saa99999
a17fa5a103
Fix CWE-347: JWT algorithm confusion + CWE-798: hardcoded credentials in example config ( #131 )
...
- Add HMAC algorithm verification in ParseToken to prevent JWT algorithm
confusion attacks (CWE-347). Reject tokens with non-HMAC signing methods.
- Replace hardcoded secrets in config.yml.example with empty values
(JWT key, DB password, AES key) to prevent users from deploying with
weak/known credentials (CWE-798).
2026-05-27 19:10:12 +08:00
meilin.huang
84ab496308
refactor: 前端生产路由改为history、依赖版本升级
2026-03-05 20:31:57 +08:00
meilin.huang
9bb9861d88
refactor: 参数绑定等优化
2026-02-07 13:12:07 +08:00
meilin.huang
400db0402a
refactor: 包优化&其他问题修复
2026-01-25 14:16:16 +08:00
meilin.huang
f0de65b7ce
refactor: 协程启动优化、tagviews调整
2026-01-20 19:45:46 +08:00
meilin.huang
4ac57cd140
refactor: 标签不可移动,资源选择优化等
2025-10-07 15:41:19 +08:00
meilin.huang
6ad6c69660
refactor: 消息模块重构,infra包路径简写等
2025-07-27 21:02:48 +08:00
meilin.huang
54d3a5b368
fix: sql执行记录根据关键词搜索问题修复等
2025-06-22 10:52:06 +08:00
meilin.huang
d6280ea280
refactor: 使用泛型重构参数绑定等
2025-05-24 16:22:54 +08:00
zongyangleo
142bbd265d
!134 feat: 新增支持es和连接池
...
* feat: 各连接,支持连接池
* feat:支持es
2025-05-21 04:42:30 +00:00
meilin.huang
f676ec9e7b
feat: flow design & page query refactor
2025-05-20 21:04:47 +08:00
meilin.huang
abd2b4bac0
refactor: 引入tailwind css & 后端部分非公共包位置调整
2025-04-18 22:07:37 +08:00
meilin.huang
68f553f4b0
refactor: remove router、ioc is adjusted to inject by type
2024-12-16 23:29:18 +08:00
meilin.huang
99a746085b
feat: i18n
2024-11-20 22:43:53 +08:00
meilin.huang
2118acf244
release: v1.9.0
2024-10-23 17:30:05 +08:00
meilin.huang
e135e4ce64
feat: sql解析器替换、工单统一由‘我的流程’发起、流程定义支持自定义条件触发审批、资源隐藏编号、model支持物理删除等
2024-10-16 17:24:50 +08:00
zongyangleo
43edef412c
!123 一些bug修复
...
* fix: 数据同步、数据迁移体验优化
* fix: des加密传输sql
* fix: 修复达梦字段注释显示问题
* fix: mysql timestamp 字段类型导出ddl错误修复
2024-08-22 00:43:39 +00:00
meilin.huang
89e12678eb
refactor: 引入dayjs、新增refreshToken无感刷新、团队新增有效期、数据库等问题修复
2024-05-13 19:55:43 +08:00
meilin.huang
a831614d5a
fix: sql脚本问题修复等
2024-04-23 11:35:45 +08:00
meilin.huang
8589105e44
feat: oracle支持服务名、数据库执行超时时间配置等
2024-03-07 17:26:11 +08:00
meilin.huang
bf75483a3c
refactor: 简化api层相关调用
2024-02-25 12:46:18 +08:00
meilin.huang
b56b0187cf
refactor: api层尽可能屏蔽gin框架相关代码
2024-02-24 16:30:29 +08:00
kanzihuang
e344722794
feat: 实现数据库备份与恢复
2023-12-29 08:30:10 +08:00
meilin.huang
a376a82240
feat: 数据库sql执行支持取消执行操作
2023-12-07 01:07:34 +08:00
meilin.huang
57361d8241
feat: 支持关联多标签、计划任务立即执行、标签相关操作优化
2023-12-05 23:03:51 +08:00
meilin.huang
eddda41291
feat: 机器列表新增运行状态 & refactor: 登录账号信息存储与context
2023-11-07 21:05:21 +08:00
meilin.huang
a1303b52eb
refactor: 新增base.Repo与base.App,重构repo与app层代码
2023-10-26 17:15:49 +08:00
meilin.huang
10f6b03fb5
refactor: code review
2023-10-20 21:31:46 +08:00
meilin.huang
2b91bbe185
refactor: websocket支持单用户多连接
2023-10-19 19:00:23 +08:00
wanli
ccfc6bd1df
feature: 每个客户端独立处理后端发送的系统消息
2023-10-18 20:31:27 +08:00
meilin.huang
d0ac7de4cb
review: 数据库实例管理调整
2023-09-05 12:49:12 +08:00
meilin.huang
899a3a8243
refactor: slog替换logrus、日志操作统一、支持json、text格式等
2023-09-02 17:24:18 +08:00
meilin.huang
c2ee4f9955
refactor: 后端validator校验错误转译
2023-07-31 17:34:32 +08:00
meilin.huang
155ae65b4a
refactor: oauth2登录重构
2023-07-22 20:51:46 +08:00
meilin.huang
7f9e972828
feat: 代码优化、机器计划任务完善
2023-07-21 17:07:04 +08:00
meilin.huang
3269dfa5d6
refactor: 后端路由定义方式&请求参数绑定重构
2023-07-08 20:05:55 +08:00
meilin.huang
17d96acceb
refactor: interface{} -> any
...
feat: 新增外链菜单
2023-06-01 12:31:32 +08:00
meilin.huang
9900b236ef
refactor: 组件升级、代码优化
2023-05-24 12:32:17 +08:00
meilin.huang
af55193591
feat: redis支持zset、redis数据操作界面优化
2023-04-16 00:50:36 +08:00
meilin.huang
110abc4ac7
feat: 代码优化
2023-03-16 16:40:57 +08:00
meilin.huang
9f43f731b5
fix: 问题修复
2023-01-19 19:45:12 +08:00
meilin.huang
594ca43505
refactor: 包名变更ctx -> req
2023-01-14 16:29:52 +08:00