Commit Graph

25 Commits

Author SHA1 Message Date
xiaoxia 9f69fde30b fix(#558): 微信登录3个后端修复 - 验证码500 + 绑定500 + state校验 (#684)
CI/CD Pipeline / Build Staging Worker Image (push) Has been cancelled
CI/CD Pipeline / Deploy Staging (Watchtower auto-deploy) (push) Has been cancelled
CI/CD Pipeline / Staging E2E Tests (push) Has been cancelled
CI/CD Pipeline / Staging API Integration Tests (push) Has been cancelled
CI/CD Pipeline / ACR Image Cleanup (push) Has been cancelled
CI/CD Pipeline / Production Browser E2E (push) Failing after 1365h37m19s
CI/CD Pipeline / Deploy Production (push) Failing after 1365h37m21s
CI/CD Pipeline / Build Production Web Image (push) Failing after 1365h37m23s
CI/CD Pipeline / Build Production API Image (push) Failing after 1365h37m25s
CI/CD Pipeline / Check if frontend-only change (push) Failing after 1365h37m26s
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been skipped
CI/CD Pipeline / Unit Tests (push) Has been skipped
CI/CD Pipeline / Integration Tests (push) Has been skipped
CI/CD Pipeline / Frontend Lint (push) Has been skipped
CI/CD Pipeline / Frontend Unit Tests (push) Has been skipped
CI/CD Pipeline / Build Staging API Image (push) Has been skipped
CI/CD Pipeline / Build Staging Web Image (push) Has been skipped
CI/CD Pipeline / Build Production Worker Image (push) Failing after 1366h9m34s
fix(#558): 微信登录3个后端修复 - 验证码500 + 绑定500 + state校验
2026-07-21 17:51:48 +08:00
xiaoxia 8193e7756a fix: AuthenticatedUser.user_id 改为 user.id,修复编辑器500 (#673)
CI/CD Pipeline / Frontend Unit Tests (push) Failing after 31m31s
CI/CD Pipeline / Integration Tests (push) Has been cancelled
CI/CD Pipeline / Build Staging API Image (push) Has been cancelled
CI/CD Pipeline / Build Staging Worker Image (push) Has been cancelled
CI/CD Pipeline / Deploy Staging (Watchtower auto-deploy) (push) Has been cancelled
CI/CD Pipeline / Staging E2E Tests (push) Has been cancelled
CI/CD Pipeline / Staging API Integration Tests (push) Has been cancelled
CI/CD Pipeline / ACR Image Cleanup (push) Has been cancelled
CI/CD Pipeline / Production Browser E2E (push) Failing after 1372h2m54s
CI/CD Pipeline / Build Production Worker Image (push) Failing after 1372h2m58s
CI/CD Pipeline / Build Production Web Image (push) Failing after 1372h2m58s
CI/CD Pipeline / Build Production API Image (push) Failing after 1372h2m58s
CI/CD Pipeline / Check if frontend-only change (push) Failing after 1372h3m0s
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been skipped
CI/CD Pipeline / Unit Tests (push) Has been skipped
CI/CD Pipeline / Frontend Lint (push) Has been skipped
CI/CD Pipeline / Build Staging Web Image (push) Has been skipped
CI/CD Pipeline / Deploy Production (push) Failing after 1372h35m6s
Co-authored-by: xiaoxia <dev@xiaoxiajianji.com>
Co-committed-by: xiaoxia <dev@xiaoxiajianji.com>
2026-07-21 11:26:16 +08:00
xiaoxia 269723ced2 feat(#558): 微信登录 + 绑定手机号邮箱完整后端实现 (#670)
CI/CD Pipeline / Staging E2E Tests (push) Failing after 1m6s
CI/CD Pipeline / Production Browser E2E (push) Failing after 1374h8m10s
CI/CD Pipeline / Build Production Web Image (push) Failing after 1374h8m12s
CI/CD Pipeline / Build Production API Image (push) Failing after 1374h8m13s
CI/CD Pipeline / Deploy Production (push) Failing after 1374h8m11s
CI/CD Pipeline / Check if frontend-only change (push) Failing after 1374h8m14s
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been skipped
CI/CD Pipeline / Unit Tests (push) Has been skipped
CI/CD Pipeline / Integration Tests (push) Has been skipped
CI/CD Pipeline / Frontend Lint (push) Has been skipped
CI/CD Pipeline / Frontend Unit Tests (push) Has been skipped
CI/CD Pipeline / Build Staging API Image (push) Has been skipped
CI/CD Pipeline / Build Staging Web Image (push) Has been skipped
CI/CD Pipeline / Build Staging Worker Image (push) Has been skipped
CI/CD Pipeline / Deploy Staging (Watchtower auto-deploy) (push) Has been skipped
CI/CD Pipeline / Staging API Integration Tests (push) Has been skipped
CI/CD Pipeline / Build Production Worker Image (push) Failing after 1374h40m21s
CI/CD Pipeline / ACR Image Cleanup (push) Has been skipped
Co-authored-by: xiaoxia <dev@xiaoxiajianji.com>
Co-committed-by: xiaoxia <dev@xiaoxiajianji.com>
2026-07-21 09:21:01 +08:00
CI Bot 6fc1abf2f5 Phase 4 Backend P2 cleanup: 异常处理/类型注解/模块拆分/大函数拆分/配置项确认
CI/CD Pipeline / Unit Tests (pull_request) Failing after 7s
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Failing after 12s
CI/CD Pipeline / Frontend Lint (pull_request) Failing after 1m44s
CI/CD Pipeline / Integration Tests (pull_request) Failing after 2m36s
CI/CD Pipeline / Production Browser E2E (pull_request) Failing after 1555h16m6s
CI/CD Pipeline / Build Production Runtime Images (pull_request) Failing after 1555h16m8s
CI/CD Pipeline / Build & Push Staging (Watchtower auto-deploy) (pull_request) Failing after 1555h16m8s
CI/CD Pipeline / Staging API Integration Tests (pull_request) Failing after 1555h16m8s
CI/CD Pipeline / Deploy Production (pull_request) Failing after 1555h47m43s
CI/CD Pipeline / Staging E2E Tests (pull_request) Failing after 1555h47m44s
- P2-1: 10处 except 审查改进(细化异常类型、添加日志)
- P2-2: 22个路由函数类型注解补全
- P2-3: edit_plans.py 拆分为 4 个模块(CRUD/generation/ai/timeline)
- P2-4: generate_video + generate_plan 大函数拆分
- P2-5: unified_render_service.py 拆分(1517→984行)
  - render_audio.py: 音频混音模块(RenderContext + mix/merge 函数)
  - render_subtitles.py: ASS 字幕生成模块
- P2-6: 6个未使用配置项删除确认

