优化后端鉴权与日志安全

apps/backend/src/services/claim/kuaishou-cloud-claim-service.ts

@@ -20,6 +20,7 @@ import {
 } from '../fulfillment/kuaishou-cloud-task-service.js'
 import { buildClaimDetailPayload, getClaimContext } from './kuaishou-cloud-claim-context.js'
 import { syncKuaishouCloudRoleInfo } from './kuaishou-cloud-sync-service.js'
+import type { TaskRow } from '../../types/repository-rows.js'
 
 const KUAISHOU_CLOUD_GUIDE_DIR = path.resolve(PROJECT_ROOT, '../../tems/imgs')
 const ALLOWED_GUIDE_FILES = new Set(['1.png', '2.png', '3.png'])
@@ -136,7 +137,7 @@ export async function verifyKuaishouCloudClaimTicket(token: unknown, payload: Js
   return getKuaishouCloudClaimDetail(token)
 }
 
-export async function getKuaishouCloudClaimGuideAssetPath(filename) {
+export async function getKuaishouCloudClaimGuideAssetPath(filename: unknown) {
   const normalized = String(filename || '').trim()
   if (!ALLOWED_GUIDE_FILES.has(normalized)) {
     throw createHttpError('指引图片不存在', {
@@ -172,7 +173,7 @@ export async function getKuaishouCloudClaimDetail(token: unknown) {
   })
 }
 
-function parseTaskContext(task) {
+function parseTaskContext(task: Partial<TaskRow> | null | undefined): JsonObject {
   const rawValue = task?.context_json
   if (!rawValue) {
     return {}
@@ -189,7 +190,7 @@ function parseTaskContext(task) {
   }
 }
 
-export async function confirmKuaishouCloudClaimRole(token) {
+export async function confirmKuaishouCloudClaimRole(token: unknown) {
   const context = await getClaimContext(token)
   const now = nowIso()
 
@@ -245,7 +246,7 @@ export async function confirmKuaishouCloudClaimRole(token) {
   return getKuaishouCloudClaimDetail(token)
 }
 
-export async function redeemKuaishouCloudClaim(token) {
+export async function redeemKuaishouCloudClaim(token: unknown) {
   const context = await getClaimContext(token)
   const now = nowIso()