| content |
{"Commits":[{"Sha1":"d0cc67ef9 {"Commits":[{"Sha1":"d0cc67ef9b33f520698ec24edfd209002f433450","Message":"chore(reports): 合入 main 6c074f962 后根静态链与 runtime 静态门禁回绑 @ 0dd9bf9a5\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-31T08:58:04-07:00"},{"Sha1":"0dd9bf9a510fca85d10ad3116133454b55f93536","Message":"Merge branch 'main' into claude/sso-rp-negatives-20261031\n\n# Conflicts:\n#\treports/migration-decs.latest.json\n#\treports/release-drift.latest.json\n#\treports/stub-surface.latest.json\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-31T08:52:36-07:00"},{"Sha1":"d3b215bb2f87ff444a04576fc32c5a41120a9fec","Message":"docs(状态): 工作台OIDC依赖方负向与azp/UTF-8修复的隔离验收边界\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-31T08:46:53-07:00"},{"Sha1":"ec6e3b5358aa385139e111d4202fd8b783e6bb6a","Message":"chore(reports): 根静态链、runtime 静态门禁与工作台浏览器 247/247 回绑 @ 0a6e8b38c\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-31T08:45:14-07:00"},{"Sha1":"0a6e8b38c799c9ad5656545b1f2d728bf3e883f7","Message":"fix(workbench): id_token 依赖方补 azp 校验与 UTF-8 解码,nonce/audience/state 负向入单测\n\n浏览器侧 verifyIdToken 原只比 nonce 与 aud:多受众令牌未要求 azp、azp 指向别的客户端也会收下\n(OIDC Core 3.1.3.7 第 4–5 条),载荷按 Latin-1 解析使非 ASCII 声明成乱码,非对象载荷靠后续字段兜底。\n现多受众须带 azp 且为本客户端、azp 存在即须为本客户端;载荷按 UTF-8 解码且须为 JSON 对象。\n新增 scripts/oidc-relying-party.test.mjs(8 例)对已发布源码验证 nonce 缺失/不一致/类型、audience、\nazp、令牌形态、issuer 降级、state 绑定的事务清理与已完成回调恢复;修前 azp 与 UTF-8 两例红。\n签名、有效期与权威 issuer 仍在服务端;真人登录负向另验。\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-31T08:32:22-07:00"}],"HeadCommit":{"Sha1":"d0cc67ef9b33f520698ec24edfd209002f433450","Message":"chore(reports): 合入 main 6c074f962 后根静态链与 runtime 静态门禁回绑 @ 0dd9bf9a5\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-31T08:58:04-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/d8fcf89b4ac2cf5ef6c544f6b8115239c7da7e3a...d0cc67ef9b33f520698ec24edfd209002f433450","Len":5}... |