si-meng-spec/ToDoList
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
11 Commits 1 Branch 0 Tags
0bca9e6654b04f8f0b8d109147b647c55afc23d2
Commit Graph

6 Commits

Author SHA1 Message Date
祀梦
0bca9e6654 fix: prevent full page reload on login failure (401 on /auth/login) 
The axios 401 interceptor was redirecting to /login for every 401 response,
including failed login attempts. Now it skips the redirect when the request
is to /auth/login, letting the LoginView handle the error gracefully.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-17 16:01:04 +08:00
祀梦
9d4d869d57 fix: harden authentication system (JWT, cookies, rate limiting, password policy) 
- Replace hardcoded JWT secret with randomly generated key persisted to file
- Replace hardcoded default password with random password shown in logs
- Migrate token storage from localStorage to HttpOnly SameSite=strict cookie
- Add IP-based login rate limiter (5 attempts / 15 min, 429 on lockout)
- Add token_version for JWT revocation on password change
- Add password strength validation (min 6 chars, 3+ unique characters)
- Inject decoded user payload into request.state.user in auth middleware
- Add /api/auth/me and /api/auth/logout endpoints
- Narrow auth middleware exception handling (JWTError only, not all Exception)
- Update updated_at timestamp on password change
- Remove localStorage token management from frontend (axios, router, store)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-17 15:54:45 +08:00
祀梦
e3f73048a7 refactor: remove all asset/account functionality (models, schemas, routers, store, views, components, tests, docs) 2026-05-17 12:59:52 +08:00
祀梦
3c03866021 feat: add JWT authentication and AGENTS.md 2026-05-17 11:21:41 +08:00
祀梦
40eb2dadb0 fix: configure Element Plus Chinese locale (zh-cn) 
Add zh-cn locale to Element Plus globally via app.use() and el-config-provider wrapper, and apply :locale prop to all el-date-picker components in dialogs to ensure correct Chinese display in date pickers, calendars, and other locale-aware UI.

Made-with: Cursor
 2026-03-16 15:47:15 +08:00
祀梦
2979197b1c release: Elysia ToDo v1.0.0 
鍏ㄦ爤涓汉淇℃伅绠＄悊搴旂敤锛岄泦鎴愬緟鍔炰换鍔°€佷範鎯墦鍗°€佺邯蹇垫棩鎻愰啋銆佽祫浜ф€昏鍔熻兘銆

Made-with: Cursor
 2026-03-14 22:21:26 +08:00