iven 080d2cb3d6 fix(security): Q2 Chunk 2 — 多租户安全加固 + 限流 fail-closed ...

- auth_service::refresh() 添加 tenant_id 校验
- user_service get_by_id/update/delete/assign_roles 改为数据库级 tenant_id 过滤
- 限流中间件改为 fail-closed：Redis 不可达时返回 429 而非放行

2026-04-17 17:45:59 +08:00

..

src

fix(security): Q2 Chunk 2 — 多租户安全加固 + 限流 fail-closed

2026-04-17 17:45:59 +08:00

Cargo.toml

feat: systematic functional audit — fix 18 issues across Phase A/B

2026-04-12 15:22:28 +08:00