-
-
Notifications
You must be signed in to change notification settings - Fork 199
feat: security auth overhaul and provider batch operations #806
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Merged
Changes from all commits
Commits
Show all changes
60 commits
Select commit
Hold shift + click to select a range
de990c3
feat(auth): wave 1 - login route contract, cookie TDD, loading state,…
ding113 44f5f45
feat(login): wave 2 - redirect safety, visual redesign, footer integr…
ding113 dbff799
refactor(auth): wave 3 - role metadata, cookie constant unification, …
ding113 bf4372d
test(login): wave 4 - regression matrix, quality gates, stabilization
ding113 9b561a0
feat(security): wave 5 - session contract, store, cookie hardening, a…
ding113 8f51447
feat(security): wave 6 - opaque session login, dual-read auth, logout…
ding113 f312071
feat(security): wave 7 - security headers integration, regression sui…
ding113 bea43b4
feat(auth): switch session token mode to opaque by default
ding113 713b921
fix(test): hoist mock fns to survive vitest mockReset between tests
ding113 e732fe8
refactor(auth): use Web Crypto API for session ID generation
ding113 228b61d
feat(provider): add batch patch operation types
ding113 e309280
feat(provider): add batch patch validation and normalization
ding113 1b00961
test(provider): add batch patch contract validation tests
ding113 7e15d53
feat(auth): add admin token session support for virtual user
ding113 26fe96d
test(auth): add admin token session validation tests
ding113 2352e5e
refactor(proxy): delegate session validation to downstream layouts
ding113 7e62244
test(proxy): add cookie passthrough behavior tests
ding113 4321621
feat(providers): add batch patch error code constants
ding113 94d6fea
feat(providers): implement batch patch preview, apply, and undo actions
ding113 cf594f4
test(providers): add batch patch action contract tests
ding113 34f2956
fix(security): normalize origin to lowercase in CSRF guard
ding113 3b362e1
refactor(auth): improve error handling and lazy-load session store
ding113 ab13853
fix(auth): remove redundant read in session rotation
ding113 7a34288
fix(auth): reset session store promise on import failure
ding113 49279e7
test(auth): update import paths and add missing mocks
ding113 d10a839
chore: format code (feat-security-auth-overhaul-809072b)
github-actions[bot] 1bc45bd
fix(auth): strengthen userId validation in session parser
ding113 18f3b02
style(auth): format code and fix test expectation
ding113 0a4dfa7
fix(auth): add type assertion for userId in parseSessionData
github-actions[bot] d3c3298
feat(i18n): add password visibility and brand tagline translations
ding113 cf263ba
feat(auth): redesign login page with split panel layout and animations
ding113 4449554
test(auth): update login page tests for redesigned UI
ding113 423dcd5
fix(auth): prevent session rotation on expired sessions
ding113 3f2803f
test(auth): add session expiration and rotation edge case coverage
ding113 066c2b4
perf(security): add memory-bounded sweep for login abuse tracking
ding113 535a290
fix(security): validate CSP report-uri to prevent directive injection
ding113 f9f50ae
test(security): add case-insensitive origin matching coverage
ding113 845e2e3
refactor(providers): extract thinking budget editor into reusable com…
ding113 b1b6bde
feat(providers): add adaptive thinking configuration editor
ding113 a69562e
refactor(providers): use extracted thinking budget editor in routing …
ding113 a9c7ff5
feat(providers): add in-memory undo snapshot store with TTL
ding113 57a378b
feat(providers): support advanced routing fields in batch updates
ding113 2021e90
test(settings): add adaptive thinking editor component tests
ding113 97e35d0
test(settings): add comprehensive tests for adaptive thinking editor
ding113 bd6be16
fix: remove orphan test code outside describe blocks
github-actions[bot] 29c02c4
test(settings): normalize editor tests to createRoot pattern
ding113 804a193
feat(providers): extend batch update with 4 advanced routing fields
ding113 ea4c504
feat(providers): add type/group quick-select to batch toolbar
ding113 ae16ef5
fix: remove unused import and fix formatting
ding113 eea64ff
feat(providers): generate per-provider preview rows with field compat…
ding113 f212e2e
refactor(providers): remove FieldToggle, add 9-field sectioned batch …
ding113 1c145df
feat(providers): implement apply engine with DB writes, preimage capt…
ding113 5211951
feat(providers): implement undo engine with preimage grouping and per…
ding113 2aaba44
feat(providers,security): add batch preview step, patch draft builder…
ding113 9bb35cd
chore: format code (feat-security-auth-overhaul-a6f2c5a)
github-actions[bot] e418d18
feat(providers): add undo support for single and batch provider deletion
ding113 381be07
feat(providers): add undo support for single provider edits
ding113 64fa5e8
test(providers): add tests for batch delete undo and provider restore
ding113 10e9e4d
test(providers): add tests for FormTabNav and ProviderBatchToolbar co…
ding113 4a0f06e
feat(security): add Redis KV store, harden auth and undo system
ding113 File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
同一页面内术语不一致:
brand.tagline与form.description用词不统一。brand.tagline(第 27 行)使用「統合」(tōgō,统合/集成),而同文件form.description(第 4 行)使用「統一」(tōitsu,统一/单一化)来指代同一个控制台。两词在日语中含义有所不同,用户在同一登录页面会看到两种不同说法,可能产生困惑。对比zh-CN/auth.json,两处均使用「统一」,建议日语保持一致。🔧 建议修复(以统一使用「統合」为例,或参照英文原文确认规范术语后再定)
或统一改为「統一」:
🤖 Prompt for AI Agents