iven/nj - nj - 汕头市智界科技有限公司

iven/nj

Fork 0

Commit Graph

Author	SHA1	Message	Date
iven	6d7ac05d0f	fix(auth): Token 黑名单改用 SHA-256 替代 SipHash - access token 黑名单 hash 函数从 std::collections::DefaultHasher (SipHash) 改为 sha2::Sha256，与 refresh token 存储一致 - SipHash 是非密码学 hash，理论上可被构造碰撞绕过黑名单检查 - SHA-256 提供密码学安全保证，且 sha2 已在 Cargo.toml 依赖中审计 ID: S-01	2026-06-03 09:51:47 +08:00
iven	c539e6fd83	feat: initialize Nuanji (Warm Notes) project - Base platform from base.git (ERP base: auth, core, config, message, workflow, plugin) - Created erp-diary module skeleton (lib.rs, dto.rs, error.rs, event.rs, state.rs) - Integrated erp-diary into workspace and erp-server - Added DiaryModule registration in main.rs - Added DiaryState FromRef in state.rs - Diary routes mounted (empty routes, ready for implementation) - Product design spec v1.2 preserved in docs/ - Implementation plan preserved in plans/ Cargo check: OK Cargo test: OK (78+ base tests passing)	2026-05-31 20:52:19 +08:00

Author

SHA1

Message

Date

iven

6d7ac05d0f

fix(auth): Token 黑名单改用 SHA-256 替代 SipHash

- access token 黑名单 hash 函数从 std::collections::DefaultHasher (SipHash)
  改为 sha2::Sha256，与 refresh token 存储一致
- SipHash 是非密码学 hash，理论上可被构造碰撞绕过黑名单检查
- SHA-256 提供密码学安全保证，且 sha2 已在 Cargo.toml 依赖中

审计 ID: S-01

2026-06-03 09:51:47 +08:00

iven

c539e6fd83

feat: initialize Nuanji (Warm Notes) project

- Base platform from base.git (ERP base: auth, core, config, message, workflow, plugin)
- Created erp-diary module skeleton (lib.rs, dto.rs, error.rs, event.rs, state.rs)
- Integrated erp-diary into workspace and erp-server
- Added DiaryModule registration in main.rs
- Added DiaryState FromRef in state.rs
- Diary routes mounted (empty routes, ready for implementation)
- Product design spec v1.2 preserved in docs/
- Implementation plan preserved in plans/

Cargo check: OK
Cargo test: OK (78+ base tests passing)

2026-05-31 20:52:19 +08:00

2 Commits