07b5589253
fix(p1): resolve 4 P1 technical debt issues
...
- P1-1: CORS configuration security - use DEBUG mode to differentiate
production vs development CORS settings
- P1-2: Implement token refresh logic in RefreshTokenUseCase
- Add get_session_by_refresh_token to SessionStore
- Verify session validity and expiry
- Generate new access token on refresh
- P1-3: Fix database connection leak in worker ingest task
- Add proper try-except-finally block
- Ensure db.close() is always called
- P1-4: Implement real media metadata extraction
- Use ffprobe for video metadata
- Use Pillow for image metadata
- Return empty dict on failure (no mock data)
2026-06-26 18:11:07 +08:00
xiaoxia
a2fc3a0e2a
fix: resolve CI check failures - format code and fix line length issues
2026-06-26 18:00:53 +08:00
xiaoxia
b966d24ecf
fix: resolve CI check failures - format code and add nosec comment
2026-06-26 18:00:11 +08:00
xiaoxia
394637d1eb
fix: P2-4 add complete type annotations to dependencies
2026-06-26 17:58:25 +08:00
xiaoxia
7651a5f3f2
fix: P3-1 unify database config with app.config
2026-06-26 17:56:33 +08:00
xiaoxia
7ef99afa4c
fix(P2-5): add server-side file type validation with magic
2026-06-26 17:54:03 +08:00
xiaoxia
73043ed72b
fix(P1-1): resolve CORS configuration security issue
2026-06-26 17:48:57 +08:00
xiaoxia
0e4a07f0c1
fix(security): P0 - 日志过滤敏感参数(token/password/secret等)
2026-06-26 17:43:35 +08:00
xiaoxia
c04b57a1f8
fix(security): P0 - JWT密钥强制环境变量，拒绝默认值
2026-06-26 17:43:35 +08:00
0ed3cb7ef5
fix(ci): run unit tests with API path
2026-06-24 20:18:08 +08:00
6e8394d749
style: sort Python imports for CI
2026-06-24 19:57:19 +08:00
f85e389ced
style: format Python files for CI
2026-06-24 19:54:36 +08:00
0f59b412bc
feat(plans): add edit plan preview workflow
2026-06-24 10:10:25 +08:00
ea3a4c4111
feat(tasks): retry failed project tasks
2026-06-24 09:19:23 +08:00
ee6b4a663a
feat(tasks): add project task center
2026-06-24 08:39:32 +08:00
8acbd6c8a7
feat(results): add generated video management
2026-06-24 06:28:06 +08:00
17021c351f
feat(titles): complete title selection workflow
2026-06-24 00:55:00 +08:00
6b66601d67
feat(titles): add project title library
2026-06-24 00:30:58 +08:00
9cc48aeee9
feat(assets): add review actions and high risk view
2026-06-23 22:57:56 +08:00
f2a9b0868b
feat(assets): track generation usage review state
2026-06-23 21:52:47 +08:00
14b760cdaf
fix(generation): block tasks without ready videos
2026-06-23 21:31:59 +08:00
d052645307
feat(assets): add project material diagnosis
2026-06-23 20:14:03 +08:00
6e42f944c0
feat(upload): add OSS direct upload flow
2026-06-23 15:47:03 +08:00
0a0c73bbd7
fix(api): enforce media result permission boundaries
2026-06-23 09:30:09 +08:00
442f6b1ffb
fix(api): enforce workspace access on project media routes
2026-06-22 19:37:57 +08:00
34353506d7
fix(web): restore project workspace context
2026-06-22 13:19:45 +08:00
3680888d36
fix(auth): allow registration without display name
2026-06-21 16:24:21 +08:00
ea92092d12
chore(security): triage bandit findings
2026-06-21 13:38:46 +08:00
ccb7e1e57a
refactor(storage): retire minio runtime naming
2026-06-21 11:20:55 +08:00
3594cc1216
refactor(auth): configure external service adapters
2026-06-21 11:04:07 +08:00
b78a290bdd
feat(auth): add verification and password reset routes
2026-06-21 10:40:56 +08:00
6ba97351aa
refactor(auth): remove auth simple shim
2026-06-21 09:57:17 +08:00
a9e2ba5440
refactor(auth): promote canonical auth routes
2026-06-21 09:50:10 +08:00
27ea04264f
feat(workspace): restore member management routes
2026-06-21 09:36:08 +08:00
383151efcb
feat(workspace): restore core routes on sqlalchemy adapters
2026-06-21 09:22:09 +08:00
a912e17868
refactor(auth): replace legacy middleware sentinel
2026-06-21 09:06:22 +08:00
cddd9948e3
feat(auth): add bearer current user dependency
2026-06-21 08:35:25 +08:00
93271f7dda
refactor(auth): route simple auth through use cases
2026-06-21 08:22:49 +08:00
ebae5f51b0
fix(schema): forbid auto create schema in deployed envs
2026-06-21 07:36:46 +08:00
bfbaddbd9a
style: normalize python formatting gates
2026-06-21 06:52:19 +08:00
0809a079c5
refactor(db): introduce alembic schema baseline
2026-06-21 06:48:16 +08:00
d25bd753a2
refactor(api): guard route adapter boundaries
2026-06-21 02:02:55 +08:00
a33bead056
refactor(api): quarantine legacy container routes
2026-06-21 00:37:42 +08:00
a3fe72a65f
refactor(config): centralize api settings source
2026-06-21 00:36:13 +08:00
57310f33d4
fix(auth): harden simple auth and router imports
2026-06-21 00:27:58 +08:00
1e3a52fa17
fix(worker): persist generated mp4 without oss
2026-06-20 23:17:52 +08:00
d31c62d4e2
fix(deploy): align deployment with split infrastructure
2026-06-20 19:02:48 +08:00
94dd60108c
refactor: 彻底迁移到阿里云 OSS 并重构基础设施
...
- 删除 MinIO 依赖，改用阿里云 OSS (oss2)
- 重写存储服务 storage.py（完全兼容原接口）
- 更新配置：config.py 改为 OSS_* 配置项
- 重构 Docker Compose：分离基础设施（infra.yml）和应用（compose.yml）
- 添加健康检查和自动重启配置
- 创建标准化部署脚本（init-server.sh + deploy.sh）
- 统一 Nginx 配置（主域名 api.xiaoxiajianji.com）
- 修复 Web Dockerfile 端口映射（80 not 3000）
服务器清理完成：
- 删除旧云控制台、监控系统、桌面版代码
- 删除 2.6GB 旧安装包
- 清理 Docker 缓存 2.5GB
- 磁盘使用率从 48% 降至 26%
2026-06-20 15:24:24 +08:00
3002160ad4
feat: 添加简化版认证API和配置文件
2026-06-20 11:29:46 +08:00
8493471c19
feat(project-d): implement real video generation pipeline with FFmpeg
2026-06-19 10:54:20 +08:00
Coze Agent
xiaoxia