|
23474
|
接入阿里模型
|
51
|
5
|
ci.yml
|
12
|
8
|
0
|
refs/heads/main
|
88fb2aa68377d24865992a812dc9dfb5f200569c
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"d230fd6dfb8fdba731ca1356263d1ec584d734be","after":"88fb2aa68377d24865992a812dc9dfb5f200569c","compare_url":"https://gitea.g-hi.com/luoanwu/yggdrasil-local-life-tools/compare/d230fd6dfb8fdba731ca1356263d1ec584d734be...88fb2aa68377d24865992a812dc9dfb5f200569c","commits":[{"id":"88fb2aa68377d24865992a812dc9dfb5f200569c","message":"接入阿里模型\n","url":"https://gitea.g-hi.com/luoanwu/yggdrasil-local-life-tools/commit/88fb2aa68377d24865992a812dc9dfb5f200569c","author":{"name":"chenjunfeng","email":"developer.jeff.c@gmail.com","username":""},"committer":{"name":"chenjunfeng","email":"developer.jeff.c@gmail.com","username":""},"verification":null,"timestamp":"2026-07-31T17:58:13+08:00","added":[],"removed":[],"modified":["团购本地生活AI运营App/app-config.js","团购本地生活AI运营App/app.jsx","团购本地生活AI运营App/index.html"]}],"total_commits":0,"head_commit":{"id":"88fb2aa68377d24865992a812dc9dfb5f200569c","message":"接入阿里模型\n","url":"https://gitea.g-hi.com/luoanwu/yggdrasil-local-life-tools/commit/88fb2aa68377d24865992a812dc9dfb5f200569c","author":{"name":"chenjunfeng","email":"developer.jeff.c@gmail.com","username":""},"committer":{"name":"chenjunfeng","email":"developer.jeff.c@gmail.com","username":""},"verification":null,"timestamp":"2026-07-31T17:58:13+08:00","added":[],"removed":[],"modified":["团购本地生活AI运营App/app-config.js","团购本地生活AI运营App/app.jsx","团购本地生活AI运营App/index.html"]},"repository":{"id":51,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"yggdrasil-local-life-tools","full_name":"luoanwu/yggdrasil-local-life-tools","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":87503,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/yggdrasil-local-life-tools/languages","html_url":"https://gitea.g-hi.com/luoanwu/yggdrasil-local-life-tools","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/yggdrasil-local-life-tools","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/yggdrasil-local-life-tools.git","clone_url":"https://gitea.g-hi.com/luoanwu/yggdrasil-local-life-tools.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":1,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-07-02T16:02:07+08:00","updated_at":"2026-07-31T17:31:55+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":8,"login":"chenjunfeng","login_name":"","source_id":0,"full_name":"","email":"8+chenjunfeng@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/2c6398f22eba2ea6d8f403921eea0967","html_url":"https://gitea.g-hi.com/chenjunfeng","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-03-09T13:22:40+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"chenjunfeng"},"sender":{"id":8,"login":"chenjunfeng","login_name":"","source_id":0,"full_name":"","email":"8+chenjunfeng@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/2c6398f22eba2ea6d8f403921eea0967","html_url":"https://gitea.g-hi.com/chenjunfeng","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-03-09T13:22:40+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"chenjunfeng"}}...
|
push
|
2
|
8
|
1785491899
|
1785493049
|
0
|
1785491898
|
1785493049
|
group: ci-${{ github.ref }}
cancel-in-progress: &# group: ci-${{ github.ref }}
cancel-in-progress: "true"
...
|
ci-refs/heads/main
|
1
|
Edit
Delete
|
|
25331
|
fix(mfa): 限制初始管理员凭据并原子完成首次开通
|
125
|
16
|
verify.yml
|
1
|
16
|
0
|
refs/heads/main
|
958ef4eaa9c5c873973a94474f7ffb6ab9c16cd2
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"0000000000000000000000000000000000000000","after":"958ef4eaa9c5c873973a94474f7ffb6ab9c16cd2","compare_url":"https://gitea.g-hi.com/pengzhiyu/IAM/compare/bff0faf3451547b455191b02c7cf7ca2a1c1ee80...958ef4eaa9c5c873973a94474f7ffb6ab9c16cd2","commits":[{"id":"958ef4eaa9c5c873973a94474f7ffb6ab9c16cd2","message":"fix(mfa): 限制初始管理员凭据并原子完成首次开通\n\n初始管理员密码原先没有有效期，首次绑定后仍可作为长期密码使用。增加固定开通期限并要求绑定时设置正式密码，保留现有 MFA 安全机制。\n\n实现内容：\n- V24 增加初始凭据截止和完成标记，固定 24 小时有效，受限会话仍最多 300 秒且不能越过开户期限\n- 正式密码替换、TOTP 消费、因素绑定、恢复码生成及审计原子提交，撤销旧身份并创建新会话\n- 处理并发开通的浏览器会话清理，仅续办当前浏览器的有效 OIDC 交易且不延长交易期限\n- 增加离线重新签发命令和私密交付流程，禁止用于已绑定账号；前端仍要求确认保存恢复码\n- 补充开通、迁移、并发、事务回滚、前端和交付脚本测试，同步账号与 MFA 合同\n\n验证：\n- Maven 定向 verify：BootstrapEnrollmentIT 10 项、AccountsIT 15 项、MfaIT 34 项、TotpTest 3 项通过\n- AttackProtectionIT 12 项、SessionLifecycleIT 26 项、AuthorizationIT 26 项、BrowserSecurityIT 5 项通过\n- 初始凭据及三类 MFA 迁移测试各 1 项通过；AuthorizationMigrationIT 修正旧版本断言后 3 项通过\n- npm run check：21 个文件 173 项测试以及格式、lint、类型检查、构建通过\n- python3 deploy/lab/test-bootstrap.py：3 项通过\n- Maven console profile package 通过，最终 JAR 的前端资源和 V24 迁移与工作区一致\n- 后端全量测试及本阶段真实浏览器验收未运行\n\nBREAKING CHANGE: 需执行 V24 并同步升级前后端；历史未绑定初始管理员必须离线重新签发，初始开通确认接口新增必填 new_password，旧实例不能混跑\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/958ef4eaa9c5c873973a94474f7ffb6ab9c16cd2","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-09T18:38:18+08:00","added":["deploy/lab/test-bootstrap.py","iam-server/src/main/resources/db/migration/V24__bootstrap_credential_lifecycle.sql","iam-server/src/test/java/com/iam/server/data/BootstrapCredentialMigrationIT.java","iam-server/src/test/java/com/iam/server/protocol/BootstrapEnrollmentIT.java","iam-server/src/test/java/com/iam/server/protocol/TestAdministrator.java"],"removed":[],"modified":["deploy/lab/lab.py","docs/accounts.md","docs/mfa.md","iam-admin-web/src/pages/MfaPage.tsx","iam-admin-web/src/test/mfa.test.tsx","iam-server/src/main/java/com/iam/server/IamApplication.java","iam-server/src/main/java/com/iam/server/accounts/AccountService.java","iam-server/src/main/java/com/iam/server/accounts/AccountStore.java","iam-server/src/main/java/com/iam/server/accounts/BootstrapCli.java","iam-server/src/main/java/com/iam/server/accounts/BootstrapService.java","iam-server/src/main/java/com/iam/server/protocol/MfaService.java","iam-server/src/main/java/com/iam/server/protocol/ProtocolConfiguration.java","iam-server/src/main/java/com/iam/server/protocol/SessionLifecycle.java","iam-server/src/main/java/com/iam/server/web/MfaController.java","iam-server/src/test/java/com/iam/server/accounts/AccountsIT.java","iam-server/src/test/java/com/iam/server/data/AuthorizationMigrationIT.java","iam-server/src/test/java/com/iam/server/protocol/AuthorizationIT.java","iam-server/src/test/java/com/iam/server/protocol/MfaHttpClient.java","iam-server/src/test/java/com/iam/server/protocol/P08Environment.java","iam-server/src/test/java/com/iam/server/protocol/ProtocolFixture.java","scripts/bootstrap-admin.py"]},{"id":"f59b781e837c7cc0afc4916f4e7ace4d5e37f760","message":"fix(mfa): 修复受限会话恢复并增加递增冷却\n\n修复受限 MFA 会话过期后的页面恢复，并区分挑战终态与临时限流，防止用户等待后继续提交已失效的挑战。\n\n实现内容：\n- 全局 401 覆盖 PENDING/RECOVERY，补充 MFA 路由保护和明确退出导航\n- 挑战及绑定截止不晚于基础会话期限，终态要求重新开始，临时限流按 Retry-After 等待且不自动提交\n- V23 增加账号共享失败累计，每五次无效证明按 30/60/120/300 秒递增冷却，并原子记录审计与 Outbox\n- 保留 TOTP 防重放、恢复码单次消费、管理员禁止停用及独立二次验证授权\n- 补充集成、迁移、前端与浏览器验收测试，同步接口合同\n\n验证：\n- Maven 定向 verify：TotpTest 3 项、AttackProtectionIT 12 项、BrowserSecurityIT 5 项及三类 MFA 迁移测试各 1 项通过\n- MfaIT 首轮两项测试夹具异常已修复，定向 verify 重跑 34 项全部通过\n- npm run check：21 个文件共 171 项测试通过，格式、lint、类型及构建通过；最终脚本补测后格式与 lint 再次通过\n- Maven console profile package 成功，最终 JAR 浏览器 S01—S07 完整通过，S08 正式登录路由单独补测通过\n- 后端全量测试及原 P11 浏览器全套未运行\n\nBREAKING CHANGE: 挑战耗尽由 429 改为 400，新增 MFA_CHALLENGE_CONSUMED 和 MFA_COOLDOWN；需执行 V23、同步升级前后端并协调停止旧实例\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/f59b781e837c7cc0afc4916f4e7ace4d5e37f760","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-09T18:13:57+08:00","added":["iam-admin-web/scripts/acceptance-mfa-stage3.mjs","iam-admin-web/src/test/mfa-route.test.tsx","iam-server/src/main/resources/db/migration/V23__mfa_failure_cooldown.sql","iam-server/src/test/java/com/iam/server/data/MfaCooldownMigrationIT.java"],"removed":[],"modified":["docs/attack-protection.md","docs/console/page-api-matrix.md","docs/mfa.md","iam-admin-web/scripts/acceptance-p11-t01.mjs","iam-admin-web/src/App.tsx","iam-admin-web/src/lib/auth.tsx","iam-admin-web/src/pages/MfaPage.tsx","iam-admin-web/src/test/mfa.test.tsx","iam-server/src/main/java/com/iam/server/protocol/MfaService.java","iam-server/src/main/java/com/iam/server/protocol/ProtocolStore.java","iam-server/src/test/java/com/iam/server/protocol/MfaIT.java"]},{"id":"c0aca8ed9cb6c24340ab9a6cf3c22ff42d68c59b","message":"fix(mfa): 为敏感因素操作增加独立二次验证授权\n\n登录验证不再授权认证器重绑、恢复码再生成或停用 MFA，敏感操作必须完成新的 TOTP 验证。\n\n实现内容：\n- 新增 V22 授权表，绑定用户、会话、因素代际与操作类型，五分钟有效并在业务事务内原子消费\n- 保持首次绑定与恢复码受限重绑、管理员禁用限制及普通管理会话强度语义\n- 前端按具体操作弹出验证，身份变化、取消或过期终止，成功后最多续办一次并使用轮换后的 CSRF\n- 补充迁移、授权边界、前端续办测试以及接口文档和浏览器验收脚本\n\n验证：\n- MfaIT 23、AttackProtectionIT 12、TotpTest 3、BrowserSecurityIT 5、MfaMigrationIT 1、MfaStepUpMigrationIT 1 均通过\n- npm run check 通过：20 个文件共 157 项测试，格式、静态检查、类型检查与构建通过\n- 最后调整验收脚本后 npm run format:check 通过；console 制品打包通过\n- 最终制品的真实浏览器 12 个场景分两轮覆盖通过；完整单轮受账号限流影响，脚本已加入窗口等待\n- git diff --check 通过；后端全量测试未运行\n\nBREAKING CHANGE: 敏感因素操作需在挑战中指定 operation 并携带 X-MFA-Step-Up 授权。上线须执行 V22 并同步升级前后端，旧实例不可混跑；升级会清除未完成的绑定候选。\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/c0aca8ed9cb6c24340ab9a6cf3c22ff42d68c59b","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-09T17:17:07+08:00","added":["iam-server/src/main/resources/db/migration/V22__mfa_step_up_authorization.sql","iam-server/src/test/java/com/iam/server/data/MfaStepUpMigrationIT.java"],"removed":[],"modified":["docs/adr/A25-p11-administrator-mfa.md","docs/console/page-api-matrix.md","docs/mfa.md","iam-admin-web/scripts/acceptance-p11-t01.mjs","iam-admin-web/src/lib/api.ts","iam-admin-web/src/lib/auth.tsx","iam-admin-web/src/pages/MfaPage.tsx","iam-admin-web/src/test/api.test.ts","iam-admin-web/src/test/mfa.test.tsx","iam-server/src/main/java/com/iam/server/protocol/MfaService.java","iam-server/src/main/java/com/iam/server/web/MfaController.java","iam-server/src/test/java/com/iam/server/protocol/MfaIT.java"]},{"id":"7f8cdc4698e73b2af30f932250521b0d12198f06","message":"chore(evidence): 外置验收截图并记录历史清理映射\n\n批量浏览器截图占据仓库主要体积，改为独立归档并保留证据追溯方式。\n\n实现内容：\n- 排除 docs/evidence 下批量图片再次进入版本控制，保留其他文档图片\n- 增加 3473 张截图的归档校验清单及 146 个历史提交的新旧映射\n- 将 534 处截图链接指向归档说明并保留原路径，补充恢复及后续证据规则\n\n验证：\n- 146 个历史提交的非截图文件及父提交关系逐一核对通过\n- 3473 张归档图片逐一核对 SHA-256，通过归档完整性检查\n- 全部归档图片被忽略，其他文档图片未被误排除\n- 534 处改写链接目标校验及 git diff --check 通过\n- 未运行业务测试，本次没有修改业务代码或测试断言\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/7f8cdc4698e73b2af30f932250521b0d12198f06","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-09T15:37:26+08:00","added":["docs/evidence/README.md","docs/evidence/history-rewrite-map.txt","docs/evidence/screenshots-archive.json"],"removed":[],"modified":[".gitignore","docs/README.md","docs/evidence/P08/result.md","docs/evidence/P09/T01/recheck/result.md","docs/evidence/P09/T01/result.md","docs/evidence/P09/T02/group-lifecycle/visual-review.md","docs/evidence/P09/T02/recheck/result.md","docs/evidence/P09/T02/recheck/visual-review.md","docs/evidence/P09/T02/result.md","docs/evidence/P09/T03/result.md","docs/evidence/P09/T03/visual-review.md","docs/evidence/P09/T04/result.md","docs/evidence/P09/T04/visual-review.md","docs/evidence/P09/T05/result.md","docs/evidence/P09/T05/visual-review.md","docs/evidence/P09/T06/m2-exit.md","docs/evidence/P09/T06/visual-review.md","docs/evidence/P10/T01/result.md","docs/evidence/P10/T02/result.md","docs/evidence/P10/T03/result.md","docs/evidence/P10/T04/result.md","docs/evidence/P10/T05/result.md","docs/evidence/P11-PRE01/result.md","docs/evidence/P11/T01/dynamic-review.md","docs/evidence/P11/T01/result.md","docs/evidence/P11/T02/dynamic-review.md","docs/evidence/P11/T02/result.md","docs/evidence/P11/T03/result.md","docs/evidence/P11/T04/README.md","docs/evidence/P11/T04/coverage.md","docs/evidence/P11/T04/failures.md","docs/evidence/P11/T05/README.md","docs/evidence/P11/T06/README.md","docs/evidence/P11/T06/coverage.md","docs/evidence/P11/T07/README.md","docs/evidence/P11/T07/manual-checklist.md"]},{"id":"7da2727c1fa0b56e93f3c0bf68882dedc18dc46d","message":"docs(capacity): 归档生命周期锁优化与两小时故障复验\n\n记录共享生命周期读锁候选的同条件短测、正式稳定性及故障复验，保留失败与修正，并按原预算维持未通过裁决。