Your Name e9523ea7a3 fix: 修复验证报告SEC-001和SEC-003安全问题 ...

SEC-001: 移除硬编码"123456"测试码
- 修改DefaultSMSVerifier.Verify返回错误，强制要求配置真实SMS服务
- 添加ErrSMSServiceNotConfigured错误定义
- 更新相关测试使用mock SMS verifier

SEC-003: 添加IP欺骗防护
- AuthConfig添加TrustedProxies配置项
- getClientIP添加可信代理验证参数
- 仅在请求来自可信代理时信任X-Forwarded-For头
- 添加isTrustedProxy和containsCIDR辅助函数

架构重构:
- 创建internal/adapter包，包含存储适配器
- 创建internal/outbox包，包含OutboxProcessorRunner
- 创建internal/compensation包，包含补偿执行器
- main.go从891行减少到349行

TDD方法:
- 为每个修复编写测试用例
- 测试通过后再提交代码

2026-04-09 20:28:23 +08:00

.serena

chore: initial public snapshot for github upload

2026-03-26 20:06:14 +08:00

docs

docs: 更新实施状态 v1.4 - R-05/R-06完成

2026-04-03 12:06:40 +08:00

gateway

fix: 验证并修复comprehensive_review_v4问题

2026-04-08 20:17:07 +08:00

llm-gateway-competitors

chore: initial public snapshot for github upload

2026-03-26 20:06:14 +08:00

platform-token-runtime

feat: sync lijiaoqiao implementation and staging validation artifacts

2026-03-31 13:40:00 +08:00

reports

docs: 添加项目验证报告 (2026-04-09)

2026-04-09 16:09:49 +08:00

review

feat(P1/P2): 完成TDD开发及P1/P2设计文档

2026-04-02 23:35:53 +08:00

scripts

feat(compliance): 验证CI脚本可执行性

2026-04-03 11:57:23 +08:00

sql/postgresql

feat(supply-api): 完成IAM和Audit数据库-backed Repository实现

2026-04-03 11:57:15 +08:00

supply-api

fix: 修复验证报告SEC-001和SEC-003安全问题

2026-04-09 20:28:23 +08:00

tests/supply

feat: sync lijiaoqiao implementation and staging validation artifacts

2026-03-31 13:40:00 +08:00

.gitignore

feat: sync lijiaoqiao implementation and staging validation artifacts

2026-03-31 13:40:00 +08:00

Description

立交桥项目 - Overpass Project

121 MiB

Languages

Python 55.1%

Go 29.2%

Vue 7.6%

JavaScript 4.2%

TypeScript 3.1%

Other 0.6%