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-13 20:00:54 +08:00
CI Bot 9c6c477f55 fix(backend): Phase 1 后端代码清理与修复
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Failing after 2m22s
CI/CD Pipeline / Unit Tests (pull_request) Failing after 2m24s
CI/CD Pipeline / Integration Tests (pull_request) Failing after 37s
CI/CD Pipeline / Production Browser E2E (pull_request) Failing after 1561h35m7s
CI/CD Pipeline / Build Production Runtime Images (pull_request) Failing after 1561h35m8s
CI/CD Pipeline / Deploy Production (pull_request) Failing after 1561h35m7s
CI/CD Pipeline / Build & Push Staging (Watchtower auto-deploy) (pull_request) Failing after 1561h35m9s
CI/CD Pipeline / Staging API Integration Tests (pull_request) Failing after 1561h35m7s
CI/CD Pipeline / Frontend Lint (pull_request) Has been skipped
CI/CD Pipeline / Staging E2E Tests (pull_request) Failing after 1562h6m43s
P0 关键修复:
- P0-1: 注册接口添加 RateLimitMiddleware 限流保护
- P0-3: /metrics 端点添加 JWT 认证(移除匿名访问)
- P0-4: 修复 Celery 任务名冲突(generation_task vs generate_video)
- P1-5: JWT logout token 黑名单机制

P1 修复:
- P1-1: forgot_password 硬编码 localhost → 使用 settings.APP_BASE_URL
- P1-2: generation.py 直接创建 DB 连接 → 使用依赖注入
- P1-6: Image.open() 未关闭 → 统一使用 with 语句
- P1-7: 订阅续费事务修复

P2 代码质量:
- P2-1: 修复 EditingMode 枚举重复定义 → 统一引用 shared 包
- P2-2: 修复 SMTP_FRON_NAME → SMTP_FROM_NAME 拼写
- P2-3: UserModel subscription_quota 类型统一为 float
- P2-4: .env.production DATABASE_MAX_OVERFLOW 30 → 10
- 清理 15 处 except:pass(保留 2 处有注释说明的)
- 禁用 SVG 上传(XSS 风险)
- 删除 decode_token_unsafe() 不安全函数
- 简化 /ready 端点
- 删除 8 处死代码、10 个空文件/模块
- 合并 3 对 100% 重复函数
- 对齐 6 个废弃环境变量