\n\n实现内容：\n- 归档原始样本、源码摘要、曲线、认证方案评审及复算脚本\n- 同步开发计划和容量任务，区分历史、诊断、正式结果及目标缺口\n- 固定派生CSV使用LF，核对220份证据摘要与Git暂存内容一致\n- 保留耗尽探针首次失败及补测，记录7个独立环境与私有材料清理\n\n验证：\n- 冻结候选 ./mvnw -B -ntp clean verify -Pconsole：491个唯一测试通过，零失败、零跳过，AOSP及冻结前端构建通过\n- Python统计合同11项通过；最终故障工具javac及AOSP通过\n- 正式7200秒：815729成功、31错误、零漏发和429；刷新P95 303.72ms仍超过200ms预算\n- 10类低档隔离探针及9类持续背景故障最终通过，初次失败与预热错误保留\n- 归档JSON/Python语法、摘要与git diff --cached --check通过\n- L1自身目标仍未满足，限定试运行依据不足，P12未通过；未进入P13、未推送\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/7da2727c1fa0b56e93f3c0bf68882dedc18dc46d","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-08T20:21:54+08:00","added":["docs/evidence/P12/capacity/lock-cost-20261008/README.md","docs/evidence/P12/capacity/lock-cost-20261008/after/catalog-sessions.json","docs/evidence/P12/capacity/lock-cost-20261008/after/cleanup-environment.json","docs/evidence/P12/capacity/lock-cost-20261008/after/commands.jsonl","docs/evidence/P12/capacity/lock-cost-20261008/after/curves/timeline.csv","docs/evidence/P12/capacity/lock-cost-20261008/after/curves/timeline.html","docs/evidence/P12/capacity/lock-cost-20261008/after/environment.json","docs/evidence/P12/capacity/lock-cost-20261008/after/hash.json","docs/evidence/P12/capacity/lock-cost-20261008/after/jvm-worker.jsonl","docs/evidence/P12/capacity/lock-cost-20261008/after/mixed-1000-short-metrics.json","docs/evidence/P12/capacity/lock-cost-20261008/after/mixed-1000-short-samples.jsonl.gz","docs/evidence/P12/capacity/lock-cost-20261008/after/mixed-1000-short-summary.json","docs/evidence/P12/capacity/lock-cost-20261008/after/plan.json","docs/evidence/P12/capacity/lock-cost-20261008/after/preparation.json","docs/evidence/P12/capacity/lock-cost-20261008/after/profile-0.json","docs/evidence/P12/capacity/lock-cost-20261008/after/profile-1.json","docs/evidence/P12/capacity/lock-cost-20261008/after/progress.json","docs/evidence/P12/capacity/lock-cost-20261008/after/report-with-warmup.json","docs/evidence/P12/capacity/lock-cost-20261008/after/report.json","docs/evidence/P12/capacity/lock-cost-20261008/after/resources.jsonl","docs/evidence/P12/capacity/lock-cost-20261008/after/round.json","docs/evidence/P12/capacity/lock-cost-20261008/after/smoke.json","docs/evidence/P12/capacity/lock-cost-20261008/after/tool-build.json","docs/evidence/P12/capacity/lock-cost-20261008/artifact-comparison.json","docs/evidence/P12/capacity/lock-cost-20261008/authentication-options.md","docs/evidence/P12/capacity/lock-cost-20261008/baseline/catalog-sessions.json","docs/evidence/P12/capacity/lock-cost-20261008/baseline/cleanup-environment.json","docs/evidence/P12/capacity/lock-cost-20261008/baseline/commands.jsonl","docs/evidence/P12/capacity/lock-cost-20261008/baseline/curves/timeline.csv","docs/evidence/P12/capacity/lock-cost-20261008/baseline/curves/timeline.html","docs/evidence/P12/capacity/lock-cost-20261008/baseline/digest-plans.json","docs/evidence/P12/capacity/lock-cost-20261008/baseline/environment.json","docs/evidence/P12/capacity/lock-cost-20261008/baseline/error-types.json","docs/evidence/P12/capacity/lock-cost-20261008/baseline/exceptions-0.json","docs/evidence/P12/capacity/lock-cost-20261008/baseline/exceptions-1.json","docs/evidence/P12/capacity/lock-cost-20261008/baseline/jvm-worker.jsonl","docs/evidence/P12/capacity/lock-cost-20261008/baseline/mixed-short-metrics.json","docs/evidence/P12/capacity/lock-cost-20261008/baseline/mixed-short-samples.jsonl.gz","docs/evidence/P12/capacity/lock-cost-20261008/baseline/mixed-short-summary.json","docs/evidence/P12/capacity/lock-cost-20261008/baseline/plan.json","docs/evidence/P12/capacity/lock-cost-20261008/baseline/preparation.json","docs/evidence/P12/capacity/lock-cost-20261008/baseline/progress.json","docs/evidence/P12/capacity/lock-cost-20261008/baseline/report-with-warmup.json","docs/evidence/P12/capacity/lock-cost-20261008/baseline/report.json","docs/evidence/P12/capacity/lock-cost-20261008/baseline/resources.jsonl","docs/evidence/P12/capacity/lock-cost-20261008/baseline/smoke.json","docs/evidence/P12/capacity/lock-cost-20261008/baseline/threads-1-0.json","docs/evidence/P12/capacity/lock-cost-20261008/baseline/threads-1-1.json","docs/evidence/P12/capacity/lock-cost-20261008/baseline/threads-2-0.json","docs/evidence/P12/capacity/lock-cost-20261008/baseline/threads-2-1.json","docs/evidence/P12/capacity/lock-cost-20261008/baseline/tool-build.json","docs/evidence/P12/capacity/lock-cost-20261008/baseline/tool-source.tar.gz","docs/evidence/P12/capacity/lock-cost-20261008/before/catalog-sessions.json","docs/evidence/P12/capacity/lock-cost-20261008/before/cleanup-environment.json","docs/evidence/P12/capacity/lock-cost-20261008/before/commands.jsonl","docs/evidence/P12/capacity/lock-cost-20261008/before/curves/timeline.csv","docs/evidence/P12/capacity/lock-cost-20261008/before/curves/timeline.html","docs/evidence/P12/capacity/lock-cost-20261008/before/environment.json","docs/evidence/P12/capacity/lock-cost-20261008/before/hash.json","docs/evidence/P12/capacity/lock-cost-20261008/before/jvm-worker.jsonl","docs/evidence/P12/capacity/lock-cost-20261008/before/mixed-1000-short-metrics.json","docs/evidence/P12/capacity/lock-cost-20261008/before/mixed-1000-short-samples.jsonl.gz","docs/evidence/P12/capacity/lock-cost-20261008/before/mixed-1000-short-summary.json","docs/evidence/P12/capacity/lock-cost-20261008/before/plan.json","docs/evidence/P12/capacity/lock-cost-20261008/before/preparation.json","docs/evidence/P12/capacity/lock-cost-20261008/before/profile-0.json","docs/evidence/P12/capacity/lock-cost-20261008/before/profile-1.json","docs/evidence/P12/capacity/lock-cost-20261008/before/progress.json","docs/evidence/P12/capacity/lock-cost-20261008/before/report-with-warmup.json","docs/evidence/P12/capacity/lock-cost-20261008/before/report.json","docs/evidence/P12/capacity/lock-cost-20261008/before/resources.jsonl","docs/evidence/P12/capacity/lock-cost-20261008/before/round.json","docs/evidence/P12/capacity/lock-cost-20261008/before/smoke.json","docs/evidence/P12/capacity/lock-cost-20261008/before/tool-build.json","docs/evidence/P12/capacity/lock-cost-20261008/candidate-overlay.tar.gz","docs/evidence/P12/capacity/lock-cost-20261008/cleanup-check-initial.json","docs/evidence/P12/capacity/lock-cost-20261008/cleanup.json","docs/evidence/P12/capacity/lock-cost-20261008/concurrency.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/background-exhaust/curves/timeline.csv","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/background-exhaust/curves/timeline.html","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/background-exhaust/low-exhaust-samples.jsonl.gz","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/background-exhaust/low-exhaust-summary.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/background-exhaust/plan.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/background-exhaust/progress.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/background-exhaust/report-with-warmup.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/background-exhaust/report.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/catalog-sessions.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/cleanup-environment.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/commands.jsonl","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/environment.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/exhaust-results/exhaust-prepare.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/exhaust-results/exhaust-recovery.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/exhaust-results/exhaust.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/exhaust-results/summary.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/jvm-worker.jsonl","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/preparation.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/repair-commands.jsonl","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/repair-progress.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/repair.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/smoke.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/tool-build.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-exhaust-final/tool-source.tar.gz","docs/evidence/P12/capacity/lock-cost-20261008/fault-overlap.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair-rationale.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/background-exhaust/curves/timeline.csv","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/background-exhaust/curves/timeline.html","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/background-exhaust/low-exhaust-samples.jsonl.gz","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/background-exhaust/low-exhaust-summary.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/background-exhaust/plan.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/background-exhaust/progress.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/background-exhaust/report-with-warmup.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/background-exhaust/report.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/background-notifications/curves/timeline.csv","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/background-notifications/curves/timeline.html","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/background-notifications/low-notifications-samples.jsonl.gz","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/background-notifications/low-notifications-summary.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/background-notifications/plan.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/background-notifications/progress.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/background-notifications/report-with-warmup.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/background-notifications/report.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/catalog-sessions.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/cleanup-environment.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/commands.jsonl","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/environment.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/exhaust-results/exhaust-prepare.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/exhaust-results/exhaust-recovery.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/exhaust-results/exhaust.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/exhaust-results/summary.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/jvm-worker.jsonl","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/notifications-results/NOTIFICATION_DELAY.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/notifications-results/NOTIFICATION_DUPLICATE.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/notifications-results/NOTIFICATION_FAIL.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/notifications-results/WORKER_PAUSE.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/notifications-results/summary.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/preparation.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/repair-commands.jsonl","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/repair-progress.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/repair.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/smoke.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/tool-build.json","docs/evidence/P12/capacity/lock-cost-20261008/fault-repair/tool-source.tar.gz","docs/evidence/P12/capacity/lock-cost-20261008/faults/background-results/curves/timeline.csv","docs/evidence/P12/capacity/lock-cost-20261008/faults/background-results/curves/timeline.html","docs/evidence/P12/capacity/lock-cost-20261008/faults/background-results/low-fault-background-samples.jsonl.gz","docs/evidence/P12/capacity/lock-cost-20261008/faults/background-results/low-fault-background-summary.