iven
9dd6095e77
CI / frontend-build (push) Has been cancelled
CI / security-audit (push) Has been cancelled
CI / rust-check (push) Has been cancelled
CI / rust-test (push) Has been cancelled
fix: P0/P1 安全与质量缺陷修复 — 10 项 QA 审查问题解决
P0 安全修复:
- tenant_rls: SQL 拼接改为参数化查询防止注入
- follow_up_service: UUID SQL 拼接改为参数化原生查询
- RLS 策略: 新迁移移除空字符串绕过条件
- SSE 消息推送: token 键名 'token' → 'access_token' 修复
- rate_limit: 登录端点 Redis 不可达时 fail-close
P1 质量修复:
- 小程序缓存清理: preservedKeys 补全认证键名
- 小程序 token 刷新: 失败时清除所有认证数据
- 小程序 401: redirectTo → reLaunch 兼容 tabBar
- 集成测试: 信号量限制并行数据库创建(4个)
- change_password: 乐观锁 version 硬编码 → 动态递增
测试: 516 全部通过 (含 153 集成测试)
2026-04-28 00:57:41 +08:00
..
2026-04-19 08:46:28 +08:00
2026-04-27 21:48:12 +08:00
2026-04-27 22:01:38 +08:00
2026-04-27 23:04:41 +08:00
2026-04-27 23:21:04 +08:00
2026-04-27 22:18:51 +08:00
2026-04-27 23:21:04 +08:00
2026-04-27 22:27:36 +08:00
2026-04-27 21:54:50 +08:00
2026-04-27 23:21:04 +08:00
2026-04-27 23:21:04 +08:00
2026-04-27 21:42:24 +08:00
2026-04-27 23:21:04 +08:00
2026-04-27 23:21:04 +08:00
2026-04-27 22:18:51 +08:00
2026-04-27 23:21:04 +08:00
2026-04-27 21:58:57 +08:00
2026-04-26 13:10:53 +08:00
2026-04-27 21:21:04 +08:00
2026-04-19 12:16:24 +08:00
2026-04-28 00:57:41 +08:00
2026-04-27 21:12:08 +08:00
2026-04-26 19:44:04 +08:00