awoooi

wooo/awoooi

Fork 0

Commit Graph

Author	SHA1	Message	Date
Your Name	10f2f1abaf	fix(web): stabilize homepage live status All checks were successful Code Review / ai-code-review (push) Successful in 10s Details CD Pipeline / tests (push) Successful in 1m8s Details CD Pipeline / build-and-deploy (push) Successful in 3m30s Details CD Pipeline / post-deploy-checks (push) Successful in 1m22s Details	2026-05-19 11:12:09 +08:00
OG T	26839227ff	fix(web): 修復 TypeScript 錯誤 - useCSRF: 修正 import 路徑 @/lib/env → @/lib/config - terminal-telemetry: 新增 UNKNOWN_COMPONENT 錯誤碼 Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-03-28 19:06:44 +08:00
OG T	d206460751	feat(security): Phase 20 CSRF 防護實作 Phase 19 首席架構師審查指出: 核鑰 UX 安全性缺 CSRF 防護後端: - 新增 src/core/csrf.py (Double Submit Cookie 模式) - 新增 src/api/v1/csrf.py (GET /api/v1/csrf/token) - 新增 src/models/csrf.py (CSRFTokenResponse) - 修改 approvals.py sign/reject/bulk 端點加入 CSRFToken 驗證前端: - 新增 hooks/useCSRF.ts (React Hook) - 修改 approval.store.ts 整合 CSRF Token 參數安全特性: - 256-bit Token (secrets.token_hex) - 時序安全比較 (secrets.compare_digest) - SameSite=Strict Cookie - 1 小時 Token 有效期 Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-03-28 18:31:58 +08:00

Author

SHA1

Message

Date

Your Name

10f2f1abaf

fix(web): stabilize homepage live status

Code Review / ai-code-review (push) Successful in 10s

Details

CD Pipeline / tests (push) Successful in 1m8s

Details

CD Pipeline / build-and-deploy (push) Successful in 3m30s

Details

CD Pipeline / post-deploy-checks (push) Successful in 1m22s

Details

2026-05-19 11:12:09 +08:00

OG T

26839227ff

fix(web): 修復 TypeScript 錯誤

- useCSRF: 修正 import 路徑 @/lib/env → @/lib/config
- terminal-telemetry: 新增 UNKNOWN_COMPONENT 錯誤碼

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-03-28 19:06:44 +08:00

OG T

d206460751

feat(security): Phase 20 CSRF 防護實作

Phase 19 首席架構師審查指出: 核鑰 UX 安全性缺 CSRF 防護

後端:
- 新增 src/core/csrf.py (Double Submit Cookie 模式)
- 新增 src/api/v1/csrf.py (GET /api/v1/csrf/token)
- 新增 src/models/csrf.py (CSRFTokenResponse)
- 修改 approvals.py sign/reject/bulk 端點加入 CSRFToken 驗證

前端:
- 新增 hooks/useCSRF.ts (React Hook)
- 修改 approval.store.ts 整合 CSRF Token 參數

安全特性:
- 256-bit Token (secrets.token_hex)
- 時序安全比較 (secrets.compare_digest)
- SameSite=Strict Cookie
- 1 小時 Token 有效期

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-03-28 18:31:58 +08:00

3 Commits