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/background-results/plan.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/background-results/progress.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/background-results/report-with-warmup.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/background-results/report.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/catalog-sessions.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/cleanup-environment.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/commands.jsonl","docs/evidence/P12/capacity/lock-cost-20261008/faults/environment.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/fault-results/exhaust-prepare.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/fault-results/exhaust.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/fault-results/instance-prepare.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/fault-results/instance-recovery.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/fault-results/instance-unavailable.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/fault-results/postgres-prepare.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/fault-results/postgres-recovery.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/fault-results/postgres-unavailable.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/fault-results/redis-prepare.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/fault-results/redis-recovery.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/fault-results/redis-unavailable.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/fault-results/summary.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/fault-results/transaction-prepare.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/fault-results/transaction-recovery.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/fault-results/transaction.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/followup-commands.jsonl","docs/evidence/P12/capacity/lock-cost-20261008/faults/followup.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/jvm-worker.jsonl","docs/evidence/P12/capacity/lock-cost-20261008/faults/notification-results/NOTIFICATION_DELAY.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/notification-results/NOTIFICATION_DUPLICATE.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/notification-results/NOTIFICATION_FAIL.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/notification-results/WORKER_PAUSE.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/notification-results/summary.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/preparation.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/probes.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/smoke.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/tool-build.json","docs/evidence/P12/capacity/lock-cost-20261008/faults/tool-source.tar.gz","docs/evidence/P12/capacity/lock-cost-20261008/final-validation.json","docs/evidence/P12/capacity/lock-cost-20261008/followup-source.json","docs/evidence/P12/capacity/lock-cost-20261008/followup-source.tar.gz","docs/evidence/P12/capacity/lock-cost-20261008/full-tests.json","docs/evidence/P12/capacity/lock-cost-20261008/manifest.json","docs/evidence/P12/capacity/lock-cost-20261008/recompute-commands.jsonl","docs/evidence/P12/capacity/lock-cost-20261008/recompute-concurrency.py","docs/evidence/P12/capacity/lock-cost-20261008/recompute-results.py","docs/evidence/P12/capacity/lock-cost-20261008/sample-audit.json","docs/evidence/P12/capacity/lock-cost-20261008/secret-scan-initial.json","docs/evidence/P12/capacity/lock-cost-20261008/secret-scan.json","docs/evidence/P12/capacity/lock-cost-20261008/short-comparison.json","docs/evidence/P12/capacity/lock-cost-20261008/source-provenance.json","docs/evidence/P12/capacity/lock-cost-20261008/stability/catalog-sessions.json","docs/evidence/P12/capacity/lock-cost-20261008/stability/cleanup-environment.json","docs/evidence/P12/capacity/lock-cost-20261008/stability/commands.jsonl","docs/evidence/P12/capacity/lock-cost-20261008/stability/curves/timeline.csv","docs/evidence/P12/capacity/lock-cost-20261008/stability/curves/timeline.html","docs/evidence/P12/capacity/lock-cost-20261008/stability/environment.json","docs/evidence/P12/capacity/lock-cost-20261008/stability/error-type-snapshot.json","docs/evidence/P12/capacity/lock-cost-20261008/stability/first-hour-resource-snapshot.json","docs/evidence/P12/capacity/lock-cost-20261008/stability/jvm-worker.jsonl","docs/evidence/P12/capacity/lock-cost-20261008/stability/mixed-low-2h-metrics.json","docs/evidence/P12/capacity/lock-cost-20261008/stability/mixed-low-2h-samples.jsonl.gz","docs/evidence/P12/capacity/lock-cost-20261008/stability/mixed-low-2h-summary.json","docs/evidence/P12/capacity/lock-cost-20261008/stability/plan.json","docs/evidence/P12/capacity/lock-cost-20261008/stability/preparation.json","docs/evidence/P12/capacity/lock-cost-20261008/stability/progress.json","docs/evidence/P12/capacity/lock-cost-20261008/stability/report-with-warmup.json","docs/evidence/P12/capacity/lock-cost-20261008/stability/report.json","docs/evidence/P12/capacity/lock-cost-20261008/stability/resources.jsonl","docs/evidence/P12/capacity/lock-cost-20261008/stability/round.json","docs/evidence/P12/capacity/lock-cost-20261008/stability/smoke.json","docs/evidence/P12/capacity/lock-cost-20261008/stability/tool-build.json","docs/evidence/P12/capacity/lock-cost-20261008/statistics-validation.json","docs/evidence/P12/capacity/lock-cost-20261008/targeted-repair-failures.json","docs/evidence/P12/capacity/lock-cost-20261008/targeted-tests-initial.json","docs/evidence/P12/capacity/lock-cost-20261008/tool-source.tar.gz","docs/evidence/P12/capacity/lock-cost-20261008/validation-commands.jsonl"],"removed":[],"modified":["docs/02-IAM开发计划.md","docs/evidence/P12/capacity/README.md","docs/evidence/P12/capacity/closure.json","docs/tasks/P12-capacity-T02.md","docs/tasks/P12-capacity-T03.md","docs/tasks/P12-capacity-T04.md","docs/tasks/P12-capacity-T05.md","docs/tasks/P12-capacity-T06.md"]}],"total_commits":0,"head_commit":{"id":"958ef4eaa9c5c873973a94474f7ffb6ab9c16cd2","message":"fix(mfa): 限制初始管理员凭据并原子完成首次开通\n\n初始管理员密码原先没有有效期，首次绑定后仍可作为长期密码使用。增加固定开通期限并要求绑定时设置正式密码，保留现有 MFA 安全机制。\n\n实现内容：\n- V24 增加初始凭据截止和完成标记，固定 24 小时有效，受限会话仍最多 300 秒且不能越过开户期限\n- 正式密码替换、TOTP 消费、因素绑定、恢复码生成及审计原子提交，撤销旧身份并创建新会话\n- 处理并发开通的浏览器会话清理，仅续办当前浏览器的有效 OIDC 交易且不延长交易期限\n- 增加离线重新签发命令和私密交付流程，禁止用于已绑定账号；前端仍要求确认保存恢复码\n- 补充开通、迁移、并发、事务回滚、前端和交付脚本测试，同步账号与 MFA 合同\n\n验证：\n- Maven 定向 verify：BootstrapEnrollmentIT 10 项、AccountsIT 15 项、MfaIT 34 项、TotpTest 3 项通过\n- AttackProtectionIT 12 项、SessionLifecycleIT 26 项、AuthorizationIT 26 项、BrowserSecurityIT 5 项通过\n- 初始凭据及三类 MFA 迁移测试各 1 项通过；AuthorizationMigrationIT 修正旧版本断言后 3 项通过\n- npm run check：21 个文件 173 项测试以及格式、lint、类型检查、构建通过\n- python3 deploy/lab/test-bootstrap.py：3 项通过\n- Maven console profile package 通过，最终 JAR 的前端资源和 V24 迁移与工作区一致\n- 后端全量测试及本阶段真实浏览器验收未运行\n\nBREAKING CHANGE: 需执行 V24 并同步升级前后端；历史未绑定初始管理员必须离线重新签发，初始开通确认接口新增必填 new_password，旧实例不能混跑\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/958ef4eaa9c5c873973a94474f7ffb6ab9c16cd2","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-09T18:38:18+08:00","added":["deploy/lab/test-bootstrap.py","iam-server/src/main/resources/db/migration/V24__bootstrap_credential_lifecycle.sql","iam-server/src/test/java/com/iam/server/data/BootstrapCredentialMigrationIT.java","iam-server/src/test/java/com/iam/server/protocol/BootstrapEnrollmentIT.java","iam-server/src/test/java/com/iam/server/protocol/TestAdministrator.java"],"removed":[],"modified":["deploy/lab/lab.py","docs/accounts.md","docs/mfa.md","iam-admin-web/src/pages/MfaPage.tsx","iam-admin-web/src/test/mfa.test.tsx","iam-server/src/main/java/com/iam/server/IamApplication.java","iam-server/src/main/java/com/iam/server/accounts/AccountService.java","iam-server/src/main/java/com/iam/server/accounts/AccountStore.java","iam-server/src/main/java/com/iam/server/accounts/BootstrapCli.java","iam-server/src/main/java/com/iam/server/accounts/BootstrapService.java","iam-server/src/main/java/com/iam/server/protocol/MfaService.java","iam-server/src/main/java/com/iam/server/protocol/ProtocolConfiguration.java","iam-server/src/main/java/com/iam/server/protocol/SessionLifecycle.java","iam-server/src/main/java/com/iam/server/web/MfaController.java","iam-server/src/test/java/com/iam/server/accounts/AccountsIT.java","iam-server/src/test/java/com/iam/server/data/AuthorizationMigrationIT.java","iam-server/src/test/java/com/iam/server/protocol/AuthorizationIT.java","iam-server/src/test/java/com/iam/server/protocol/MfaHttpClient.java","iam-server/src/test/java/com/iam/server/protocol/P08Environment.java","iam-server/src/test/java/com/iam/server/protocol/ProtocolFixture.java","scripts/bootstrap-admin.py"]},"repository":{"id":125,"owner":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"228834386@qq.com","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"},"name":"IAM","full_name":"pengzhiyu/IAM","description":"Identity and Access Management(身份识别与访问管理)","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":27,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/pengzhiyu/IAM/languages","html_url":"https://gitea.g-hi.com/pengzhiyu/IAM","url":"https://gitea.g-hi.com/api/v1/repos/pengzhiyu/IAM","link":"","ssh_url":"git@gitea.g-hi.com:pengzhiyu/IAM.git","clone_url":"https://gitea.g-hi.com/pengzhiyu/IAM.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":1,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-10-08T17:04:24+08:00","updated_at":"2026-10-10T13:44:43+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"16+pengzhiyu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"},"sender":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"16+pengzhiyu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"}}...
|
push
|
2
|
4
|
1791611084
|
1791611175
|
0
|
1791611083
|
1791611175
|
|
|
0
|
Edit
Delete
|
|
25368
|
perf: 优化客户端凭据校验与授权查询并补充容量观测
|
125
|
16
|
verify.yml
|
2
|
16
|
0
|
refs/heads/main
|
06556f73ea74b431979b8b819de8e85358843b49
