Commit Graph

  • e639425885 fix: #26 跨站点 JWT role 修复 — logout 统一 + 审计日志 + 用户同步 main v2026.07.15 aiyimickey 2026-07-15 16:00:23 +0800
  • e1fd098a97 feat: monitor permissions sync + universal docker exec for role writes + build freshness check - role-manager.tsx: 添加同步到所有站点按钮 + 单用户单站点同步 + 同步结果显示详情 - roles/route.ts: 返回 display_name 修复下拉框显示 () - user-roles/route.ts: PUT 统一用 docker exec -i 写所有站点(绕过 SQLite 锁) - sync-users/route.ts: 新增同步 API,统一 docker exec 写所有站点 - deploy-ai.sh: 构建新鲜度自动检查 - deploy-monitor.sh: 同上 v2026.07.08 aiyimickey 2026-07-08 10:35:59 +0800
  • 7365c4e3b8 fix: middleware publicPaths + /api/internal/users for OA monitor integration aiyimickey 2026-07-08 09:13:51 +0800
  • 727269c877 feat: add monitor-ai permissions to user management page aiyimickey 2026-07-07 18:38:58 +0800
  • b851fbbda8 feat: add /api/internal/roles endpoint for OA integration + middleware publicPaths aiyimickey 2026-07-07 18:33:35 +0800
  • 8886e12b15 fix: command injection in lldap-db.ts — use execFileSync stdin instead of sh -c aiyimickey 2026-07-07 18:10:17 +0800
  • ed43d7b8f7 fix: replace docker exec lldap with direct SQLite reads + fix docker.sock group access aiyimickey 2026-07-07 18:05:13 +0800
  • 068c996e68 fix: logout redirect uses OIDC_REDIRECT_URI instead of request headers (open redirect fix) aiyimickey 2026-07-07 17:24:49 +0800
  • 2e1fa92ca3 fix: OIDC callback V2 + logout 302 redirect with x-forwarded-host aiyimickey 2026-07-07 17:19:34 +0800
  • 14c75a8942 chore: .env.example 统一为本地开发配置(JWT_SECRET/AUTHELIA_URL/COOKIE_DOMAIN) v2026.07.07 aiyimickey 2026-07-03 14:01:38 +0800
  • aa44104095 fix: OA退出登录重定向修复 + SSO切换账号按钮 + 生产配置模板 aiyimickey 2026-07-03 12:12:06 +0800
  • 34e685843e feat: OA 门户首页新增告警监控卡片 (monitor.tlyq.ai) v2026.07.02 aiyimickey 2026-07-02 11:25:20 +0800
  • 69e50905d8 refactor: P1 共享库迁移 v2026.07.01 aiyimickey 2026-07-01 18:43:01 +0800
  • 511e1ec9dd feat: SSO 统一认证登录 v2026.06.30 aiyimickey 2026-06-30 17:09:23 +0800
  • dbde9a6058 fix: logout 端点添加 domain 参数清除跨域 cookie aiyimickey 2026-06-29 20:05:19 +0800
  • ec4bbcb71b feat: SSO 统一认证 + Tailwind CSS + 主题切换下拉菜单 + 登录页统一 v2026.06.29 aiyimickey 2026-06-29 18:39:22 +0800
  • ae1e58a595 fix: /api/auth/me 从 LLDAP 实时读取 displayName(非 JWT 缓存) v2026.05.18 aiyimickey 2026-05-18 18:14:17 +0800
  • 868c79891f feat: 权限管理支持修改显示名 + PATCH API 扩展 aiyimickey 2026-05-18 18:08:08 +0800
  • 8dbb841489 chore: 清理垃圾文件 aiyimickey 2026-05-18 17:58:25 +0800
  • 025f56e163 feat: 新增"同步邮箱至站点"管理按钮 + API 端点 aiyimickey 2026-05-18 17:57:57 +0800
  • ce3a26ab4c chore: 清理垃圾文件 aiyimickey 2026-05-18 17:50:57 +0800
  • 32793f7c72 fix: 邮箱同步脚本改为宿主机执行(standalone 容器内无 scripts 目录) aiyimickey 2026-05-18 17:36:59 +0800
  • 14abdff875 fix: 修改邮箱同步到 assets/issue + 自适应布局 + 部署后自动批量同步 aiyimickey 2026-05-18 17:33:41 +0800
  • ab25541200 feat: 邮件 Resend API + 密码设置链接 + 邮箱管理 + UI 重设计 + 时区修复 aiyimickey 2026-05-18 16:57:07 +0800
  • 561ab6d177 docs: 添加 Git Tag 日期版本号规范 aiyimickey 2026-05-18 14:58:55 +0800
  • 0351dba617 feat: OA 统一门户初始化 — LLDAP 认证 + 共享 JWT + 用户管理 v2026.05.14 aiyimickey 2026-05-14 16:36:03 +0800