3 Commits

Include renames

Author	SHA1	Message	Date
elky	45a3ba8829	fix(frontend): avoid blocking public routes on invalid session	2026-09-04 13:14:16 +08:00
elky	579f2c7cc1	feat(security): harden gateway boundaries and usage policies ... Consolidate subscription usage policy enforcement, privacy-safe persistence, and gateway security hardening into one reviewable change. Includes bounded HTTP and execution envelopes, header and protocol guards, DNS and relay validation, authentication and secret projection hardening, secure backup/install paths, and regression coverage.	2026-09-04 03:45:52 +08:00
fawney19andLewisPen	c4bb6b8161	feat(auth): 重构认证系统，引入 session 会话管理 ... - 新增 user_sessions 数据库表及 Alembic 迁移 - 实现 SessionService 会话生命周期管理（创建/刷新/撤销/清理） - 认证流程改用 refresh token cookie + access token 双令牌模式 - 前端实现自动静默刷新、跨标签页同步及设备指纹 - 用户设置页新增会话管理和密码修改功能 - 管理员用户管理新增强制登出和会话查看 - 密码策略增强，支持强度校验和泄露检测 - OAuth 登录流程适配新会话机制 - 新增完整的单元测试和 API 测试覆盖 Closes #232 Co-authored-by: LewisPen <LewisPen@nyadoo.com>	2026-03-17 16:34:09 +08:00