:05 +08:00
• 880b64f5ff docs: sync review closure status and UNFIXED_ISSUES Your Name 2026-05-29 12:32:24 +08:00
• 5da7ecfcfd test(frontend): ProfileSecurityPage ContactBindingsSection contract coverage Your Name 2026-05-29 12:32:16 +08:00
• 320aa9476f fix(frontend): ApiResponse data nullability contract Your Name 2026-05-29 12:32:09 +08:00
• f758297a6e fix(frontend): AuthProvider state drift and double-management Your Name 2026-05-29 12:32:02 +08:00
• 8a45548ed8 refactor: migrate SocialAccountRepository to GORM for consistency Your Name 2026-05-29 12:31:48 +08:00
• 878ca731f4 fix: atomic TOTP recovery code consumption with repository-level transaction Your Name 2026-05-29 12:31:36 +08:00
• 80c59e2c2c fix: harden avatar upload path and sync review truth Your Name 2026-05-29 07:33:19 +08:00
• 9cc5892565 fix: tighten password and surface persistence errors Your Name 2026-05-28 20:38:34 +08:00
• caad1aba0c fix: harden handler context and rate limit isolation Your Name 2026-05-28 20:30:24 +08:00
• e46567678f fix(auth): restore self role lookup and lock regression coverage Your Name 2026-05-28 18:39:56 +08:00
• 11232177d9 fix: enforce resource ownership checks Your Name 2026-05-28 17:28:08 +08:00
• 7eb5f9c7d4 fix: fail closed on invalid cors config Your Name 2026-05-28 16:53:33 +08:00
• 547fdab0b2 fix: require permission for user role queries Your Name 2026-05-28 16:20:20 +08:00
• 73ab66eb8c docs: clarify historical status snapshots Your Name 2026-05-28 15:58:53 +08:00
• 9e7b08e194 docs: sync README review snapshot Your Name 2026-05-28 15:55:40 +08:00
• 260046a581 test: realign verification baseline and supporting tests Your Name 2026-05-28 15:19:34 +08:00
• 6be90ddff8 fix: close auth, permission, contract and e2e review blockers Your Name 2026-05-28 15:19:13 +08:00
• f33e39a702 docs: add review report and closure evidence Your Name 2026-05-28 15:18:49 +08:00
• 2042bdd2cf docs: sync status truth and repo hygiene Your Name 2026-05-28 15:18:38 +08:00
• f91b5d1cef feat: improve auth form UX fix/report-v6-p0-auth-and-idor long-agent 2026-05-12 20:34:30 +08:00
• fc3adfac82 Ignore local report artifacts long-agent 2026-05-12 07:14:33 +08:00
• 77d096cdc9 Fix prelaunch navigation and log scale regressions long-agent 2026-05-12 00:28:38 +08:00
• 7c2f073cbf chore: 归档已完成的中介层测试补全计划文档 long-agent 2026-05-10 13:48:14 +08:00
• b77412b47f test: 增强 handler/middleware 测试覆盖并优化错误分类 long-agent 2026-05-10 13:46:29 +08:00
• f050c60a09 docs: 新增运维和使用指南文档 long-agent 2026-05-10 13:22:51 +08:00
• bb7588b7c0 docs: 更新 REAL_PROJECT_STATUS 并追加 Sprint 17 完成报告 long-agent 2026-05-10 13:05:07 +08:00
• 28012140cb test: 补齐 handler/repository/domain 层单元测试 long-agent 2026-05-10 12:54:13 +08:00
• b8e9af001f refactor: 提取公共分页解析函数 parsePageAndSize long-agent 2026-05-08 12:48:03 +08:00
• b3374dccf4 refactor: 使用 pagination.ClampPageSize 简化 handler 分页代码 long-agent 2026-05-08 12:45:56 +08:00
• 2ecd1fef1e refactor: 提取 service 层 best-effort 超时常量 long-agent 2026-05-08 12:44:05 +08:00
• 9ad7b5c0df refactor: 提取 avatar handler 魔法数字为具名常量 long-agent 2026-05-08 12:42:35 +08:00
• 1f7a223768 refactor: 提取分页魔法数字为 pagination 常量 long-agent 2026-05-08 12:40:36 +08:00
• 202b3963f8 docs: 更新生产就绪评审报告 — 安全项全部修复 long-agent 2026-05-08 12:31:22 +08:00
• 61692e4c1a fix(security): /uploads 目录路径遍历防护 long-agent 2026-05-08 12:28:03 +08:00
• e49865df11 docs: 更新生产就绪评审报告 — P2 修复完成 long-agent 2026-05-08 10:58:38 +08:00
• 8665c97d0d fix(security): X-Forwarded-For IP 伪造防护 long-agent 2026-05-08 10:35:20 +08:00
• d4ec8a13e4 security(auth): raise Argon2id calibration minimums to OWASP thresholds (SEC-ARGON2) long-agent 2026-05-08 10:24:10 +08:00
• 2a18a6fb47 fix(n+1): 批量查询替代循环单查 long-agent 2026-05-08 08:05:26 +08:00
• 9b1cea246e feat: permissions CRUD browser integration + E2E enhancements long-agent 2026-04-24 07:30:18 +08:00
• 3f3bb82f1d fix: v6 code review P0 auth/IDOR fixes + frontend regression patches long-agent 2026-04-23 07:14:12 +08:00
• 82109ec216 Merge branch 'fix/status-review-sync-20260409' long-agent 2026-04-19 09:11:10 +08:00
• 8d9f157eb8 feat: add UMS CLI for binary packaging and system initialization fix/status-review-sync-20260409 long-agent 2026-04-19 08:59:00 +08:00
• 0cfb0f8afd Merge pull request 'fix/status-review-sync-20260409' (#1) from fix/status-review-sync-20260409 into main long 2026-04-18 15:05:51 +00:00
• 7b047e2f11 perf: Sprint 19 P0/P1 性能优化落地 long-agent 2026-04-18 22:57:44 +08:00
• 85285c16d1 docs: update project documentation with P0/P1/P2 fix status long-agent 2026-04-18 21:30:14 +08:00
• 509c5ca2fd docs: 更新项目状态文档，记录 P0/P1/P2 修复完成状态 long-agent 2026-04-18 21:23:55 +08:00
• adb251e4ad fix: P2 security and correctness issues long-agent 2026-04-18 20:48:11 +08:00
• a754545072 fix: add missing PCE parameter to GenerateTokenPair calls in test files long-agent 2026-04-18 20:16:45 +08:00
• 61c19e54ac fix: P1-02 OAuth context propagation and P1-16 AuthProvider double-check long-agent 2026-04-18 19:40:54 +08:00
• e1e423008e chore: update coverage report long-agent 2026-04-18 18:43:29 +08:00
• 8095307d82 fix: P0/P1 security and quality fixes long-agent 2026-04-18 15:33:12 +08:00
• 9d7abb8a46 fix: P0-07 complete frontend TOTP login flow long-agent 2026-04-18 14:50:25 +08:00
• 4acd19f420 fix: P0-07 prevent login bypassing TOTP verification long-agent 2026-04-18 14:19:15 +08:00
• ca7ba5ccdf fix: P0-02 prevent login attempt counter race condition long-agent 2026-04-18 13:45:09 +08:00