优化后端鉴权与日志安全

apps/backend/src/services/notification/config-service.ts

@@ -7,6 +7,13 @@ const NOTIFICATION_CONFIG_FILE_PATH = path.join(PROJECT_ROOT, 'data', 'notificat
 const DEFAULT_BARK_SERVER_URL = 'https://api.day.app'
 
 type JsonObject = Record<string, any>
+type NotificationRecipient = {
+  id: string
+  name: string
+  deviceKey?: string
+  apiKey?: string
+  enabled: boolean
+}
 
 export function getNotificationConfigFilePath() {
   return NOTIFICATION_CONFIG_FILE_PATH
@@ -26,7 +33,7 @@ export function listEnabledBarkRecipients(config: JsonObject = getNotificationCo
   }
 
   return (Array.isArray(config.channels?.bark?.recipients) ? config.channels.bark.recipients : [])
-    .filter((item) => item.enabled !== false && String(item.deviceKey || '').trim())
+    .filter((item: JsonObject) => item.enabled !== false && String(item.deviceKey || '').trim())
 }
 
 export function listEnabledWpushRecipients(config: JsonObject = getNotificationConfig()) {
@@ -35,7 +42,7 @@ export function listEnabledWpushRecipients(config: JsonObject = getNotificationC
   }
 
   return (Array.isArray(config.channels?.wpush?.recipients) ? config.channels.wpush.recipients : [])
-    .filter((item) => item.enabled !== false && String(item.apiKey || item.apikey || '').trim())
+    .filter((item: JsonObject) => item.enabled !== false && String(item.apiKey || item.apikey || '').trim())
 }
 
 function loadNotificationConfigFromFile() {
@@ -58,20 +65,20 @@ export function normalizeNotificationConfig(rawValue: unknown) {
         enabled: typeof bark.enabled === 'boolean' ? bark.enabled : true,
         serverUrl: normalizeBarkServerUrl(bark.serverUrl),
         recipients: (Array.isArray(bark.recipients) ? bark.recipients : [])
-          .map((item) => normalizeBarkRecipient(item))
+          .map((item: unknown) => normalizeBarkRecipient(item))
           .filter(Boolean),
       },
       wpush: {
         enabled: typeof wpush.enabled === 'boolean' ? wpush.enabled : true,
         recipients: (Array.isArray(wpush.recipients) ? wpush.recipients : [])
-          .map((item) => normalizeWpushRecipient(item))
+          .map((item: unknown) => normalizeWpushRecipient(item))
           .filter(Boolean),
       },
     },
   }
 }
 
-function normalizeBarkRecipient(rawValue: unknown) {
+function normalizeBarkRecipient(rawValue: unknown): NotificationRecipient | null {
   if (!isPlainObject(rawValue)) {
     return null
   }
@@ -97,7 +104,7 @@ function normalizeBarkServerUrl(value: unknown) {
   return normalized.replace(/\/+$/, '')
 }
 
-function normalizeWpushRecipient(rawValue: unknown) {
+function normalizeWpushRecipient(rawValue: unknown): NotificationRecipient | null {
   if (!isPlainObject(rawValue)) {
     return null
   }
@@ -125,11 +132,11 @@ export function createDefaultNotificationConfig() {
       bark: {
         enabled: true,
         serverUrl: DEFAULT_BARK_SERVER_URL,
-        recipients: [],
+        recipients: [] as NotificationRecipient[],
       },
       wpush: {
         enabled: true,
-        recipients: [],
+        recipients: [] as NotificationRecipient[],
       },
     },
   }