 yml2213
|
25b89bb503
|
优化：降低访问日志噪声并增加日志文件轮转
|
2026-08-30 16:59:11 +08:00 |
|
|
yml2213
|
6ca54e468e
|
安全加固：增加后台登录 IP 限流并记录验证结果
|
2026-08-30 16:47:16 +08:00 |
|
|
yml2213
|
02c9de8b9c
|
feat(ops): 数据保留清理、CORS 白名单与上传失败回滚
- 新增每日数据保留清理任务:按保留期清空原始报文、删除过期
事件/审计记录,批量幂等可重跑;067 迁移补齐清理索引并清理
冗余索引,check-sql-guard 增加防线
- 生产 CORS 改为显式来源白名单(CORS_ALLOWED_ORIGINS),禁用
通配符,非通配响应补充 Vary: Origin
- 文件上传任一步失败时回滚已上传对象,清理失败记录 warn 日志
- 新增 HTTP/CORS 与 PostgreSQL 集成测试;若干文件仅 prettier 重排
|
2026-08-30 13:59:01 +08:00 |
|
|
yml2213
|
5c7c3e14e3
|
统一前后端代码格式化配置
|
2026-08-16 17:27:12 +08:00 |
|
|
yml2213
|
a2bce8b272
|
增强后端 TypeScript 严格类型检查
|
2026-05-26 10:07:19 +08:00 |
|
|
yml2213
|
49ac82698f
|
增强关键接口幂等与限流保护
|
2026-05-26 08:32:15 +08:00 |
|
|
yml
|
ecab6ae9b7
|
feat: complete CORS config-driven middleware rewrite
- cors.ts: createCorsMiddleware factory with RuntimeConfig param
- Wildcard ['*'] mode: Access-Control-Allow-Origin: * (backward compatible)
- Specific origins mode: reflect matching origin + Allow-Credentials
- Added Access-Control-Max-Age: 86400 for preflight caching
- app.ts: accept config param, use createCorsMiddleware(config)
- index.ts: pass runtimeConfig to createApp
- env-overrides.ts: add string[] to RuntimeConfigValue, corsOriginsEnv helper
- runtime-config.ts: cors.allowedOrigins: string[] type
- defaults.ts: cors.allowedOrigins: ['*'] default
- .env: CORS_ALLOWED_ORIGINS=* with production example
|
2026-05-21 23:22:39 +08:00 |
|
|
yml
|
0e6bf88beb
|
[Snow Team] express-types: auto-commit work
|
2026-05-21 22:57:48 +08:00 |
|
|
yml
|
efa41ba976
|
refactor backend route and fulfillment modules
|
2026-05-21 18:38:04 +08:00 |
|