Commit Graph
4 Commits
Author SHA1 Message Date
chengcheng b51ecc5eed fix(identity): 拒绝跨站浏览器会话端点
统一认证使用 HttpOnly SameSite=Strict 会话 Cookie。配对时若 Public Base 与 Web Base 不属于同一 schemeful site,浏览器回调会丢失事务 Cookie。新增基于 Public Suffix List 的同站校验,并在运行时重建时重复门禁,防止旧持久化数据绕过。

验证:go test ./... -count=1(apps/api)
2026-07-28 05:52:46 +08:00
chengcheng 053bc260c7 refactor: 使用标准库实现 OIDC 客户端流程 2026-07-14 11:11:48 +08:00
wangbo 7e220b7477 feat: add river-backed async task queue 2026-05-12 10:11:54 +08:00
wangboandCursor 6323e70e49 Initial project scaffold
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-05-09 14:36:35 +08:00