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"958ef4eaa9c5c873973a94474f7ffb6ab9c16cd2","after":"06556f73ea74b431979b8b819de8e85358843b49","compare_url":"https://gitea.g-hi.com/pengzhiyu/IAM/compare/958ef4eaa9c5c873973a94474f7ffb6ab9c16cd2...06556f73ea74b431979b8b819de8e85358843b49","commits":[{"id":"06556f73ea74b431979b8b819de8e85358843b49","message":"perf: 优化客户端凭据校验与授权查询并补充容量观测\n\nP12 L1 尚未通过，先实现客户端校验、授权查询与观测工具的第一批调整，供另一台 JDK 25 设备编译回归后形成云端测试候选；本提交不代表性能验收通过。\n\n实现内容：\n- 新客户端秘密采用用途独立的版本化 HMAC-SHA256，兼容历史 BCrypt12；通过 V25 显式激活密钥权威并守卫凭据写入\n- 增加普通客户端秘密轮换及认证换代复核，补充协议、密钥策略、部署辅助工具与测试源码\n- 通过 V26 缩小目标企业资格查询，批量计算组织范围，将本地缓存调整为有界 LRU\n- 增加认证、锁、缓存及连接池指标，补充 legacy/hmac/mixed 容量模式、Linux 临时路径与候选摘要核对\n- 更新部署说明和 P12 交接，明确另一设备先完成构建回归，随后再进行云端隔离性能测试\n\n验证：\n- google-java-format 1.35.0 --aosp --dry-run --set-exit-if-changed：51 个新增或修改 Java 文件通过\n- Python AST 解析：11 个新增或修改 Python 文件通过，仅语法检查，未导入或执行脚本\n- git diff --check：通过；新增文档相对文件链接检查通过\n- 当前默认 Java 21，按用户安排未运行 Maven/Spotless 全工程门禁、编译、测试、数据库迁移、容器或压测；须在 JDK 25 设备继续验收\n\nBREAKING CHANGE: 启动前必须准备 IAM_CLIENT_SECRET_KEY_RING_FILE 并以迁移身份显式激活权威集合；写入 HMAC 凭据后不支持直接回退旧二进制\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/06556f73ea74b431979b8b819de8e85358843b49","author":{"name":"starry","email":"228834386@qq.com","username":"pengzhiyu"},"committer":{"name":"starry","email":"228834386@qq.com","username":"pengzhiyu"},"verification":null,"timestamp":"2026-10-10T17:56:32+08:00","added":["deploy/lab/test-client-secret.py","docs/client-secret-verification.md","docs/handoff/P12-client-secret-rotation-frontend.md","docs/tasks/P12-software-optimization.md","iam-server/src/main/java/com/iam/server/data/LifecycleLockMetrics.java","iam-server/src/main/java/com/iam/server/security/ClientSecretPolicy.java","iam-server/src/main/java/com/iam/server/security/ClientSecretVerifier.java","iam-server/src/main/resources/db/migration/V25__client_secret_hmac.sql","iam-server/src/main/resources/db/migration/V26__targeted_membership_lookup.sql","iam-server/src/test/java/com/iam/server/accounts/ScopeServiceTest.java","iam-server/src/test/java/com/iam/server/authorization/DecisionCacheTest.java","iam-server/src/test/java/com/iam/server/data/LifecycleLockMetricsTest.java","iam-server/src/test/java/com/iam/server/data/TargetedMembershipMigrationIT.java","iam-server/src/test/java/com/iam/server/protocol/CapacityCredentials.java","iam-server/src/test/java/com/iam/server/protocol/CapacityMeters.java","iam-server/src/test/java/com/iam/server/protocol/ClientSecretPolicyIT.java","iam-server/src/test/java/com/iam/server/protocol/ClientSecretRotationIT.java","iam-server/src/test/java/com/iam/server/security/ClientSecretVerifierTest.java","scripts/client-secret-policy.py"],"removed":[],"modified":[".gitignore","deploy/lab/compose.yml","deploy/lab/key-manifest.py","deploy/lab/lab.py","deploy/lab/test-key-manifest.py","docs/02-IAM开发计划.md","docs/accounts.md","docs/deployment-lab.md","docs/machine-tokens.md","docs/oidc.md","iam-server/src/main/java/com/iam/server/IamApplication.java","iam-server/src/main/java/com/iam/server/accounts/AccountConfiguration.java","iam-server/src/main/java/com/iam/server/accounts/AccountStore.java","iam-server/src/main/java/com/iam/server/accounts/ApplicationRegistry.java","iam-server/src/main/java/com/iam/server/accounts/Authorizer.java","iam-server/src/main/java/com/iam/server/accounts/MachineClientService.java","iam-server/src/main/java/com/iam/server/accounts/ScopeService.java","iam-server/src/main/java/com/iam/server/authorization/DecisionCache.java","iam-server/src/main/java/com/iam/server/protocol/InternalProtocolFilter.java","iam-server/src/main/java/com/iam/server/protocol/LocalKeyInitializer.java","iam-server/src/main/java/com/iam/server/protocol/MachineSecretAuthenticationProvider.java","iam-server/src/main/java/com/iam/server/protocol/ProtectedClientProvider.java","iam-server/src/main/java/com/iam/server/protocol/ProtocolConfiguration.java","iam-server/src/main/java/com/iam/server/protocol/ProtocolStore.java","iam-server/src/main/java/com/iam/server/protocol/TransactionalProvider.java","iam-server/src/main/java/com/iam/server/security/DecisionConfiguration.java","iam-server/src/main/java/com/iam/server/security/SecurityConfiguration.java","iam-server/src/main/java/com/iam/server/web/ApplicationController.java","iam-server/src/main/resources/application-local.yml","iam-server/src/main/resources/application.yml","iam-server/src/test/java/com/iam/server/BaselineIT.java","iam-server/src/test/java/com/iam/server/data/AuthorizationMigrationIT.java","iam-server/src/test/java/com/iam/server/data/CapacityCatalogIT.java","iam-server/src/test/java/com/iam/server/data/DisplayNameMigrationIT.java","iam-server/src/test/java/com/iam/server/data/MigrationIT.java","iam-server/src/test/java/com/iam/server/protocol/ApplicationLifecycleIT.java","iam-server/src/test/java/com/iam/server/protocol/ApplicationLifecycleUpgradeIT.java","iam-server/src/test/java/com/iam/server/protocol/CapacityDiagnostics.java","iam-server/src/test/java/com/iam/server/protocol/CapacityDriver.java","iam-server/src/test/java/com/iam/server/protocol/CapacityDriverTest.java","iam-server/src/test/java/com/iam/server/protocol/CapacityObserver.java","iam-server/src/test/java/com/iam/server/protocol/CapacityProbe.java","iam-server/src/test/java/com/iam/server/protocol/CapacitySeed.java","iam-server/src/test/java/com/iam/server/protocol/DataScopeIT.java","iam-server/src/test/java/com/iam/server/protocol/MachineCredentialUpgradeIT.java","iam-server/src/test/java/com/iam/server/protocol/MachineCredentialsIT.java","iam-server/src/test/java/com/iam/server/protocol/MachineResourceIT.java","iam-server/src/test/java/com/iam/server/protocol/MachineTaskIT.java","iam-server/src/test/java/com/iam/server/protocol/P08Environment.java","iam-server/src/test/java/com/iam/server/protocol/ProtocolFixture.java","iam-server/src/test/java/com/iam/server/protocol/ProtocolTestKeys.java","scripts/capacity/README.md","scripts/capacity/catalog.sql","scripts/capacity/environment.py","scripts/capacity/http_report.py","scripts/capacity/metrics_report.py","scripts/capacity/policies/L1.properties","scripts/capacity/prepare.py","scripts/capacity/round.py","scripts/capacity/test_tools.py"]}],"total_commits":0,"head_commit":{"id":"06556f73ea74b431979b8b819de8e85358843b49","message":"perf: 优化客户端凭据校验与授权查询并补充容量观测\n\nP12 L1 尚未通过，先实现客户端校验、授权查询与观测工具的第一批调整，供另一台 JDK 25 设备编译回归后形成云端测试候选；本提交不代表性能验收通过。\n\n实现内容：\n- 新客户端秘密采用用途独立的版本化 HMAC-SHA256，兼容历史 BCrypt12；通过 V25 显式激活密钥权威并守卫凭据写入\n- 增加普通客户端秘密轮换及认证换代复核，补充协议、密钥策略、部署辅助工具与测试源码\n- 通过 V26 缩小目标企业资格查询，批量计算组织范围，将本地缓存调整为有界 LRU\n- 增加认证、锁、缓存及连接池指标，补充 legacy/hmac/mixed 容量模式、Linux 临时路径与候选摘要核对\n- 更新部署说明和 P12 交接，明确另一设备先完成构建回归，随后再进行云端隔离性能测试\n\n验证：\n- google-java-format 1.35.0 --aosp --dry-run --set-exit-if-changed：51 个新增或修改 Java 文件通过\n- Python AST 解析：11 个新增或修改 Python 文件通过，仅语法检查，未导入或执行脚本\n- git diff --check：通过；新增文档相对文件链接检查通过\n- 当前默认 Java 21，按用户安排未运行 Maven/Spotless 全工程门禁、编译、测试、数据库迁移、容器或压测；须在 JDK 25 设备继续验收\n\nBREAKING CHANGE: 启动前必须准备 IAM_CLIENT_SECRET_KEY_RING_FILE 并以迁移身份显式激活权威集合；写入 HMAC 凭据后不支持直接回退旧二进制\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/06556f73ea74b431979b8b819de8e85358843b49","author":{"name":"starry","email":"228834386@qq.com","username":"pengzhiyu"},"committer":{"name":"starry","email":"228834386@qq.com","username":"pengzhiyu"},"verification":null,"timestamp":"2026-10-10T17:56:32+08:00","added":["deploy/lab/test-client-secret.py","docs/client-secret-verification.md","docs/handoff/P12-client-secret-rotation-frontend.md","docs/tasks/P12-software-optimization.md","iam-server/src/main/java/com/iam/server/data/LifecycleLockMetrics.java","iam-server/src/main/java/com/iam/server/security/ClientSecretPolicy.java","iam-server/src/main/java/com/iam/server/security/ClientSecretVerifier.java","iam-server/src/main/resources/db/migration/V25__client_secret_hmac.sql","iam-server/src/main/resources/db/migration/V26__targeted_membership_lookup.sql","iam-server/src/test/java/com/iam/server/accounts/ScopeServiceTest.java","iam-server/src/test/java/com/iam/server/authorization/DecisionCacheTest.java","iam-server/src/test/java/com/iam/server/data/LifecycleLockMetricsTest.java","iam-server/src/test/java/com/iam/server/data/TargetedMembershipMigrationIT.java","iam-server/src/test/java/com/iam/server/protocol/CapacityCredentials.java","iam-server/src/test/java/com/iam/server/protocol/CapacityMeters.java","iam-server/src/test/java/com/iam/server/protocol/ClientSecretPolicyIT.java","iam-server/src/test/java/com/iam/server/protocol/ClientSecretRotationIT.java","iam-server/src/test/java/com/iam/server/security/ClientSecretVerifierTest.java","scripts/client-secret-policy.py"],"removed":[],"modified":[".gitignore","deploy/lab/compose.yml","deploy/lab/key-manifest.py","deploy/lab/lab.py","deploy/lab/test-key-manifest.py","docs/02-IAM开发计划.md","docs/accounts.md","docs/deployment-lab.md","docs/machine-tokens.md","docs/oidc.md","iam-server/src/main/java/com/iam/server/IamApplication.java","iam-server/src/main/java/com/iam/server/accounts/AccountConfiguration.java","iam-server/src/main/java/com/iam/server/accounts/AccountStore.java","iam-server/src/main/java/com/iam/server/accounts/ApplicationRegistry.java","iam-server/src/main/java/com/iam/server/accounts/Authorizer.java","iam-server/src/main/java/com/iam/server/accounts/MachineClientService.java","iam-server/src/main/java/com/iam/server/accounts/ScopeService.java","iam-server/src/main/java/com/iam/server/authorization/DecisionCache.java","iam-server/src/main/java/com/iam/server/protocol/InternalProtocolFilter.java","iam-server/src/main/java/com/iam/server/protocol/LocalKeyInitializer.java","iam-server/src/main/java/com/iam/server/protocol/MachineSecretAuthenticationProvider.java","iam-server/src/main/java/com/iam/server/protocol/ProtectedClientProvider.java","iam-server/src/main/java/com/iam/server/protocol/ProtocolConfiguration.java","iam-server/src/main/java/com/iam/server/protocol/ProtocolStore.java","iam-server/src/main/java/com/iam/server/protocol/TransactionalProvider.java","iam-server/src/main/java/com/iam/server/security/DecisionConfiguration.java","iam-server/src/main/java/com/iam/server/security/SecurityConfiguration.java","iam-server/src/main/java/com/iam/server/web/ApplicationController.java","iam-server/src/main/resources/application-local.yml","iam-server/src/main/resources/application.yml","iam-server/src/test/java/com/iam/server/BaselineIT.java","iam-server/src/test/java/com/iam/server/data/AuthorizationMigrationIT.java","iam-server/src/test/java/com/iam/server/data/CapacityCatalogIT.java","iam-server/src/test/java/com/iam/server/data/DisplayNameMigrationIT.java","iam-server/src/test/java/com/iam/server/data/MigrationIT.java","iam-server/src/test/java/com/iam/server/protocol/ApplicationLifecycleIT.java","iam-server/src/test/java/com/iam/server/protocol/ApplicationLifecycleUpgradeIT.java","iam-server/src/test/java/com/iam/server/protocol/CapacityDiagnostics.java","iam-server/src/test/java/com/iam/server/protocol/CapacityDriver.java","iam-server/src/test/java/com/iam/server/protocol/CapacityDriverTest.java","iam-server/src/test/java/com/iam/server/protocol/CapacityObserver.java","iam-server/src/test/java/com/iam/server/protocol/CapacityProbe.java","iam-server/src/test/java/com/iam/server/protocol/CapacitySeed.java","iam-server/src/test/java/com/iam/server/protocol/DataScopeIT.java","iam-server/src/test/java/com/iam/server/protocol/MachineCredentialUpgradeIT.java","iam-server/src/test/java/com/iam/server/protocol/MachineCredentialsIT.java","iam-server/src/test/java/com/iam/server/protocol/MachineResourceIT.java","iam-server/src/test/java/com/iam/server/protocol/MachineTaskIT.java","iam-server/src/test/java/com/iam/server/protocol/P08Environment.java","iam-server/src/test/java/com/iam/server/protocol/ProtocolFixture.java","iam-server/src/test/java/com/iam/server/protocol/ProtocolTestKeys.java","scripts/capacity/README.md","scripts/capacity/catalog.sql","scripts/capacity/environment.py","scripts/capacity/http_report.py","scripts/capacity/metrics_report.py","scripts/capacity/policies/L1.properties","scripts/capacity/prepare.py","scripts/capacity/round.py","scripts/capacity/test_tools.py"]},"repository":{"id":125,"owner":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"228834386@qq.com","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"},"name":"IAM","full_name":"pengzhiyu/IAM","description":"Identity and Access Management(身份识别与访问管理)","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":99286,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/pengzhiyu/IAM/languages","html_url":"https://gitea.g-hi.com/pengzhiyu/IAM","url":"https://gitea.g-hi.com/api/v1/repos/pengzhiyu/IAM","link":"","ssh_url":"git@gitea.g-hi.com:pengzhiyu/IAM.git","clone_url":"https://gitea.g-hi.com/pengzhiyu/IAM.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":1,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-10-08T17:04:24+08:00","updated_at":"2026-10-10T13:44:43+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"16+pengzhiyu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"},"sender":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"16+pengzhiyu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"}}...
