237899745/zsglpt
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
274 Commits 1 Branch 0 Tags
master
Commit Graph

274 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
yuyx
e725db79a9 优化后台金山状态：登录后静默预取并在系统配置页复用缓存 2026-02-16 01:42:47 +08:00
yuyx
1389ec7434 安全修复：加固CSRF与凭证保护并修复越权风险 2026-02-16 01:19:43 +08:00
yuyx
14b506e8a1 fix(frontend): 退出登录增加原生确认兜底，修复点击无响应 2026-02-16 00:45:10 +08:00
yuyx
8c0403e0ff 安全增强: 增加日志敏感字段脱敏过滤器 2026-02-16 00:36:47 +08:00
yuyx
7d42f96e42 安全修复: 收敛认证与日志风险并补充基础测试 2026-02-16 00:34:52 +08:00
yuyx
7627885b1b fix(passkey): 修复安卓端 Credential Manager 异常并增强兼容 
更新说明：\n1. 优化 Passkey 注册参数（residentKey/hints），提升安卓设备兼容性。\n2. 前台与后台统一增强 Passkey 错误提示，针对 NotReadableError/小米浏览器给出明确引导。\n3. 同步更新相关前端页面逻辑与构建产物。
 2026-02-16 00:17:11 +08:00
yuyx
cb35df5f01 fix(front): 修复前台退出登录确认弹窗样式丢失 
更新说明：\n1. 在用户端 AppLayout 显式引入 Element Plus 的 Message/MessageBox 样式。\n2. 修复退出登录确认弹窗偶发样式异常（看起来像 JS 未加载）的显示问题。\n3. 同步更新前台构建产物与 manifest。
 2026-02-15 23:59:08 +08:00
yuyx
7007f5f6f5 feat: 完成 Passkey 能力与前后台加载优化 
更新说明：\n1. 新增用户端与管理员端 Passkey 登录/注册/设备管理（最多3台，支持设备备注、删除设备）。\n2. 修复 Passkey 注册与登录流程中的浏览器/证书/CSRF相关问题，增强错误提示。\n3. 前台登录页改为独立入口，首屏仅加载必要资源，其他页面按需加载。\n4. 系统配置页改为静默获取金山文档状态，避免首屏阻塞，并优化状态展示为“检测中/已登录/未登录/异常”。\n5. 补充后端接口与页面渲染适配，修复多入口下样式依赖注入问题。\n6. 同步更新前后台构建产物与相关静态资源。
 2026-02-15 23:51:46 +08:00
yuyx
ebfac7266b security: harden proxy IP trust, token flow, health and sessions 2026-02-09 09:14:47 +08:00
yuyx
f645a0f8ea perf(front): reduce login page preload and split frontend vendor chunks 2026-02-07 21:45:26 +08:00
yuyx
08864e51ba security: harden admin password change and production session headers 2026-02-07 21:37:55 +08:00
yuyx
7997a97a9a refactor(admin): remove legacy admin fallback page and routing 2026-02-07 19:50:15 +08:00
yuyx
122e12728c chore(repo): clean template leftovers and refresh README for current deployment 2026-02-07 19:01:10 +08:00
yuyx
225abbe7b6 fix(repo): restore runtime key/state files to avoid deploy breakage 2026-02-07 18:49:18 +08:00
yuyx
855b1e340b chore(repo): remove cleanup report and runtime state files from git 2026-02-07 18:48:20 +08:00
yuyx
ed0b74eae3 perf(report): avoid duplicate initial stats sync in dashboard loop 2026-02-07 18:39:11 +08:00
yuyx
4874aa37f6 perf(frontend): add api cache layer and reduce report polling pressure 2026-02-07 18:36:55 +08:00
yuyx
c285d1e348 fix(frontend): restore stable element-plus bootstrap to resolve admin crash 2026-02-07 18:11:23 +08:00
yuyx
06fe7f6f68 perf(frontend): on-demand element plus imports and dedupe stats requests 2026-02-07 17:43:18 +08:00
yuyx
99ecbcf55e perf(logging): reduce allow-strategy log noise via env switch 2026-02-07 17:35:28 +08:00
yuyx
43f1867033 perf(runtime): switch socketio to eventlet and optimize asset chunk caching 2026-02-07 16:09:21 +08:00
yuyx
9d1d4d701e feat(report): show live slow-sql threshold in header 2026-02-07 14:55:15 +08:00
yuyx
b84a5abb8a feat(config): add live slow-sql threshold setting 2026-02-07 14:31:24 +08:00
yuyx
6a9858cdec feat(report): add 24h slow-sql dashboard and metrics api 2026-02-07 14:07:07 +08:00
yuyx
52dd7ac9e5 fix(db): persist actual schema version after migrations 2026-02-07 13:47:47 +08:00
yuyx
dd7f03ef94 perf(db): add slow-query tracing and composite indexes 2026-02-07 13:44:58 +08:00
yuyx
ff67a9bbab perf(db): tune sqlite pool and add maintenance scheduler 2026-02-07 12:53:43 +08:00
yuyx
d77e439712 fix(build): stabilize vendor chunking to avoid element-plus init error 2026-02-07 12:30:13 +08:00
yuyx
e93db6fbf1 feat(report): add drilldown dialog for slow API details 2026-02-07 12:24:44 +08:00
yuyx
592d48dde0 feat(report): add slow API ranking module for admin 2026-02-07 12:19:53 +08:00
yuyx
a50294933b perf(stability): add request metrics and resilient API retries 2026-02-07 11:58:21 +08:00
yuyx
04b94d7fb2 perf: optimize polling, stats cache, and frontend chunk splitting 2026-02-07 11:41:49 +08:00
yuyx
21c537da10 feat(screenshots): serve thumbnails while keeping original for preview and copy 2026-02-07 11:02:16 +08:00
yuyx
2d5be0feb2 refactor(report): remove duplicated detail section and keep compact cards 2026-02-07 10:16:35 +08:00
yuyx
462e12ca0d feat(admin): align desktop report to compact module layout 2026-02-07 10:06:40 +08:00
yuyx
ce96b17392 fix(admin): include overview metrics in mobile report cards 2026-02-07 09:57:04 +08:00
yuyx
69e3e4c45c feat(admin): compact mobile cards for report center 2026-02-07 09:54:11 +08:00
yuyx
12e07962c7 chore(admin): remove manual refresh buttons across pages 2026-02-07 09:47:17 +08:00
yuyx
dd9cc5a76d fix: open mobile admin drawer from left side 2026-02-07 09:40:53 +08:00
yuyx
f7832c3c15 fix: use process uptime and host-service stats fallback 2026-02-07 09:13:20 +08:00
yuyx
d097571f62 fix: prevent report flicker on auto refresh 2026-02-07 09:06:52 +08:00
yuyx
121251a1f2 feat: smooth report refresh and redesign system settings mobile UI 2026-02-07 08:57:25 +08:00
yuyx
6eb0651e23 feat: redesign admin layout and stats dashboards 2026-02-07 01:59:29 +08:00
yuyx
9991834ccd feat: unify login UI and improve kdocs defaults 2026-02-07 01:27:00 +08:00
yuyx
bf29ac1924 refactor: optimize structure, stability and runtime performance 2026-02-07 00:35:11 +08:00
237899745
fae21329d7 优化 KDocs 上传器 
- 删除死代码 (二分搜索相关方法，减少 ~186 行)
- 优化 sleep 等待时间，减少约 30% 的等待
- 添加缓存过期机制 (5分钟 TTL)
- 优化日志级别，减少调试日志噪音