v2 修复(代码审查后):
- 修复密码重置路由路径: /password/forgot → /forgot-password,
  /password/reset → /reset-password(与前端 API 对齐)
- 合并 _check_project_access: asset_libraries.py 和 edit_plans.py
  中的重复函数统一到 _helpers.py(含空字符串守卫 + 中文错误信息)
- 顺手修复: HTTPException 统一从 fastapi 导入(替换 starlette 导入)
- OSS_ENDPOINT 拼写修复拆分为单独 PR,本 PR 不包含
2026-07-13 13:50:52 +08:00
灵应 1b4532cd9c fix(ci): 修复 PR #185 微信同步登录 Validate 失败
CI/CD Pipeline / Staging E2E Tests (push) Failing after 60h2m5s
CI/CD Pipeline / Deploy Staging (push) Failing after 60h3m49s
CI/CD Pipeline / Frontend Lint (push) Failing after 60h4m26s
CI/CD Pipeline / Validate Code Quality And Tests (push) Failing after 60h5m12s
CI/CD Pipeline / Production Browser E2E (push) Failing after 1718h32m10s
CI/CD Pipeline / Build Production Runtime Images (push) Failing after 1718h38m14s
CI/CD Pipeline / Deploy Production (push) Failing after 1719h5m1s
- black 格式化 wechat_sync_use_case.py
- isort 排序 auth.py imports
- bandit: try_except_pass 改为 logger.debug