|
push
|
3
|
4
|
1791627069
|
1791628278
|
0
|
1791626275
|
1791628278
|
|
|
0
|
Edit
Delete
|
|
25576
|
test: 修复集成测试应用的关闭顺序
|
125
|
16
|
verify.yml
|
3
|
16
|
0
|
refs/heads/main
|
4bda2cc02706e1c64d5cd23c233673a0b32d0a72
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"06556f73ea74b431979b8b819de8e85358843b49","after":"4bda2cc02706e1c64d5cd23c233673a0b32d0a72","compare_url":"https://gitea.g-hi.com/pengzhiyu/IAM/compare/06556f73ea74b431979b8b819de8e85358843b49...4bda2cc02706e1c64d5cd23c233673a0b32d0a72","commits":[{"id":"4bda2cc02706e1c64d5cd23c233673a0b32d0a72","message":"test: 修复集成测试应用的关闭顺序\n\n测试类的临时数据库和 Redis 会先于缓存中的应用回收，后台任务可能继续访问已回收资源。\n\n实现内容：\n- 为 BaselineIT 和 AccountsIT 声明 AFTER_CLASS 关闭并接入测试探针\n- 在容器仍存活时核对连接池、Redis、调度任务及所属执行器结束状态\n- 增加正常、异常回调及未关闭资源反例，保留原故障恢复和安全断言\n- 记录本地归因、首次失败、最终定向结果与完整检查的启动阻塞\n\n验证：\n- Java 25 离线 test-compile（含 Spotless）通过\n- 最终定向 29 项及 Baseline 独立最后应用 7 项通过\n- 完整 clean verify：169 项单测通过；集成 422 项通过、1 项启动错误、74 项跳过\n- ProtocolConsistencyIT 第二个应用因端口绑定失败启动不成功，占用者尚未确证；完整门禁未通过，未重跑\n- F0 36 场景全部拒绝，消费、新凭据和刷新成功事件为零\n- git diff --check 和 37 个文档相对链接/锚点检查通过\n\n仅修改测试及任务文档；不改变产品合同，不作为候选冻结或性能验收通过的证明。\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/4bda2cc02706e1c64d5cd23c233673a0b32d0a72","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-11T08:50:19-07:00","added":["iam-server/src/test/java/com/iam/server/ContextLifecycleIT.java","iam-server/src/test/java/com/iam/server/TestContextShutdownProbe.java"],"removed":[],"modified":["docs/tasks/P12-auth-ingress-attribution-design.md","docs/tasks/P12-software-optimization.md","iam-server/src/test/java/com/iam/server/BaselineIT.java","iam-server/src/test/java/com/iam/server/accounts/AccountsIT.java"]},{"id":"b69ba6c8145d3b5bc8e67e37a9d2f26e8723222b","message":"feat(console): 合并控制台面向普通用户的文案改写\n\n控制台原先大量使用标识、版本、协议术语和后端状态原值，普通管理员难以理解。合并 feat/console-polish-next 分支，完成三个概览页重设计、导航改名，以及全部管理页面、个人中心、工作台与切换器的文案改写。\n\n实现内容：\n- 重新设计平台、企业、应用三个概览页，侧边栏模块按日常说法改名，并在 docs/console/design-system.md 记录新旧名称对照\n- 各管理页面改用日常说法，状态和角色显示中文，标识、版本、追踪编号收进默认收起的\"技术细节\"\n- 时间输入改用本地日期时间选择器，提交时仍为带时区的 ISO 时间；操作记录显示中文操作名称，并支持下拉筛选\n- \"秘密\"统一称\"密钥\"，\"机器客户端/服务主体\"称\"程序客户端/程序身份\"，\"IAM 会话\"称\"登录记录\"\n- 同步更新单元测试与验收脚本中的文案和定位，列表行增加 data-record-id 供脚本定位\n\n验证：\n- 分支上每批提交前运行 npm run check：format:check、lint、typecheck、build 通过，最后一次测试 203/203 通过\n- 各页面在浏览器中核对；程序接入详情、程序身份详情与启用新应用弹窗因演示环境缺数据或登录过期未核对\n- 验收脚本仅执行 node --check，未实际运行\n- 合并无冲突，main 上未单独重新运行检查\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/b69ba6c8145d3b5bc8e67e37a9d2f26e8723222b","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-11T08:34:48-07:00","added":["iam-admin-web/src/lib/audit-actions.ts","iam-admin-web/src/pages/AppOverview.tsx","iam-admin-web/src/pages/PlatformOverview.tsx","iam-admin-web/src/pages/TenantOverview.tsx","iam-admin-web/src/test/app-overview.test.tsx","iam-admin-web/src/test/platform-overview.test.tsx","iam-admin-web/src/test/tenant-overview.test.tsx"],"removed":[],"modified":["docs/console/design-system.md","iam-admin-web/scripts/acceptance-group-lifecycle.mjs","iam-admin-web/scripts/acceptance-p10-t01.mjs","iam-admin-web/scripts/acceptance-p10-t02.mjs","iam-admin-web/scripts/acceptance-p10-t03.mjs","iam-admin-web/scripts/acceptance-p10-t04.mjs","iam-admin-web/scripts/acceptance-p11-t04.mjs","iam-admin-web/scripts/acceptance-p11-t05.mjs","iam-admin-web/scripts/acceptance-p11-t07.mjs","iam-admin-web/scripts/acceptance-t02.mjs","iam-admin-web/scripts/acceptance-t03.mjs","iam-admin-web/scripts/acceptance-t04.mjs","iam-admin-web/scripts/acceptance-t05.mjs","iam-admin-web/scripts/acceptance-t06.mjs","iam-admin-web/scripts/acceptance.mjs","iam-admin-web/src/App.tsx","iam-admin-web/src/components/Layout.tsx","iam-admin-web/src/components/Management.tsx","iam-admin-web/src/data/pages.ts","iam-admin-web/src/lib/roles.ts","iam-admin-web/src/lib/t02-api.ts","iam-admin-web/src/lib/t04-api.ts","iam-admin-web/src/pages/EmailRecoveryPage.tsx","iam-admin-web/src/pages/HomePage.tsx","iam-admin-web/src/pages/PersonalPage.tsx","iam-admin-web/src/pages/ScopePages.tsx","iam-admin-web/src/pages/management/ApplicationAdmissionPage.tsx","iam-admin-web/src/pages/management/ApplicationContracts.tsx","iam-admin-web/src/pages/management/ApplicationLifecycle.tsx","iam-admin-web/src/pages/management/ApplicationShared.tsx","iam-admin-web/src/pages/management/ApplicationsPage.tsx","iam-admin-web/src/pages/management/AuditPage.tsx","iam-admin-web/src/pages/management/AuthorizationGuard.tsx","iam-admin-web/src/pages/management/AuthorizationShared.tsx","iam-admin-web/src/pages/management/BindingScopes.tsx","iam-admin-web/src/pages/management/BindingsPage.tsx","iam-admin-web/src/pages/management/DecisionCallersPage.tsx","iam-admin-web/src/pages/management/GroupsPage.tsx","iam-admin-web/src/pages/management/MachineClientsPage.tsx","iam-admin-web/src/pages/management/MachineContract.tsx","iam-admin-web/src/pages/management/MachineCredentials.tsx","iam-admin-web/src/pages/management/MembersPage.tsx","iam-admin-web/src/pages/management/OrganizationsPage.tsx","iam-admin-web/src/pages/management/PlatformPages.tsx","iam-admin-web/src/pages/management/RolesPage.tsx","iam-admin-web/src/pages/management/ServicePrincipalsPage.tsx","iam-admin-web/src/shell/ContextSwitcher.tsx","iam-admin-web/src/shell/ContextTrail.tsx","iam-admin-web/src/shell/NavRail.tsx","iam-admin-web/src/styles/components.css","iam-admin-web/src/styles/pages.css","iam-admin-web/src/test/application-lifecycle.test.tsx","iam-admin-web/src/test/application-management.test.tsx","iam-admin-web/src/test/audit.test.tsx","iam-admin-web/src/test/authorization-management.test.tsx","iam-admin-web/src/test/group-editor.test.tsx","iam-admin-web/src/test/machine-clients.test.tsx","iam-admin-web/src/test/machine-credentials.test.tsx","iam-admin-web/src/test/management-integration.test.tsx","iam-admin-web/src/test/personal.test.tsx","iam-admin-web/src/test/service-principals.test.tsx","iam-admin-web/src/test/sidebar.test.tsx"]},{"id":"9339f14f94e988b7a3d898f11daa506446d75c44","message":"feat(console): 改写工作台与企业切换器文案\n\n工作台和顶部切换器仍使用\"管理上下文\"\"平台总入口仅限平台管理员\"\"全员准入\"\"企业已启用/应用正常\"双徽标等说法，工作台还直接展示账号标识。改为日常说法，并与应用开通页的\"使用情况\"保持一致。\n\n实现内容：\n- 工作台说明改为说明顶部一直显示正在管理的企业和应用；平台入口锁定提示改为\"只有平台管理员可以进入\"，应用管理员入口改为\"进入应用接入\"\n- 右侧卡片改为\"我的账号\"，显示名字、平台管理身份、登录方式与\"这台电脑保存了什么\"，账号标识收进技术细节\n- 切换器标题改为\"切换企业或应用\"并改写说明；企业列表去掉恒为真的\"企业正常\"徽标，非正常状态显示中文状态\n- 应用列表改为\"应用（可选）\"，用 appUsage 的单个\"使用情况\"徽标替代企业关系与全局状态两个徽标，可进入的应用显示\"所有成员可用/仅指定成员可用\"；空状态、无权限与停用说明改写\n- 顶部路径的\"未选择管理上下文\"改为\"未选择企业\"，相关 aria-label 同步改写\n- 平台与应用无法进入时的说明改为日常说法，应用停用原因复用 appUsage\n- 删除已无引用的 relationLabel、applicationStatusLabel、accessPolicyLabel\n- 同步更新 acceptance.mjs 中切换器标题、应用分组、停用说明与无权限提示的定位\n\n验证：\n- npm run check：format:check、lint、typecheck、build 通过，测试 203/203 通过\n- 浏览器核对工作台与切换器（选择企业后未进入）\n- 验收脚本仅执行 node --check，未实际运行\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/9339f14f94e988b7a3d898f11daa506446d75c44","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-11T08:27:50-07:00","added":[],"removed":[],"modified":["iam-admin-web/scripts/acceptance.mjs","iam-admin-web/src/lib/roles.ts","iam-admin-web/src/pages/HomePage.tsx","iam-admin-web/src/pages/ScopePages.tsx","iam-admin-web/src/shell/ContextSwitcher.tsx","iam-admin-web/src/shell/ContextTrail.tsx"]},{"id":"74debf18dda59db91112b09eb5a93214a0e18c52","message":"feat(console): 改写个人中心文案并把会话称为登录记录\n\n个人中心原先使用\"IAM 会话\"\"最近协议活动\"\"绝对截止\"\"期限类别\"\"管理上下文\"等术语，每条会话都重复一段说明并直接展示编号。改为\"登录记录\"等日常说法，编号收进技术细节。\n\n实现内容：\n- \"IAM 登录会话\"改为\"登录记录\"，状态改为登录中/已过期/已退出/已失效；时间字段改为登录时间、最近使用、一直不用时自动退出于、最晚退出时间、登录有效期\n- 每条记录重复的说明合并到卡片说明中；登录编号收进技术细节；按钮改为\"退出当前登录\"\"退出这次登录\"\"确认退出\"\"刷新登录记录\"\n- 退出确认与成功提示改为\"登录\"说法，冲突与无权提示改写\n- \"我的身份\"改为\"我的账号\"，显示名字与平台管理身份，账号标识收进技术细节；\"我的企业\"去掉恒为真的\"企业正常/有效成员\"徽标与成员标识，改为\"你的身份：所有者/普通成员\"，按钮改为\"切换企业\"\n- 底部说明改为\"切换企业与退出登录有什么区别\"\n- 邮箱卡片中\"无法恢复丢失的全部 MFA 因素\"改为日常说明\n- 操作记录中的\"两步验证\"统一为与多因素验证页面一致的\"多因素验证\"\n- 同步更新 personal 测试与 acceptance-t05、acceptance-p11-t04/t05/t07 的按钮与标题定位（示例应用自身的\"退出当前 IAM 会话\"按钮未改）\n\n验证：\n- npm run check：format:check、lint、typecheck、build 通过，测试 203/203 通过\n- 浏览器核对个人中心各卡片与登录记录（未执行退出）\n- 验收脚本仅执行 node --check，未实际运行\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/74debf18dda59db91112b09eb5a93214a0e18c52","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-11T08:25:43-07:00","added":[],"removed":[],"modified":["iam-admin-web/scripts/acceptance-p11-t04.mjs","iam-admin-web/scripts/acceptance-p11-t05.mjs","iam-admin-web/scripts/acceptance-p11-t07.mjs","iam-admin-web/scripts/acceptance-t05.mjs","iam-admin-web/src/lib/audit-actions.ts","iam-admin-web/src/pages/EmailRecoveryPage.tsx","iam-admin-web/src/pages/PersonalPage.tsx","iam-admin-web/src/test/personal.test.tsx"]},{"id":"546f7184ef08dfa32fbd7610c8152fa6856d9ee4","message":"style(console): 格式化程序身份验收脚本中的负责人失效断言\n\n上一提交在运行 Prettier 之后又修改了 acceptance-p10-t01.mjs 的一行断言，导致该文件不符合 npm run format:check。\n\n实现内容：\n- 按 Prettier 规则折行负责人失效断言，不改变断言内容\n\n验证：\n- npx prettier --check scripts/acceptance-p10-t01.mjs：通过\n- node --check scripts/acceptance-p10-t01.mjs：通过；脚本未实际运行\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/546f7184ef08dfa32fbd7610c8152fa6856d9ee4","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-11T08:24:05-07:00","added":[],"removed":[],"modified":["iam-admin-web/scripts/acceptance-p10-t01.mjs"]}],"total_commits":0,"head_commit":{"id":"4bda2cc02706e1c64d5cd23c233673a0b32d0a72","message":"test: 修复集成测试应用的关闭顺序\n\n测试类的临时数据库和 Redis 会先于缓存中的应用回收，后台任务可能继续访问已回收资源。\n\n实现内容：\n- 为 BaselineIT 和 AccountsIT 声明 AFTER_CLASS 关闭并接入测试探针\n- 在容器仍存活时核对连接池、Redis、调度任务及所属执行器结束状态\n- 增加正常、异常回调及未关闭资源反例，保留原故障恢复和安全断言\n- 记录本地归因、首次失败、最终定向结果与完整检查的启动阻塞\n\n验证：\n- Java 25 离线 test-compile（含 Spotless）通过\n- 最终定向 29 项及 Baseline 独立最后应用 7 项通过\n- 完整 clean verify：169 项单测通过；集成 422 项通过、1 项启动错误、74 项跳过\n- ProtocolConsistencyIT 第二个应用因端口绑定失败启动不成功，占用者尚未确证；完整门禁未通过，未重跑\n- F0 36 场景全部拒绝，消费、新凭据和刷新成功事件为零\n- git diff --check 和 37 个文档相对链接/锚点检查通过\n\n仅修改测试及任务文档；不改变产品合同，不作为候选冻结或性能验收通过的证明。\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/4bda2cc02706e1c64d5cd23c233673a0b32d0a72","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-11T08:50:19-07:00","added":["iam-server/src/test/java/com/iam/server/ContextLifecycleIT.java","iam-server/src/test/java/com/iam/server/TestContextShutdownProbe.java"],"removed":[],"modified":["docs/tasks/P12-auth-ingress-attribution-design.md","docs/tasks/P12-software-optimization.md","iam-server/src/test/java/com/iam/server/BaselineIT.java","iam-server/src/test/java/com/iam/server/accounts/AccountsIT.java"]},"repository":{"id":125,"owner":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"228834386@qq.com","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"},"name":"IAM","full_name":"pengzhiyu/IAM","description":"Identity and Access Management(身份识别与访问管理)","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":99686,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/pengzhiyu/IAM/languages","html_url":"https://gitea.g-hi.com/pengzhiyu/IAM","url":"https://gitea.g-hi.com/api/v1/repos/pengzhiyu/IAM","link":"","ssh_url":"git@gitea.g-hi.com:pengzhiyu/IAM.git","clone_url":"https://gitea.g-hi.com/pengzhiyu/IAM.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":1,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-10-08T17:04:24+08:00","updated_at":"2026-10-10T17:57:55+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"16+pengzhiyu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"},"sender":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"16+pengzhiyu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"}}...
