iven
aa6d93129d
fix(security): P0 安全修复 — Access Token 吊销 + OpenAPI 保护 + RLS 补齐 + CI 加固 + 测试修复
P0-5: Access Token 吊销机制
- 新增内存 DashMap 黑名单(token_hash → exp),支持单 token 吊销
- 密码修改/登出时自动清除用户权限缓存,强制重新认证
- 惰性清理过期条目,防止内存无限增长
P0-6: OpenAPI 端点安全
- 生产构建返回 404,仅 cfg(debug_assertions) 模式可用
- 防止 385+ API 端点 schema 对外暴露
P0-4: RLS 策略补充迁移 (m000169)
- 幂等遍历所有含 tenant_id 的表,补齐缺失的 RLS 策略
- 覆盖 m000088 之后创建的约 20 张新表
P0-3: CI 安全加固
- 移除 CI 中硬编码密码 123123,改用 postgres
- 保持 cargo audit / npm-audit 严格门禁
P0-7: AI prompt 集成测试修复
- get_active_prompt 改按 analysis_type 查找而非 name
- list_prompts 过滤参数从 category 改为 analysis_type
- 167 集成测试全部通过(原 164 passed / 3 failed)
2026-05-29 11:38:38 +08:00
..
2026-05-29 11:38:38 +08:00
2026-04-15 00:49:20 +08:00
2026-04-15 00:49:20 +08:00
2026-04-15 00:49:20 +08:00
2026-04-11 02:03:23 +08:00
2026-04-15 00:49:20 +08:00
2026-04-11 02:03:23 +08:00
2026-04-15 00:49:20 +08:00
2026-04-12 16:58:47 +08:00
2026-04-11 02:03:23 +08:00
2026-04-11 02:03:23 +08:00
2026-04-11 02:03:23 +08:00
2026-04-11 08:09:19 +08:00
2026-04-15 00:49:20 +08:00
2026-04-15 00:49:20 +08:00
2026-04-11 08:09:19 +08:00
2026-04-15 00:49:20 +08:00
2026-04-11 08:09:19 +08:00
2026-04-15 00:49:20 +08:00
2026-04-15 00:49:20 +08:00
2026-04-15 00:49:20 +08:00
2026-04-15 00:49:20 +08:00
2026-04-15 00:49:20 +08:00
2026-04-15 00:49:20 +08:00
2026-04-15 00:49:20 +08:00
2026-04-15 00:49:20 +08:00
2026-04-15 00:49:20 +08:00
2026-04-15 00:49:20 +08:00
2026-04-11 12:49:45 +08:00
2026-04-11 12:49:45 +08:00
2026-04-15 23:32:02 +08:00
2026-04-11 14:16:45 +08:00
2026-04-15 00:49:20 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-04-17 10:32:12 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-04-19 00:49:00 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-04-25 11:31:54 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-04-25 19:44:46 +08:00
2026-05-07 23:43:14 +08:00
2026-04-26 00:54:56 +08:00
2026-04-26 00:54:56 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-04-26 12:17:49 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-04-26 12:35:27 +08:00
2026-04-26 12:35:27 +08:00
2026-04-26 12:35:27 +08:00
2026-04-26 13:10:53 +08:00
2026-04-28 00:20:11 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-04-28 11:31:54 +08:00
2026-05-07 23:43:14 +08:00
2026-04-28 11:47:44 +08:00
2026-04-28 19:24:32 +08:00
2026-04-28 19:57:51 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-02 11:37:21 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-04 02:32:19 +08:00
2026-05-07 23:43:14 +08:00
2026-05-05 02:02:45 +08:00
2026-05-04 11:02:25 +08:00
2026-05-07 23:43:14 +08:00
2026-05-05 02:02:45 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-04 20:38:56 +08:00
2026-05-04 20:57:24 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-05 15:52:12 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-08 22:00:43 +08:00
2026-05-08 22:00:43 +08:00
2026-05-08 22:00:43 +08:00
2026-05-10 09:57:45 +08:00
2026-05-10 15:08:26 +08:00
2026-05-10 17:13:02 +08:00
2026-05-10 17:13:02 +08:00
2026-05-10 19:07:20 +08:00
2026-05-12 11:57:09 +08:00
2026-05-12 11:57:09 +08:00
2026-05-12 11:57:09 +08:00
2026-05-12 11:57:09 +08:00
2026-05-12 12:18:40 +08:00
2026-05-12 22:30:16 +08:00
2026-05-13 14:30:27 +08:00
2026-05-13 14:30:27 +08:00
2026-05-15 21:13:49 +08:00
2026-05-17 00:49:41 +08:00
2026-05-18 02:51:58 +08:00
2026-05-18 10:24:40 +08:00
2026-05-18 22:55:40 +08:00
2026-05-19 17:48:37 +08:00
2026-05-19 17:48:37 +08:00
2026-05-19 17:48:37 +08:00
2026-05-19 17:48:37 +08:00
2026-05-19 21:36:01 +08:00
2026-05-19 21:36:01 +08:00
2026-05-20 19:36:36 +08:00
2026-05-24 11:32:40 +08:00
2026-05-24 11:32:40 +08:00
2026-05-21 00:50:29 +08:00
2026-05-21 01:34:20 +08:00
2026-05-21 01:34:20 +08:00
2026-05-21 07:20:21 +08:00
2026-05-21 08:13:23 +08:00
2026-05-24 11:32:40 +08:00
2026-05-22 19:44:48 +08:00
2026-05-24 11:32:40 +08:00
2026-05-26 01:09:21 +08:00
2026-05-26 17:04:26 +08:00
2026-05-26 17:04:26 +08:00
2026-05-26 23:07:28 +08:00
2026-05-26 23:10:57 +08:00
2026-05-27 11:15:17 +08:00
2026-05-29 11:38:38 +08:00