iven
|
36a55e116e
|
feat(miniprogram): 实现小程序透析模块 — 患者端查看 + 医护端录入/审阅
CI / rust-check (push) Has been cancelled
CI / rust-test (push) Has been cancelled
CI / frontend-build (push) Has been cancelled
CI / security-audit (push) Has been cancelled
审计后续 H1: 补齐小程序端透析功能，对接后端 12 个 API 路由。
新增内容:
- 患者端: 透析记录列表/详情 + 透析处方列表/详情（只读，4 页面）
- 医护端: 透析记录列表/详情/创建 + 处方列表/详情/创建（6 页面）
- Service 层: dialysis.ts（患者端只读）+ doctor/dialysis.ts（医护端 CRUD）
- 集成入口: 医生工作台快捷操作 + 患者"我的"菜单 + 路由注册
- 基础设施: api.delete 扩展支持 data 参数（后端 delete 需要 version）
|
2026-04-30 16:48:39 +08:00 |
|
iven
|
fcfc0ba5d9
|
perf(miniprogram): 全面性能优化 — 分包加载 + 请求缓存 + 渲染优化
CI / rust-check (push) Has been cancelled
CI / rust-test (push) Has been cancelled
CI / frontend-build (push) Has been cancelled
CI / security-audit (push) Has been cancelled
分包加载（主包从 517KB 降至 275KB，-47%）：
- 将 27 个页面拆入 6 个分包（health/doctor/mall/profile/content/device）
- vendors.js 从 192KB 降至 36KB（-81%）
- echarts 514KB 仅在访问健康趋势页时按需加载
请求层优化：
- GET 请求增加 in-flight 去重 + 60s TTL 响应缓存
- 新建 points store 集中管理积分/签到状态（消除 5 处重复调用）
- health store todaySummary 增加 60s TTL
- mutation 后自动失效缓存（health input/daily-monitoring）
- logout 时清空请求缓存
渲染优化：
- 7 个组件添加 React.memo（EcCanvas/TrendChart/Loading/EmptyState 等）
- 修复 TrendChart setChartReady 导致的双重渲染
- 静态数组（quickServices/quickActions/trendLinks）提取到模块级
- restoreAuth 从页面级提升到 App 级别
- 文章列表图片添加 lazyLoad
构建优化：
- prod 配置添加 terser（drop_console + drop_debugger）
- crypto-js 从全量引入改为按需引入（AES + Utf8）
|
2026-04-28 11:44:37 +08:00 |
|
iven
|
9dd6095e77
|
fix: P0/P1 安全与质量缺陷修复 — 10 项 QA 审查问题解决
CI / frontend-build (push) Has been cancelled
CI / security-audit (push) Has been cancelled
CI / rust-check (push) Has been cancelled
CI / rust-test (push) Has been cancelled
P0 安全修复:
- tenant_rls: SQL 拼接改为参数化查询防止注入
- follow_up_service: UUID SQL 拼接改为参数化原生查询
- RLS 策略: 新迁移移除空字符串绕过条件
- SSE 消息推送: token 键名 'token' → 'access_token' 修复
- rate_limit: 登录端点 Redis 不可达时 fail-close
P1 质量修复:
- 小程序缓存清理: preservedKeys 补全认证键名
- 小程序 token 刷新: 失败时清除所有认证数据
- 小程序 401: redirectTo → reLaunch 兼容 tabBar
- 集成测试: 信号量限制并行数据库创建(4个)
- change_password: 乐观锁 version 硬编码 → 动态递增
测试: 516 全部通过 (含 153 集成测试)
|
2026-04-28 00:57:41 +08:00 |
|
iven
|
3424a33b6b
|
fix(miniprogram): 小程序审计修复 — 安全加固+功能链路+输入验证
CI / rust-check (push) Has been cancelled
CI / rust-test (push) Has been cancelled
CI / frontend-build (push) Has been cancelled
CI / security-audit (push) Has been cancelled
安全修复:
- H1: Token 刷新竞态条件 → Singleton Promise 模式防止并发刷新
- H4: 移除 store 中的 token 明文状态，统一走 secure storage
- H5: 登录/绑定手机号添加 loading 防重复点击保护
- H6: Analytics 改用 request.ts 统一请求层，不再绕过认证
- M1: logout 清理所有残留数据(openid/tenant_id/analytics_queue)
- M2/M7: 敏感数据(user/openid/tenant_id)统一走加密存储
- M3: 移除开发日志中的请求体打印
- M4: secure-storage 解密失败返回 null 而非空串
功能修复:
- F1: 今日体征概览 API 支持 patient_id 查询参数(后端+前端)
- F2: 积分商城对无患者档案用户展示引导 UI
- M6: daily-monitoring 添加 Zod 数值范围验证
清理:
- L4: 移除 devLogin 开发辅助函数
|
2026-04-27 00:41:30 +08:00 |
|
iven
|
0bf1822fa9
|
fix: QA 第二轮修复 — PatientDetail 重构/测试覆盖/id_number 列宽/小程序 URL 规范化
CI / rust-check (push) Has been cancelled
CI / rust-test (push) Has been cancelled
CI / frontend-build (push) Has been cancelled
CI / security-audit (push) Has been cancelled
- refactor(web): PatientDetail.tsx 拆分为 4 个子组件(737→334行)
- refactor(web): 提取 usePaginatedData hook 消除重复分页状态
- feat(db): patient.id_number varchar(20)→varchar(255) 容纳加密值
- test(health): 添加预约模块集成测试(创建/列表/租户隔离)
- test(plugin): 添加 6 个 SQL 注入 sanitize 测试
- fix(miniprogram): 7 个 service 文件 URL 构建规范化(params 对象)
- fix(miniprogram): 跨平台字段名对齐(birth_date/start_time/end_time)
|
2026-04-25 10:22:44 +08:00 |
|
iven
|
60a8a591a8
|
feat(miniprogram): Token XOR 混淆存储
CI / rust-check (push) Has been cancelled
CI / rust-test (push) Has been cancelled
CI / frontend-build (push) Has been cancelled
CI / security-audit (push) Has been cancelled
- 新增 secure-storage 工具：XOR + Base64 混淆 token 存储
- request.ts 和 auth.ts 中所有 access_token/refresh_token 存取
均通过 secure-storage，避免明文暴露在 Storage 中
|
2026-04-24 12:52:20 +08:00 |
|
iven
|
74d7efec1f
|
fix(miniprogram): 添加全局 ErrorBoundary，修复 tryRefreshToken 静默吞异常
|
2026-04-24 12:20:34 +08:00 |
|
iven
|
0f84c881ef
|
feat(miniprogram): 初始化 Taro 4 + React 小程序项目
CI / rust-check (push) Has been cancelled
CI / rust-test (push) Has been cancelled
CI / frontend-build (push) Has been cancelled
CI / security-audit (push) Has been cancelled
- 手动创建 Taro 4.2 + React 18 + TypeScript 项目骨架
- 配置 webpack5 编译、SCSS 样式、医疗清新主题
- 实现 API 请求层（JWT 自动注入 + token 刷新）
- 实现 auth store（微信登录 + 手机号绑定 + 就诊人管理）
- 实现登录页（微信一键登录 + 手机号授权绑定）
- 实现首页（问候栏 + 今日健康卡片 + 快捷服务 + 即将到来）
- 实现我的页面（个人信息 + 功能菜单 + 退出登录）
- 健康/预约/资讯占位页
- TabBar 5 个入口：首页/健康/预约/资讯/我的
|
2026-04-24 00:28:38 +08:00 |
|