|
push
|
2
|
4
|
1791733916
|
1791741278
|
0
|
1791733915
|
1791741278
|
|
|
0
|
Edit
Delete
|
|
25633
|
feat(console): 合并控制台逐页布局与样式改造
|
125
|
16
|
verify.yml
|
5
|
16
|
0
|
refs/heads/main
|
faac5481c1cca66e4708222686b6588a43938150
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"4bda2cc02706e1c64d5cd23c233673a0b32d0a72","after":"faac5481c1cca66e4708222686b6588a43938150","compare_url":"https://gitea.g-hi.com/pengzhiyu/IAM/compare/4bda2cc02706e1c64d5cd23c233673a0b32d0a72...faac5481c1cca66e4708222686b6588a43938150","commits":[{"id":"faac5481c1cca66e4708222686b6588a43938150","message":"feat(console): 合并控制台逐页布局与样式改造\n\n控制台各页面原先列表用「查看详情」按钮、详情是整张表单、弹窗操作区与空状态各不相同，常用信息和危险操作混在一起。合并 feat/console-layout 分支，按统一的列表、抽屉与弹窗约定逐页重排企业内、平台侧与应用内的管理页面。\n\n实现内容：\n- 列表统一为整行可点（OpenableRow 或同交互的专用行），名称为链接或按钮、末列右箭头，需要处理的状态用 cell-note 提示；空状态改为带图标、说明与操作的公共 EmptyList，无数据时不显示分页\n- 详情抽屉按「基本信息 / 业务分区 / 危险区」分区，修改就地展开且同一时间只进行一项；危险操作默认收起，展开后用单选卡片或确认勾选\n- 企业、应用接入改为带分区标签的详情页；新增只读组织架构图；成员、部门、用户组、所有账号、企业与平台管理员、应用开通、操作记录、权限清单、角色、角色分配、程序接入（密钥管理内嵌抽屉）与程序身份完成改造\n- 弹窗底部统一使用 FormActions「取消 + 主操作」，多步弹窗提供「重新选择」；权限统一以名称为主、代码为辅显示，勾选清单统一为带边框的列表\n- 同步更新各页面单元测试与相关验收脚本中的文案和定位\n\n验证：\n- 分支上每次提交前运行 npm run check：format:check、lint、typecheck、test、build 通过，最后一次 Vitest 26 个文件 223 项全部通过\n- 各页面在浏览器 1280 宽、375 窄屏及亮/暗色下核对；程序接入、程序身份等演示环境缺数据的页面以页面内临时改写接口响应检查，未提交写操作\n- 验收脚本仅执行 node --check，未实际运行\n- 合并无冲突，main 上未单独重新运行检查；平台权限查询接入、个人中心尚未改造\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/faac5481c1cca66e4708222686b6588a43938150","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-12T08:07:51-07:00","added":["iam-admin-web/src/pages/management/OrganizationChartPage.tsx","iam-admin-web/src/pages/management/PlatformTenantPage.tsx","iam-admin-web/src/test/organizations.test.tsx"],"removed":[],"modified":["iam-admin-web/scripts/acceptance-group-lifecycle.mjs","iam-admin-web/scripts/acceptance-p10-t01.mjs","iam-admin-web/scripts/acceptance-p10-t02.mjs","iam-admin-web/scripts/acceptance-p10-t03.mjs","iam-admin-web/scripts/acceptance-p10-t04.mjs","iam-admin-web/scripts/acceptance-t02.mjs","iam-admin-web/scripts/acceptance-t03.mjs","iam-admin-web/scripts/acceptance-t04.mjs","iam-admin-web/scripts/acceptance-t06.mjs","iam-admin-web/src/App.tsx","iam-admin-web/src/components/Management.tsx","iam-admin-web/src/lib/t04-api.ts","iam-admin-web/src/pages/management/ApplicationAdmissionPage.tsx","iam-admin-web/src/pages/management/ApplicationContracts.tsx","iam-admin-web/src/pages/management/ApplicationLifecycle.tsx","iam-admin-web/src/pages/management/ApplicationShared.tsx","iam-admin-web/src/pages/management/ApplicationsPage.tsx","iam-admin-web/src/pages/management/AuditPage.tsx","iam-admin-web/src/pages/management/AuthorizationShared.tsx","iam-admin-web/src/pages/management/BindingScopes.tsx","iam-admin-web/src/pages/management/BindingsPage.tsx","iam-admin-web/src/pages/management/GroupsPage.tsx","iam-admin-web/src/pages/management/MachineClientsPage.tsx","iam-admin-web/src/pages/management/MachineContract.tsx","iam-admin-web/src/pages/management/MachineCredentials.tsx","iam-admin-web/src/pages/management/MembersPage.tsx","iam-admin-web/src/pages/management/OrganizationsPage.tsx","iam-admin-web/src/pages/management/PlatformPages.tsx","iam-admin-web/src/pages/management/RolesPage.tsx","iam-admin-web/src/pages/management/ServicePrincipalsPage.tsx","iam-admin-web/src/styles/applications.css","iam-admin-web/src/styles/audit.css","iam-admin-web/src/styles/authorization.css","iam-admin-web/src/styles/management.css","iam-admin-web/src/test/application-lifecycle.test.tsx","iam-admin-web/src/test/application-management.test.tsx","iam-admin-web/src/test/audit.test.tsx","iam-admin-web/src/test/authorization-management.test.tsx","iam-admin-web/src/test/group-editor.test.tsx","iam-admin-web/src/test/group-lifecycle.test.tsx","iam-admin-web/src/test/machine-clients.test.tsx","iam-admin-web/src/test/machine-credentials.test.tsx","iam-admin-web/src/test/management-integration.test.tsx","iam-admin-web/src/test/service-principals.test.tsx"]},{"id":"3cf111b21a47760e5c71fc6b2fba96d882dbd3f1","message":"feat(console): 把程序身份详情改为分区抽屉并列出使用它的程序客户端\n\n程序身份详情是一张整体表单，改名、更换负责人和停用都要勾选确认并一起提交；负责人失效时改名会直接被后端拒绝，界面却没有提示；列表每行放「查看详情」按钮，页面顶部还有单独的说明框。按已定的列表与抽屉约定重排。\n\n实现内容：\n- 页面说明并入卡片描述；列表改为整行可点，负责人失效时在负责人下用 cell-note 提示；空列表使用「还没有程序身份」定制空状态\n- 详情抽屉分「基本信息 / 负责人 / 程序客户端 / 停用或恢复」：改名与更换负责人就地展开，不需要影响确认；停用或恢复在危险区展开并须确认；同一时间只进行一项修改，每项修改都带上其余字段的当前值提交到原有整体保存接口\n- 正常状态下负责人失效时禁用「修改名称」并提示先更换负责人，状态说明改为程序暂时不能获取令牌；已停用且负责人失效时恢复按钮不可用\n- 新增「程序客户端」分区：按身份代码搜索程序客户端后再按身份标识过滤（最多 100 个），链接到程序接入详情；没有客户端时给出前往程序接入的链接\n- 新建改为独立弹窗：名称、代码与平铺的负责人选择，底部使用 FormActions；负责人选择改为「选择 成员代码」按钮\n- 保存后焦点留在抽屉内；重写程序身份单元测试（更换负责人、停用确认、未知结果重试、冲突重读），同步 acceptance-p10-t01 中的详情等待、新建、状态变更、负责人失效、冲突重读与深链接步骤\n\n验证：\n- npm run check（format:check、lint、typecheck、test、build）：通过，Vitest 26 个文件 223 项全部通过\n- node --check 检查 acceptance-p10-t01：通过\n- 演示环境没有程序身份，浏览器中以页面内临时改写接口响应的方式检查列表、详情四区、更换负责人、停用确认、负责人失效与新建弹窗（1280 宽、375 窄屏及亮/暗色），未提交写操作\n- 验收脚本 acceptance-p10-t01：未运行，需要独立隔离环境\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/3cf111b21a47760e5c71fc6b2fba96d882dbd3f1","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-12T08:05:50-07:00","added":[],"removed":[],"modified":["iam-admin-web/scripts/acceptance-p10-t01.mjs","iam-admin-web/src/pages/management/ServicePrincipalsPage.tsx","iam-admin-web/src/styles/management.css","iam-admin-web/src/test/service-principals.test.tsx"]},{"id":"ba844f0abb4b7b64a50d2a5b617e87e33aac5a14","message":"feat(console): 把程序接入详情改为分区抽屉并内嵌密钥管理\n\n程序接入页顶部有一大段说明，列表每行放「查看详情」按钮；详情是一张整体表单，管理密钥要切换到另一个子视图，新建时在弹窗里同时套着两张选择卡片。按已定的列表与抽屉约定重排。\n\n实现内容：\n- 页头补「应用」徽标，原顶部说明并入页头与卡片描述，授权方式名称移到详情技术细节\n- 列表改为整行可点（客户端 ID 为按钮、程序身份与可调用操作为灰色说明），状态正常但暂时不能获取令牌时在状态下提示；空列表使用「还没有程序客户端」定制空状态\n- 详情抽屉分「基本信息 / 可调用的操作 / 密钥 / 停用或归档」：调整操作就地展开，无改动不能保存，改动后须确认；平台已不再批准的操作照常列出并注明不生效，取消勾选后不能再选回\n- 密钥改为抽屉内的常驻分区：逐份显示状态与时间，撤销确认在该行下方展开，成功后以提示条告知并重读记录；更换密钥仍显示一次性回执\n- 调整操作、密钥操作与状态变更互相锁定，写入结果不明或冲突时不能切换到其他修改；保存或撤销后焦点留在抽屉内\n- 新建改为两步：先选程序身份，再选服务并勾选操作，底部「重新选择程序身份 / 创建程序客户端」，不再要求影响确认\n- ScopeChoices 改为与权限勾选一致的边框清单，新增 unavailable、legendHidden、hint；平台「程序可调用的操作」弹窗使用平台场景的说明\n- 同步程序接入与密钥单元测试，以及 acceptance-p10-t02、t03、t04 中的详情等待、新建步骤、调整操作、密钥分区与空状态文案\n\n验证：\n- npm run check（format:check、lint、typecheck、test、build）：通过，Vitest 26 个文件 222 项全部通过；构建时 Vite 提示打包文件体积偏大，未核实是否为既有提示\n- node --check 检查 acceptance-p10-t02、t03、t04：通过\n- 演示环境没有程序客户端、可访问服务与程序身份，浏览器中以页面内临时改写接口响应的方式检查列表、详情四区、撤销与更换密钥表单、调整操作、新建两步与已归档只读状态（1280 宽、375 窄屏及亮/暗色），未提交写操作；平台「程序可调用的操作」弹窗打开查看未保存\n- 验收脚本 acceptance-p10-t02、t03、t04：未运行，需要独立隔离环境\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/ba844f0abb4b7b64a50d2a5b617e87e33aac5a14","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-12T07:57:52-07:00","added":[],"removed":[],"modified":["iam-admin-web/scripts/acceptance-p10-t02.mjs","iam-admin-web/scripts/acceptance-p10-t03.mjs","iam-admin-web/scripts/acceptance-p10-t04.mjs","iam-admin-web/src/pages/management/MachineClientsPage.tsx","iam-admin-web/src/pages/management/MachineContract.tsx","iam-admin-web/src/pages/management/MachineCredentials.tsx","iam-admin-web/src/styles/management.css","iam-admin-web/src/test/machine-clients.test.tsx","iam-admin-web/src/test/machine-credentials.test.tsx"]},{"id":"91e187c7bfa1c897d22cd3fb7e5d30d7368a586d","message":"feat(console): 在角色分配中显示角色包含的权限并改用卡片选择分配对象\n\n角色分配页已随企业管理员改为分区抽屉，但业务模式下仍看不出一条分配实际给了哪些权限，分配对象名称下显示的是无意义的标识缩写，新建时用下拉框选择成员或用户组，页头徽标也与其他应用内页面不一致。\n\n实现内容：\n- 页头徽标改为「应用」，与权限清单、角色页一致\n- 分配对象说明：有与名称不同的成员代码或用户组代码时显示「类型 · 代码」，名称即代码时只显示类型，两者都没有才回退标识缩写；用户组不是正常状态时在名称下提示\n- 详情基本信息为角色补充灰色代码，新增「角色包含的权限」（按应用权限清单显示名称）\n- 分配弹窗第一步「分配给」改为横排的「成员 / 用户组」单选卡片；第二步选中角色后显示该角色包含的权限预览，读取失败不影响分配\n- BindingRecord 类型补充 group_code；同步 acceptance-t04 中选择分配对象类型的步骤\n\n验证：\n- npm run check（format:check、lint、typecheck、test、build）：通过，Vitest 26 个文件 222 项全部通过；首次运行时 group-lifecycle 中一项焦点断言偶发失败，单独重跑 3 次及全量重跑均通过，与本次改动无关\n- node --check 检查 acceptance-t04：通过\n- 浏览器 1280 宽、375 窄屏及亮/暗色检查列表、详情抽屉与分配弹窗两步（切换成员/用户组、选择成员与角色、权限预览），未提交写操作；演示数据没有分给用户组的记录，用户组代码与归档提示未在页面上实际看到\n- 验收脚本 acceptance-t04：未运行，需要独立隔离环境\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/91e187c7bfa1c897d22cd3fb7e5d30d7368a586d","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-12T07:45:50-07:00","added":[],"removed":[],"modified":["iam-admin-web/scripts/acceptance-t04.mjs","iam-admin-web/src/lib/t04-api.ts","iam-admin-web/src/pages/management/BindingsPage.tsx","iam-admin-web/src/styles/authorization.css"]},{"id":"4a92a91f122f15d9c26a0ff0fc321e14b589777e","message":"feat(console): 把角色详情改为分区抽屉并重排权限清单\n\n角色详情原先是一张整体表单，改名、调整权限和停用归档混在一起，任何修改都要勾选影响确认；列表每行放「查看 X」按钮，权限清单页也没有筛选。按已定的列表与抽屉约定重排两页。