根因:PR #185 合并时未通过代码质量检查(black/isort),
导致 CI Validate 步骤在代码检查阶段即失败。
2026-07-07 00:49:14 +08:00
CI Test 46d98f369d feat(auth): 新增微信同步登录接口wechat-sync(内部系统级接口,支持openid查找/创建用户并返回SaaS token)
CI/CD Pipeline / Frontend Lint (pull_request) Failing after 62h22m48s
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Failing after 62h22m56s
CI/CD Pipeline / Production Browser E2E (pull_request) Failing after 1720h48m29s
CI/CD Pipeline / Deploy Production (pull_request) Failing after 1720h48m31s
CI/CD Pipeline / Staging E2E Tests (pull_request) Failing after 1720h48m31s
CI/CD Pipeline / Build Production Runtime Images (pull_request) Failing after 1720h53m56s
CI/CD Pipeline / Deploy Staging (pull_request) Failing after 1720h53m56s
2026-07-06 22:10:33 +08:00
灵应 e25fd86171 style: 后端代码isort import排序
Deploy / Deploy Staging (push) Failing after 137h58m6s
CI/CD Pipeline / Frontend Lint (push) Failing after 137h58m12s
CI/CD Pipeline / Validate Code Quality And Tests (push) Failing after 137h58m12s
Deploy / Staging E2E Tests (push) Failing after 1796h33m35s
Deploy / Production Browser E2E (push) Failing after 1796h33m37s
Deploy / Deploy Production (push) Failing after 1796h33m40s
Deploy / Build Production Runtime Images (push) Failing after 1796h33m42s
2026-07-03 18:56:16 +08:00
灵应 8935196fcd style: 后端代码black格式化
Deploy / Deploy Staging (push) Failing after 138h4m33s
CI/CD Pipeline / Frontend Lint (push) Failing after 138h4m39s
CI/CD Pipeline / Validate Code Quality And Tests (push) Failing after 138h4m39s
Deploy / Staging E2E Tests (push) Failing after 1796h40m0s
Deploy / Production Browser E2E (push) Failing after 1796h40m1s
Deploy / Build Production Runtime Images (push) Failing after 1796h40m6s
Deploy / Deploy Production (push) Failing after 1797h11m28s
2026-07-03 18:49:54 +08:00
CI Test d6b11ea1cd fix: 清理全局 except:pass(22处)改为 logger.warning 记录异常
Tests / lint (pull_request) Failing after 147h14m3s
Tests / test (pull_request) Failing after 147h14m3s
CI/CD Pipeline / Frontend Lint (pull_request) Failing after 147h14m28s
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Failing after 147h14m34s
Deploy / Deploy Staging (push) Failing after 147h14m58s
CI/CD Pipeline / Frontend Lint (push) Failing after 147h15m21s
CI/CD Pipeline / Validate Code Quality And Tests (push) Failing after 147h15m27s
Deploy / Production Browser E2E (push) Failing after 1805h50m9s
Deploy / Build Production Runtime Images (push) Failing after 1805h50m42s
Deploy / Deploy Production (push) Failing after 1806h21m35s
2026-07-03 09:38:57 +08:00
CI Test 86029314f5 fix(security): JWT logout 黑名单机制
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
CI/CD Pipeline / Frontend Lint (push) Has been cancelled
Deploy / Deploy Staging (push) Has been cancelled
Deploy / Build Production Runtime Images (push) Has been cancelled
Deploy / Deploy Production (push) Has been cancelled
Deploy / Production Browser E2E (push) Has been cancelled
- auth.py 添加 blacklist_token/is_token_blacklisted 函数
- _decode_user_token 增加黑名单检查
- 新增 /auth/logout 端点,将 token 加入 Redis 黑名单
- 黑名单 TTL 与 token 剩余有效期一致,自动过期清理
2026-07-03 08:36:06 +08:00
xiaoxia 52ff2f80ad style: apply black formatting to pass CI validation (#126)
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
CI/CD Pipeline / Frontend Lint (push) Has been cancelled
Deploy / Deploy Staging (push) Has been cancelled
Deploy / Build Production Runtime Images (push) Has been cancelled
Deploy / Deploy Production (push) Has been cancelled
Deploy / Production Browser E2E (push) Has been cancelled
2026-06-30 17:23:08 +08:00
CI Test d1f2dbffa4 fix(P1-1): auth.py forgot_password 硬编码 localhost 改为 settings.APP_BASE_URL
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
CI/CD Pipeline / Frontend Lint (push) Has been cancelled
Deploy / Deploy Staging (push) Has been cancelled
Deploy / Build Production Runtime Images (push) Has been cancelled
Deploy / Deploy Production (push) Has been cancelled
Deploy / Production Browser E2E (push) Has been cancelled
2026-06-28 10:25:03 +08:00
CI Test e90076f794 feat(auth): implement refresh token mechanism
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
CI/CD Pipeline / Frontend Lint (push) Has been cancelled
Deploy / Deploy Staging (push) Has been cancelled
Deploy / Build Production Runtime Images (push) Has been cancelled
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
CI/CD Pipeline / Frontend Lint (pull_request) Has been cancelled
Deploy / Deploy Production (push) Has been cancelled
Deploy / Production Browser E2E (push) Has been cancelled
- Add /auth/refresh endpoint for token renewal
- Login response now includes refresh_token
- Update JWT defaults: access_token 15min, refresh_token 7days
- Reuse existing RefreshTokenUseCase with Redis session store
2026-06-27 22:57:25 +08:00
API文档维护Agent 8064b64ff5 docs: API文档准确性修复
1. 修正上传端点schema命名:新增UploadAssetRequest模型替代自动生成的Body_upload_asset名称
2. 清理认证重复端点:移除/forgot-password和/reset-password旧路由,保留/password/forgot和/password/reset
3. 清理workspace_id残留:从edit_plan/asset_diagnosis/task_center/project_title等schema中移除,project_management和projects中改为可选
4. 更新README:移除过时的多租户/订阅/refresh token描述,修正仓库地址为git.xiaoxiajianji.com,更新API路径列表
2026-06-27 19:02:31 +08:00
Audit Bot 2c6d920bcb fix(#25): 移除硬编码 localhost:3000
- 添加 APP_BASE_URL 配置项到 Settings
- auth.py 中改用 settings.APP_BASE_URL
- register_user_use_case.py 和 password_reset_use_case.py 移除默认值
- base_url 参数改为必须由调用方传入
- 更新 .env.example 添加 APP_BASE_URL
2026-06-27 17:20:17 +08:00
Xiaoxia AI 3680888d36 fix(auth): allow registration without display name 2026-06-21 16:24:21 +08:00
Xiaoxia AI 3594cc1216 refactor(auth): configure external service adapters 2026-06-21 11:04:07 +08:00
Xiaoxia AI b78a290bdd feat(auth): add verification and password reset routes 2026-06-21 10:40:56 +08:00
Xiaoxia AI a9e2ba5440 refactor(auth): promote canonical auth routes 2026-06-21 09:50:10 +08:00
Xiaoxia AI bfbaddbd9a style: normalize python formatting gates 2026-06-21 06:52:19 +08:00
Xiaoxia AI a33bead056 refactor(api): quarantine legacy container routes 2026-06-21 00:37:42 +08:00
Xiaoxia AI 5e047972cd fix(phase7): resolve remaining TODOs - session_id in JWT and repository injection 2026-06-19 09:47:20 +08:00
Xiaoxia AI 11e3761e23 feat(api): implement auth API routes with use case integration
- Connect all auth routes to use cases via dependency container
- Implement register endpoint (email + password + username)
- Implement login endpoint (JWT token generation)
- Implement logout endpoint (single device / all devices)
- Implement email verification endpoint
- Implement password reset flow (request + reset)
- Add proper error handling and HTTP status codes
- Security: return 202 for forgot password even if email not exists

Phase 4 Task 26/68 completed
2026-06-17 07:31:21 +08:00
Xiaoxia AI 381ffb4ee9 feat(api): add API route structure and endpoint definitions
- Create auth routes (register/login/logout/verify/password-reset)
- Create workspace routes (CRUD/members/subscription/quota)
- Define Pydantic request/response models
- Add comprehensive API documentation in docstrings
- Setup dependency injection placeholders
- Include all 18+ endpoints with proper HTTP methods

Phase 4 Task 24/68 completed
2026-06-17 07:27:35 +08:00