 程序猿MTandGitHub
|
132bf34b69
|
Merge branch 'Wei-Shaw:main' into main
|
2026-02-06 08:53:52 +08:00 |
|
|
程序猿MTandGitHub
|
3d6d131889
|
Merge branch 'Wei-Shaw:main' into main
|
2026-01-16 22:31:14 +08:00 |
|
|
程序猿MTandGitHub
|
b59032304c
|
Merge branch 'Wei-Shaw:main' into main
|
2026-01-15 19:34:11 +08:00 |
|
|
程序猿MTandGitHub
|
c22d51ee41
|
Merge branch 'Wei-Shaw:main' into main
|
2026-01-15 15:12:16 +08:00 |
|
|
程序猿MTandGitHub
|
fd8473f267
|
Merge branch 'Wei-Shaw:main' into main
|
2026-01-12 10:28:22 +08:00 |
|
|
程序猿MTandGitHub
|
66c8b6f2bc
|
Merge branch 'Wei-Shaw:main' into main
|
2026-01-11 18:21:42 +08:00 |
|
|
程序猿MTandGitHub
|
a66d318820
|
Merge branch 'Wei-Shaw:main' into main
|
2026-01-10 23:34:23 +08:00 |
|
|
|
799b010631
|
fix(auth): 修复 RefreshToken 使用过期 token 时的 nil pointer panic (#214)
* fix(auth): 修复 RefreshToken 使用过期 token 时的 nil pointer panic
问题分析：
- RefreshToken 允许过期 token 继续流程（用于无感刷新）
- 但 ValidateToken 在 token 过期时返回 nil claims
- 导致后续访问 claims.UserID 时触发 panic
修复方案：
- 修改 ValidateToken，在检测到 ErrTokenExpired 时仍然返回 claims
- jwt-go 在解析时即使遇到过期错误，token.Claims 仍会被填充
- 这样 RefreshToken 可以正常获取用户信息并生成新 token
新增测试：
- TestAuthService_ValidateToken_ExpiredReturnsClaimsWithError
- TestAuthService_RefreshToken_ExpiredTokenNoPanic
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* fix(auth): 修复邮件验证服务未配置时可绕过验证的安全漏洞
当邮件验证开启但 emailService 未配置时，原逻辑允许用户绕过验证直接注册。
现在会返回 ErrServiceUnavailable 拒绝注册，确保配置错误不会导致安全问题。
- 在验证码检查前先检查 emailService 是否配置
- 添加日志记录帮助发现配置问题
- 新增单元测试覆盖该场景
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---------
Co-authored-by: yangjianbo <yangjianbo@leagsoft.com>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
|
2026-01-09 10:37:15 +08:00 |
|
|
程序猿MTandGitHub
|
4cf756ebe6
|
Merge branch 'Wei-Shaw:main' into main
|
2026-01-06 20:33:30 +08:00 |
|
|
程序猿MTandGitHub
|
e800af54f9
|
Merge branch 'Wei-Shaw:main' into main
|
2026-01-05 17:12:09 +08:00 |
|
|
程序猿MTandGitHub
|
2d22623b7d
|
Merge branch 'Wei-Shaw:main' into main
|
2025-12-31 16:39:42 +08:00 |
|
|
程序猿MTandGitHub
|
4368966e09
|
Merge branch 'Wei-Shaw:main' into main
|
2025-12-31 14:40:52 +08:00 |
|
|
程序猿MTandGitHub
|
5cad90fb4d
|
Merge branch 'Wei-Shaw:main' into main
|
2025-12-30 17:14:39 +08:00 |
|
|
程序猿MTandGitHub
|
7b2185eb5f
|
Delete backend/Makefile
|
2025-12-30 10:13:42 +08:00 |
|
|
程序猿MTandGitHub
|
23ef3da0f4
|
Remove redundant entry in Makefile
|
2025-12-30 10:09:29 +08:00 |
|
|
程序猿MTandGitHub
|
295d71be0a
|
Merge branch 'Wei-Shaw:main' into main
|
2025-12-28 13:16:57 +08:00 |
|
|
程序猿MTandGitHub
|
1d1da7362b
|
Merge branch 'Wei-Shaw:main' into main
|
2025-12-27 23:09:48 +08:00 |
|
|
程序猿MTandGitHub
|
d3e73f1260
|
feat: 增加caddy 安全配置示例 (#57)
feat 增加 caddy 示例安全反向代理
|
2025-12-27 21:36:26 +08:00 |
|
|
程序猿MTandGitHub
|
f3da4b202e
|
Merge branch 'Wei-Shaw:main' into main
|
2025-12-27 21:32:08 +08:00 |
|
|
程序猿MTandGitHub
|
937b1fb05d
|
Merge branch 'Wei-Shaw:main' into main
|
2025-12-27 20:01:56 +08:00 |
|
|
程序猿MTandGitHub
|
7bdb0e6b12
|
Merge branch 'Wei-Shaw:main' into main
|
2025-12-27 16:48:31 +08:00 |
|
|
程序猿MTandGitHub
|
17c3cb2403
|
Merge branch 'Wei-Shaw:main' into main
|
2025-12-27 16:05:11 +08:00 |
|
|
|
88be981afc
|
feat: (#47)
golang 1.24-> 1.25
node 20 -> node 24
具体提升请查看官方文档
Co-authored-by: yangjianbo <yangjianbo@leagsoft.com>
|
2025-12-27 13:56:14 +08:00 |
|
|
程序猿MTandGitHub
|
a413fa3b17
|
Merge branch 'Wei-Shaw:main' into main
|
2025-12-27 10:58:30 +08:00 |
|