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-21 20:09:46 +08:00
237899745
f46f325518 fix(frontend): 修复登录失败时通知弹两次的问题 
- 在登录页面不再由 http.js 拦截器弹出 401 通知
- 让 LoginPage.vue 自己处理登录错误的显示
- 避免同一错误消息重复弹出
 2026-01-21 19:45:43 +08:00
237899745
156d3a97b2 fix(kdocs): 修复上传线程卡住和超时问题 
1. 禁用无效的二分搜索 - _get_cell_value_fast() 使用的 DOM 选择器在金山文档中不存在
2. 移除 _upload_image_to_cell 中重复的导航调用
3. 为 expect_file_chooser 添加 15 秒超时防止无限阻塞
4. 包含看门狗自动恢复机制（之前已实现）

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-21 17:02:08 +08:00
Yu Yon
f90d840dfe docs: 添加加密密钥配置说明 
- 在部署文档中添加加密密钥配置章节
- 说明 .env 文件使用方法
- 添加密钥迁移指南
- 在环境变量表格中添加 ENCRYPTION_KEY_RAW 说明
- 添加密钥丢失警告

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-21 09:41:54 +08:00
Yu Yon
dfc93bce2e feat(security): 增强密码加密安全机制 
- 新增 ENCRYPTION_KEY_RAW 环境变量支持，可直接使用 Fernet 密钥
- 添加密钥丢失保护机制，防止在有加密数据时意外生成新密钥
- 新增 verify_encryption_key() 函数用于启动时验证密钥
- docker-compose.yml 改为从 .env 文件读取敏感配置
- 新增 crypto_utils.py 文件挂载，支持热更新

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-21 09:31:15 +08:00