\n\n实现内容：\n- 权限清单拆为独立组件：卡片说明给出权限总数与可放进角色的数量，加入本地名称/代码搜索与状态筛选、「去组合角色」链接，不能放进角色的原因用灰字说明，空清单使用公共空状态\n- 角色列表改用 OpenableRow 整行可点，并提供「还没有角色」定制空状态\n- 角色详情抽屉分「基本信息 / 包含的权限 / 停用或归档」三区：改名与调整权限就地展开，状态变更用单选卡片；同一时间只进行一项修改，每项修改都带上其余字段的当前值提交到原有整体保存接口\n- 改名不再要求影响确认；有分配记录时调整权限、以及任何状态变更仍须确认，草稿改动后确认失效；归档仍同时提交 revokeBindings\n- 基本信息显示分配记录数并提供「前往角色分配」链接；已归档角色只读，不提供修改入口\n- 新建角色改为独立弹窗，底部使用 FormActions「取消 / 创建角色」\n- 公共 PermissionPicker 改为带边框的勾选清单，显示「已选 N 项」，只在不可选的行注明原因，新增 legendHidden；企业管理员中「可分配的权限」随之生效\n- 重写角色相关单元测试（状态归档、改名、调整权限确认、归档只读、新建），同步 acceptance-t04 中的角色详情入口、状态变更与冲突复核步骤\n\n验证：\n- npm run check（format:check、lint、typecheck、test、build）：通过，Vitest 26 个文件 222 项全部通过\n- node --check 检查 acceptance-t04：通过\n- 浏览器 1280 宽、375 窄屏及亮/暗色检查权限清单、角色列表、详情三区、新建弹窗与企业管理员可分配权限；已停用权限、需按数据范围分配的权限与已归档角色通过页面内临时改写响应查看，未做写操作\n- 验收脚本 acceptance-t04：未运行，需要独立隔离环境\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/4a92a91f122f15d9c26a0ff0fc321e14b589777e","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-12T07:39:38-07:00","added":[],"removed":[],"modified":["iam-admin-web/scripts/acceptance-t04.mjs","iam-admin-web/src/pages/management/AuthorizationShared.tsx","iam-admin-web/src/pages/management/RolesPage.tsx","iam-admin-web/src/styles/authorization.css","iam-admin-web/src/styles/management.css","iam-admin-web/src/test/authorization-management.test.tsx"]}],"total_commits":0,"head_commit":{"id":"faac5481c1cca66e4708222686b6588a43938150","message":"feat(console): 合并控制台逐页布局与样式改造\n\n控制台各页面原先列表用「查看详情」按钮、详情是整张表单、弹窗操作区与空状态各不相同，常用信息和危险操作混在一起。合并 feat/console-layout 分支，按统一的列表、抽屉与弹窗约定逐页重排企业内、平台侧与应用内的管理页面。\n\n实现内容：\n- 列表统一为整行可点（OpenableRow 或同交互的专用行），名称为链接或按钮、末列右箭头，需要处理的状态用 cell-note 提示；空状态改为带图标、说明与操作的公共 EmptyList，无数据时不显示分页\n- 详情抽屉按「基本信息 / 业务分区 / 危险区」分区，修改就地展开且同一时间只进行一项；危险操作默认收起，展开后用单选卡片或确认勾选\n- 企业、应用接入改为带分区标签的详情页；新增只读组织架构图；成员、部门、用户组、所有账号、企业与平台管理员、应用开通、操作记录、权限清单、角色、角色分配、程序接入（密钥管理内嵌抽屉）与程序身份完成改造\n- 弹窗底部统一使用 FormActions「取消 + 主操作」，多步弹窗提供「重新选择」；权限统一以名称为主、代码为辅显示，勾选清单统一为带边框的列表\n- 同步更新各页面单元测试与相关验收脚本中的文案和定位\n\n验证：\n- 分支上每次提交前运行 npm run check：format:check、lint、typecheck、test、build 通过，最后一次 Vitest 26 个文件 223 项全部通过\n- 各页面在浏览器 1280 宽、375 窄屏及亮/暗色下核对；程序接入、程序身份等演示环境缺数据的页面以页面内临时改写接口响应检查，未提交写操作\n- 验收脚本仅执行 node --check，未实际运行\n- 合并无冲突，main 上未单独重新运行检查；平台权限查询接入、个人中心尚未改造\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/faac5481c1cca66e4708222686b6588a43938150","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-12T08:07:51-07:00","added":["iam-admin-web/src/pages/management/OrganizationChartPage.tsx","iam-admin-web/src/pages/management/PlatformTenantPage.tsx","iam-admin-web/src/test/organizations.test.tsx"],"removed":[],"modified":["iam-admin-web/scripts/acceptance-group-lifecycle.mjs","iam-admin-web/scripts/acceptance-p10-t01.mjs","iam-admin-web/scripts/acceptance-p10-t02.mjs","iam-admin-web/scripts/acceptance-p10-t03.mjs","iam-admin-web/scripts/acceptance-p10-t04.mjs","iam-admin-web/scripts/acceptance-t02.mjs","iam-admin-web/scripts/acceptance-t03.mjs","iam-admin-web/scripts/acceptance-t04.mjs","iam-admin-web/scripts/acceptance-t06.mjs","iam-admin-web/src/App.tsx","iam-admin-web/src/components/Management.tsx","iam-admin-web/src/lib/t04-api.ts","iam-admin-web/src/pages/management/ApplicationAdmissionPage.tsx","iam-admin-web/src/pages/management/ApplicationContracts.tsx","iam-admin-web/src/pages/management/ApplicationLifecycle.tsx","iam-admin-web/src/pages/management/ApplicationShared.tsx","iam-admin-web/src/pages/management/ApplicationsPage.tsx","iam-admin-web/src/pages/management/AuditPage.tsx","iam-admin-web/src/pages/management/AuthorizationShared.tsx","iam-admin-web/src/pages/management/BindingScopes.tsx","iam-admin-web/src/pages/management/BindingsPage.tsx","iam-admin-web/src/pages/management/GroupsPage.tsx","iam-admin-web/src/pages/management/MachineClientsPage.tsx","iam-admin-web/src/pages/management/MachineContract.tsx","iam-admin-web/src/pages/management/MachineCredentials.tsx","iam-admin-web/src/pages/management/MembersPage.tsx","iam-admin-web/src/pages/management/OrganizationsPage.tsx","iam-admin-web/src/pages/management/PlatformPages.tsx","iam-admin-web/src/pages/management/RolesPage.tsx","iam-admin-web/src/pages/management/ServicePrincipalsPage.tsx","iam-admin-web/src/styles/applications.css","iam-admin-web/src/styles/audit.css","iam-admin-web/src/styles/authorization.css","iam-admin-web/src/styles/management.css","iam-admin-web/src/test/application-lifecycle.test.tsx","iam-admin-web/src/test/application-management.test.tsx","iam-admin-web/src/test/audit.test.tsx","iam-admin-web/src/test/authorization-management.test.tsx","iam-admin-web/src/test/group-editor.test.tsx","iam-admin-web/src/test/group-lifecycle.test.tsx","iam-admin-web/src/test/machine-clients.test.tsx","iam-admin-web/src/test/machine-credentials.test.tsx","iam-admin-web/src/test/management-integration.test.tsx","iam-admin-web/src/test/service-principals.test.tsx"]},"repository":{"id":125,"owner":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"228834386@qq.com","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"},"name":"IAM","full_name":"pengzhiyu/IAM","description":"Identity and Access Management(身份识别与访问管理)","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":100939,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/pengzhiyu/IAM/languages","html_url":"https://gitea.g-hi.com/pengzhiyu/IAM","url":"https://gitea.g-hi.com/api/v1/repos/pengzhiyu/IAM","link":"","ssh_url":"git@gitea.g-hi.com:pengzhiyu/IAM.git","clone_url":"https://gitea.g-hi.com/pengzhiyu/IAM.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":1,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-10-08T17:04:24+08:00","updated_at":"2026-10-11T23:51:55+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"16+pengzhiyu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"},"sender":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"16+pengzhiyu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"}}...
|
push
|
2
|
4
|
1791818109
|
1791818322
|
0
|
1791818107
|
1791818322
|
|
|
0
|
Edit
Delete
|
|
25776
|
docs: 记录 P12 云测归因与 E2a 验证结果
|
125
|
16
|
verify.yml
|
6
|
16
|
0
|
refs/heads/main
|
85e2c17b4829f451e34f938ca6c11354a0b17f30
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"faac5481c1cca66e4708222686b6588a43938150","after":"85e2c17b4829f451e34f938ca6c11354a0b17f30","compare_url":"https://gitea.g-hi.com/pengzhiyu/IAM/compare/faac5481c1cca66e4708222686b6588a43938150...85e2c17b4829f451e34f938ca6c11354a0b17f30","commits":[{"id":"85e2c17b4829f451e34f938ca6c11354a0b17f30","message":"docs: 记录 P12 云测归因与 E2a 验证结果\n\n归档原两份任务文档中累计的候选验证、单轮云测、持有成本分析和 E2a 实施记录，保持历史失败及授权边界可追溯。\n\n实现内容：\n- 记录 50 次入口拒绝的真实关联证据与尚未验收的容量目标\n- 记录三个期限检查点计时的实现、首例测试修正和独立提交\n- 区分历史完整检查、共享报告覆盖与当前组合的定向复验\n- 更新当前状态并说明下一步隔离候选验证建议\n\n验证：\n- 文件摘要、独立执行日志和实际提交内容核对通过\n- 当前组合定向 28 项单测、18 项集成及 26 项 Python 测试通过\n- 文档差异、相对文件链接和 git diff --check 检查通过\n- 本次不新增完整构建、候选冻结或云测结果\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/85e2c17b4829f451e34f938ca6c11354a0b17f30","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-12T08:42:04-07:00","added":[],"removed":[],"modified":["docs/tasks/P12-auth-ingress-attribution-design.md","docs/tasks/P12-software-optimization.md"]},{"id":"536e36cfae600b8bbdc378012e723ffbbd34a491","message":"feat(protocol): 增加刷新期限检查点诊断计时\n\n现有粗阶段无法区分三次期限复核的耗时，为后续容量归因补齐固定观测。\n\n实现内容：\n- 在原 P0/P1/P2 检查处分别计时，保留 SQL、事务、期限及回滚顺序\n- 同步诊断读取白名单，保留旧记录的阶段缺失语义\n- 覆盖嵌套计时、导出大小、检查短路、迟到期回滚和旧记录兼容\n\n验证：\n- Java 25 离线 Maven 定向 verify：AuthRequestDiagnosticsTest、RefreshExpiryGuardTest、CapacityDiagnosticsTest、AuthDiagnosticsTestProbeTest 共 28 项单测及 RefreshExpiryLifecycleIT 18 项集成全部通过\n- python3 -m unittest discover -s scripts/capacity -p 'test_*.py'：26 项通过\n- Spotless、编译、打包及 git diff --check 通过\n- 本次提交前未重跑完整后端或控制台检查，不将此前完整结果当作当前全部组合的重新验收\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/536e36cfae600b8bbdc378012e723ffbbd34a491","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-12T08:40:04-07:00","added":[],"removed":[],"modified":["iam-server/src/main/java/com/iam/server/protocol/RefreshExpiryGuard.java","iam-server/src/main/java/com/iam/server/protocol/RefreshGovernance.java","iam-server/src/main/java/com/iam/server/security/AuthRequestDiagnostics.java","iam-server/src/test/java/com/iam/server/protocol/CapacityDiagnosticsTest.java","iam-server/src/test/java/com/iam/server/protocol/RefreshExpiryGuardTest.java","iam-server/src/test/java/com/iam/server/protocol/RefreshExpiryLifecycleIT.java","iam-server/src/test/java/com/iam/server/security/AuthRequestDiagnosticsTest.java","scripts/capacity/auth_diagnostics.py","scripts/capacity/test_auth_diagnostics.py"]},{"id":"a435000ebba0784762f27ae3f1a04e1159cf0617","message":"feat: 增加权限说明与审计操作对象快照\n\n为控制台权限清单提供使用说明，并让操作记录在对象改名或归档后仍能识别操作对象。\n\n实现内容：\n- 新增 V29 迁移及可空权限说明，支持完整替换、输入校验和新旧清单摘要兼容\n- 平台与企业目录返回说明，保持本人有效权限代码集合不变\n- 在业务事务内保存受控对象代码快照，审计列表和详情增加类型、名称和展示摘要\n- 校验事件与对象类型匹配，保留旧摘要、安全投影和企业访问边界\n- 补充迁移、接口和审计安全测试，同步接口合同、数据字典与前端接入说明\n\n验证：\n- Java 25 下执行 ./mvnw -B -ntp -pl iam-server -am -Dit.test=PermissionDescriptionIT,AuditReadIT,AuthorizationIT,GroupLifecycleIT,MigrationIT,FoundationIT -Dfailsafe.failIfNoSpecifiedTests=false verify：通过\n- Java 25 下执行 ./mvnw -B -ntp -pl iam-server -am -Dit.test=AuditReadIT,AuthorizationMigrationIT,ApplicationLifecycleUpgradeIT,MachineCredentialUpgradeIT,AuditRetentionIT -Dfailsafe.failIfNoSpecifiedTests=false verify：通过\n- Java 25 下执行 ./mvnw -B -ntp -pl iam-server -am -Dit.test=AuditReadIT,GroupLifecycleIT -Dfailsafe.failIfNoSpecifiedTests=false verify：通过\n- 三轮去重共 180 个单元测试、83 个集成测试通过，格式检查、编译和打包通过\n- 权限清单 JSON Schema 语法校验及 git diff --check 通过\n- 未执行前端浏览器接入验证，未重启演示环境\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/a435000ebba0784762f27ae3f1a04e1159cf0617","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-12T08:36:49-07:00","added":["docs/console/permission-description-audit-target-handoff.md","iam-server/src/main/java/com/iam/server/accounts/AuditTargetSnapshot.java","iam-server/src/main/resources/db/migration/V29__permission_description.sql","iam-server/src/test/java/com/iam/server/protocol/PermissionDescriptionIT.java"],"removed":[],"modified":["docs/audit-security.md","docs/authorization.md","docs/data-foundation.md","docs/schemas/permission-catalog.schema.json","iam-server/src/main/java/com/iam/server/accounts/AccountStore.java","iam-server/src/main/java/com/iam/server/accounts/AuditReadService.java","iam-server/src/main/java/com/iam/server/accounts/AuthorizationService.java","iam-server/src/test/java/com/iam/server/data/AuthorizationMigrationIT.java","iam-server/src/test/java/com/iam/server/data/MigrationIT.java","iam-server/src/test/java/com/iam/server/protocol/AuditReadIT.java"]}],"total_commits":0,"head_commit":{"id":"85e2c17b4829f451e34f938ca6c11354a0b17f30","message":"docs: 记录 P12 云测归因与 E2a 验证结果\n\n归档原两份任务文档中累计的候选验证、单轮云测、持有成本分析和 E2a 实施记录，保持历史失败及授权边界可追溯。