Commit Graph

  • 6618137da5 feat(auth): 平台超管租户切换(super 标志 + switch-tenant) main liuyun 2026-10-12 00:00:38 +08:00
  • 477f35293e fix(security): 若干越权/健壮性修复 liuyun 2026-10-11 22:56:12 +08:00
  • 8eefa7fa44 feat(error): 业务错误码注册表(业务域+错误序)+ BusinessException liuyun 2026-10-11 22:42:12 +08:00
  • f747ad5442 feat(tenant): 租户品牌定制(brand_name/logo_url/theme_color/copyright + GET /auth/brand) liuyun 2026-10-11 22:32:14 +08:00
  • bad8639175 feat(notice): 站内通知(公告 + 已读追踪) liuyun 2026-10-11 22:25:19 +08:00
  • 9869974d4c feat(auth): 首登强制改密 + 待改密门禁 liuyun 2026-10-11 21:54:38 +08:00
  • 86832ce32d feat(session): 在线会话强踢 + 账号锁定/解锁 liuyun 2026-10-11 21:35:43 +08:00
  • 127707ffde feat(rbac): 批量删除 + 数据权限自定义闭环 + 若干修复 liuyun 2026-10-11 17:42:05 +08:00
  • 200cedeb59 fix: 第二轮残留问题 liuyun 2026-10-11 17:22:10 +08:00
  • 9a9435e665 ci: 后端 Dockerfile liuyun 2026-10-11 17:02:18 +08:00
  • 6937f9ece0 test: 修复 e2e + 补单元测试 liuyun 2026-10-11 17:01:30 +08:00
  • ebc0797424 chore: 移除 @nestjs/mau + deploy 脚本;补 package 元数据与 MIT 许可 liuyun 2026-10-11 16:57:46 +08:00
  • ba1ae43e39 feat(security): helmet + CORS 白名单 + 限流 + 定时清理 + 时间契约 Unix 毫秒 liuyun 2026-10-11 16:54:08 +08:00
  • 606585c3bd feat(security): 登录失败锁定 + 密码长度策略 + refresh token 哈希校验 liuyun 2026-10-11 16:46:13 +08:00
  • 5c1f2992b5 fix: created_by 注入 + 登出审计记录真实 username liuyun 2026-10-11 16:43:31 +08:00
  • 6553b4c5c7 feat(auth): 登录按用户名自动探测租户 + 多租户选择 liuyun 2026-10-11 16:41:19 +08:00
  • 6578db51c7 feat(auth): PATCH /auth/me/password 修改本人密码 liuyun 2026-10-11 16:34:51 +08:00
  • 13510ee216 feat(tenant): 租户 onboarding 模板 + 级联删除 liuyun 2026-10-11 16:32:46 +08:00
  • 53dbc38bab feat(auth): 注册接口 POST /auth/register liuyun 2026-10-11 16:29:11 +08:00
  • 537ec4fd91 feat(rbac): 数据权限扩展至组织树与审计/登录日志 liuyun 2026-10-11 16:24:51 +08:00
  • 78e537fa73 feat(rbac): 用户-角色分配 + 权限码下发接口 liuyun 2026-10-11 16:19:11 +08:00
  • 513688a5e6 fix(security): P0 安全越权堵漏(C1/H1-H6/H10/H11/H13/M1/M4/M6/M8-M11/M22) liuyun 2026-10-11 16:10:00 +08:00
  • 73ed067a82 feat: dict-driven enums — built-in dicts + protection + aggregate query liuyun 2026-10-11 14:29:18 +08:00
  • 0823c750b2 feat: tenant list search filter liuyun 2026-10-11 12:50:23 +08:00
  • f516e98f7f feat: list search filters for user/config/role/audit-log/login-log liuyun 2026-10-11 12:46:10 +08:00
  • 489d7232e3 feat: user list search + current-user menu tree endpoint liuyun 2026-10-11 12:19:42 +08:00
  • ce2aa35a24 fix: strip passwordHash from user API responses liuyun 2026-10-10 23:22:43 +08:00
  • 7340658305 feat: enforce RBAC, audit/login logging, and seed script liuyun 2026-10-10 23:19:41 +08:00
  • c680fb9dc7 feat: log request body (masked, debug level) and drop headers from request logs liuyun 2026-10-10 22:13:33 +08:00
  • 2c4f3008cf feat: add source location (src) to logs for locating call sites liuyun 2026-10-10 22:01:22 +08:00
  • 43dacdba11 feat: single-line pretty log output liuyun 2026-10-10 21:52:34 +08:00
  • f6fddb4a53 feat: use pino-pretty for readable dev logs (LOG_PRETTY, default true) liuyun 2026-10-10 21:49:34 +08:00
  • 0a0f999589 feat: log startup success and swagger address liuyun 2026-10-10 21:47:12 +08:00
  • 2f839f714f chore: allow @scarf/scarf build script liuyun 2026-10-10 21:39:43 +08:00
  • 24790e8985 feat: add Swagger API docs (/docs) with DTO schemas liuyun 2026-10-10 21:39:37 +08:00
  • bbc06ae775 feat: add pino structured logging (stdout + optional file via env) liuyun 2026-10-10 21:31:05 +08:00
  • 39a4e21eed fix: rename logs module to audit-logs/login-logs (avoid gitignore collision) liuyun 2026-10-10 21:25:57 +08:00
  • d8d3055c73 feat: backend foundation (Prisma 6 + MySQL, auth, tenant/soft-delete/data-scope filters, core CRUD) liuyun 2026-10-10 21:13:35 +08:00
  • dc40ca3343 chore: init sysmgr-nest (NestJS scaffold) liuyun 2026-10-10 14:03:17 +08:00