iven
|
f668e64266
|
fix(health): FHIR converter 身份证号脱敏处理
|
2026-05-06 10:20:50 +08:00 |
|
iven
|
482871301e
|
fix(health): FHIR $everything 子查询添加 tenant_id 过滤
|
2026-05-05 23:44:25 +08:00 |
|
iven
|
741aaf0e40
|
fix(health): FHIR allowed_patient_ids=None 拒绝所有访问
|
2026-05-05 23:42:29 +08:00 |
|
iven
|
2b90db4028
|
fix(health): P0 安全修复 — SQL注入 + FHIR越权 + OAuth权限 + JWT硬编码
CI / rust-check (push) Has been cancelled
CI / rust-test (push) Has been cancelled
CI / frontend-build (push) Has been cancelled
CI / security-audit (push) Has been cancelled
C1: action_inbox_service.rs 中 patient_id/user_id 的 format! 拼接改为
参数化查询 ($2/$3/$4/$5 绑定)，消除 SQL 注入风险
C2: fhir/handler.rs 所有患者相关端点强制执行 allowed_patient_ids 范围
过滤，search 端点用 is_in 过滤，get 端点用 enforce_patient_scope 校验
H5: oauth/handler.rs 5 个管理端点添加 require_permission 校验
M3: oauth/handler.rs 和 middleware.rs 移除 "dev-secret-key" fallback，
缺少环境变量时启动失败（token）/返回 500（middleware）
|
2026-05-04 23:09:25 +08:00 |
|
iven
|
1135439403
|
fix(health): 审计问题修复 — 权限守卫 + OAuth中间件 + FHIR声明 + SSE聚合
CI / rust-check (push) Has been cancelled
CI / rust-test (push) Has been cancelled
CI / frontend-build (push) Has been cancelled
CI / security-audit (push) Has been cancelled
- OAuthClientList/RealtimeMonitor/OfflineEventList/StatisticsDashboard 补权限守卫
- OAuth 中间件注入 TenantContext + FHIR scope→permission 映射
- FHIR CapabilityStatement 移除未实现的 $lastn 操作
- useVitalSSE 修复批量同步事件数据聚合逻辑
|
2026-05-04 12:02:50 +08:00 |
|
iven
|
cde3a863a2
|
feat(health): FHIR 模块类型定义 + converter 依赖
CI / rust-check (push) Has been cancelled
CI / rust-test (push) Has been cancelled
CI / frontend-build (push) Has been cancelled
CI / security-audit (push) Has been cancelled
|
2026-05-04 02:56:56 +08:00 |
|
iven
|
8cfc5709dc
|
docs: 事件注册表更新 — 告警降噪 + alert.aggregated 事件
|
2026-05-04 02:56:40 +08:00 |
|
iven
|
975d699e42
|
feat(health): 告警降噪集成 alert_engine + OAuth service 编译修复
- alert_engine: create_alert_and_notify 调用 noise_reducer，升级严重度+suppressed标记
- oauth/service: 修复 OsRng import + ActiveModel move 问题
- fhir/handler: linter 补全完整实现
|
2026-05-04 02:43:32 +08:00 |
|
iven
|
24562dd54b
|
feat(health): 告警降噪服务 + FHIR handler stubs
- 新增 alert_noise_reducer：患者级升级(30min/3次阈值) + 系统级聚合(5min窗口)
- 补全 FHIR R4 handler stubs（Plan 2 路由注册但 handler 缺失导致编译失败）
|
2026-05-04 02:36:37 +08:00 |
|