\n\n实现内容：\n- 记录 50 次入口拒绝的真实关联证据与尚未验收的容量目标\n- 记录三个期限检查点计时的实现、首例测试修正和独立提交\n- 区分历史完整检查、共享报告覆盖与当前组合的定向复验\n- 更新当前状态并说明下一步隔离候选验证建议\n\n验证：\n- 文件摘要、独立执行日志和实际提交内容核对通过\n- 当前组合定向 28 项单测、18 项集成及 26 项 Python 测试通过\n- 文档差异、相对文件链接和 git diff --check 检查通过\n- 本次不新增完整构建、候选冻结或云测结果\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/85e2c17b4829f451e34f938ca6c11354a0b17f30","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-12T08:42:04-07:00","added":[],"removed":[],"modified":["docs/tasks/P12-auth-ingress-attribution-design.md","docs/tasks/P12-software-optimization.md"]},"repository":{"id":125,"owner":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"228834386@qq.com","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"},"name":"IAM","full_name":"pengzhiyu/IAM","description":"Identity and Access Management(身份识别与访问管理)","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":101474,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/pengzhiyu/IAM/languages","html_url":"https://gitea.g-hi.com/pengzhiyu/IAM","url":"https://gitea.g-hi.com/api/v1/repos/pengzhiyu/IAM","link":"","ssh_url":"git@gitea.g-hi.com:pengzhiyu/IAM.git","clone_url":"https://gitea.g-hi.com/pengzhiyu/IAM.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":1,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-10-08T17:04:24+08:00","updated_at":"2026-10-12T23:15:07+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"16+pengzhiyu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"},"sender":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"16+pengzhiyu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"}}...
|
push
|
2
|
4
|
1791872390
|
1791872617
|
0
|
1791852703
|
1791872617
|
|
|
0
|
Edit
Delete
|
|
25818
|
feat(console): 接入权限说明与操作记录的操作对象快照
|
125
|
16
|
verify.yml
|
7
|
16
|
0
|
refs/heads/feat/console-layout
|
ff5ee33515b0a21b6ba738d00c52373fabfaa50d
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/feat/console-layout {"ref":"refs/heads/feat/console-layout","before":"0000000000000000000000000000000000000000","after":"ff5ee33515b0a21b6ba738d00c52373fabfaa50d","compare_url":"https://gitea.g-hi.com/pengzhiyu/IAM/compare/3cf111b21a47760e5c71fc6b2fba96d882dbd3f1...ff5ee33515b0a21b6ba738d00c52373fabfaa50d","commits":[{"id":"ff5ee33515b0a21b6ba738d00c52373fabfaa50d","message":"feat(console): 接入权限说明与操作记录的操作对象快照\n\n后端已为权限增加可选说明，并在操作记录中返回操作对象类型、代码快照和展示摘要。控制台此前无法填写或查看权限说明，操作记录也看不出操作了哪个对象。\n\n实现内容：\n- 权限类型增加 description；完整清单提交时其余每条权限原样带上当前说明或 null，版本号固定为当前值加 1\n- 平台「新增或修改权限」弹窗增加可选说明多行框：预填已有说明、显示字数、上限 1000、拦截回车，换行/制表符/格式字符在前端提示，首尾空白去掉、清空或全空白提交 null\n- 后端返回 INVALID_PERMISSION_DESCRIPTION 时给出具体修改提示\n- PermissionLabel 支持显示说明；平台权限表、企业权限清单（搜索可匹配说明）与 PermissionPicker 显示说明，为空时不占位\n- PermissionPicker 中说明经 aria-describedby 关联，不并入勾选框名称\n- 操作记录列表在操作名称下显示「类型「代码」 · 应用」；未知类型统一称「对象」，无快照时省略\n- 操作记录详情增加「操作对象」，摘要优先 display_summary，原 summary 移到技术细节「内部摘要」；旧记录说明未记录对象名称\n- acceptance-t03 同步新的按钮名称\n\n验证：\n- npm run format:check、npm run lint、npm run typecheck：通过\n- npm test：26 个测试文件、227 项通过（新增说明保留与清空、说明校验、编辑弹窗、选择器无障碍名称、操作对象快照与回退用例）\n- 浏览器在 1280 宽、375 窄屏及亮/暗色下用页面内临时拦截 fetch 模拟新字段检查显示：正常\n- 未与包含 V29 的新后端联调；acceptance-t03 未运行\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/ff5ee33515b0a21b6ba738d00c52373fabfaa50d","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-13T00:48:33-07:00","added":[],"removed":[],"modified":["iam-admin-web/scripts/acceptance-t03.mjs","iam-admin-web/src/lib/audit-actions.ts","iam-admin-web/src/lib/t03-api.ts","iam-admin-web/src/pages/management/ApplicationContracts.tsx","iam-admin-web/src/pages/management/AuditPage.tsx","iam-admin-web/src/pages/management/AuthorizationShared.tsx","iam-admin-web/src/pages/management/RolesPage.tsx","iam-admin-web/src/styles/applications.css","iam-admin-web/src/styles/audit.css","iam-admin-web/src/styles/authorization.css","iam-admin-web/src/test/application-management.test.tsx","iam-admin-web/src/test/audit.test.tsx","iam-admin-web/src/test/authorization-management.test.tsx"]},{"id":"9631e78cfeee4abd1ccb7e7f777864e4815ded49","message":"chore: 合并 main 引入权限说明与操作对象快照后端\n\n前端接入权限说明与操作记录操作对象前，先把 main 上的后端交付（a435000、536e36c、85e2c17）合入前端分支。\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/9631e78cfeee4abd1ccb7e7f777864e4815ded49","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-13T00:33:36-07:00","added":["docs/console/permission-description-audit-target-handoff.md","iam-server/src/main/java/com/iam/server/accounts/AuditTargetSnapshot.java","iam-server/src/main/resources/db/migration/V29__permission_description.sql","iam-server/src/test/java/com/iam/server/protocol/ObservedProtocolFixture.java","iam-server/src/test/java/com/iam/server/protocol/PermissionDescriptionIT.java","iam-server/src/test/java/com/iam/server/protocol/ProtocolPortAllocationIT.java","iam-server/src/test/java/com/iam/server/protocol/ProtocolTestPort.java","iam-server/src/test/java/com/iam/server/security/AuthDiagnosticsTestProbe.java","iam-server/src/test/java/com/iam/server/security/AuthDiagnosticsTestProbeTest.java"],"removed":[],"modified":["docs/audit-security.md","docs/authorization.md","docs/data-foundation.md","docs/schemas/permission-catalog.schema.json","docs/tasks/P12-auth-ingress-attribution-design.md","docs/tasks/P12-software-optimization.md","iam-server/src/main/java/com/iam/server/accounts/AccountStore.java","iam-server/src/main/java/com/iam/server/accounts/AuditReadService.java","iam-server/src/main/java/com/iam/server/accounts/AuthorizationService.java","iam-server/src/main/java/com/iam/server/protocol/RefreshExpiryGuard.java","iam-server/src/main/java/com/iam/server/protocol/RefreshGovernance.java","iam-server/src/main/java/com/iam/server/security/AuthRequestDiagnostics.java","iam-server/src/test/java/com/iam/server/data/AuthorizationMigrationIT.java","iam-server/src/test/java/com/iam/server/data/MigrationIT.java","iam-server/src/test/java/com/iam/server/protocol/AuditReadIT.java","iam-server/src/test/java/com/iam/server/protocol/AuthIngressConservativeIT.java","iam-server/src/test/java/com/iam/server/protocol/AuthIngressLifecycleIT.java","iam-server/src/test/java/com/iam/server/protocol/AuthIngressTimeContractIT.java","iam-server/src/test/java/com/iam/server/protocol/CapacityDiagnosticsTest.java","iam-server/src/test/java/com/iam/server/protocol/ProtocolFixture.java","iam-server/src/test/java/com/iam/server/protocol/RefreshExpiryGuardTest.java","iam-server/src/test/java/com/iam/server/protocol/RefreshExpiryLifecycleIT.java","iam-server/src/test/java/com/iam/server/security/AuthRequestDiagnosticsTest.java","scripts/capacity/auth_diagnostics.py","scripts/capacity/test_auth_diagnostics.py"]},{"id":"3973681b67a737220c25c4bc3f916ca2b687b5ee","message":"feat(console): 重排个人中心并把登录记录改为当前登录加表格\n\n个人中心原先把邮箱、多因素验证放在最前，账号信息压在下方；登录记录每条都是一张大卡片，十几条记录要滚很久，已过期的登录也和当前登录一样醒目。本次按控制台其他页面的布局约定重排个人中心。\n\n实现内容：\n- 上排并列「我的账号」（名字首字头像 + 平台管理身份徽标）与「我的企业」（企业 / 你的身份 / 成员代码三列表格，手机上收窄内边距不必横向滚动）\n- 邮箱与多因素验证合并为「账号安全」卡片，左侧标题与说明、右侧内容，900px 以下上下排列；多因素验证面板与登录页共用，本次未改\n- 邮箱区域改用与多因素验证相同外观的状态摘要（未登记 / 未验证 / 已验证 + 投递状态）；登记或发送验证邮件的表单点按钮后就地展开，展开后聚焦第一个字段，提交后无论成败都清除密码；「取消待处理的验证与恢复链接」改名为「作废已发出的邮件链接」并保持常驻（找回密码链接不体现在邮箱状态里）\n- 登录记录拆为「当前这次登录」单独一块（四个时间 + 期限规则）与「其他登录」表格（登录时间 + 编号缩写 / 状态 / 最近使用 / 自动退出于）；表格时间用今天、昨天等简短写法，完整时间在悬停提示中\n- 已退出的登录不再显示退出按钮；已过期、已失效的登录仍可退出以撤销业务系统中残留的授权，按钮改为轻量样式，整行弱化\n- 退出确认弹窗底部改为「取消 + 确认退出」，补充最近使用时间，登录编号带名称与注解；账号标识同样带名称与注解\n- 单测改用新的邮箱按钮与字段名，新增「当前登录单独列出、已退出的登录不提供退出按钮」用例；acceptance-p11-t02 同步新的邮箱登记流程与已验证文案，acceptance-t05 依赖的类名与按钮名保持不变\n\n验证：\n- npm run format:check：通过\n- npm run typecheck：通过\n- npm run lint：通过\n- npm run test：26 个测试文件、224 项全部通过\n- 浏览器检查 1280 宽、375 窄屏与亮暗色，整页无横向溢出；邮箱登记表单与退出确认弹窗只打开查看，未实际提交\n- acceptance-p11-t02、acceptance-t05：未运行\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/3973681b67a737220c25c4bc3f916ca2b687b5ee","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-13T00:28:12-07:00","added":[],"removed":[],"modified":["iam-admin-web/scripts/acceptance-p11-t02.mjs","iam-admin-web/src/pages/EmailRecoveryPage.tsx","iam-admin-web/src/pages/PersonalPage.tsx","iam-admin-web/src/styles/email.css","iam-admin-web/src/styles/personal.css","iam-admin-web/src/test/email-recovery.test.tsx","iam-admin-web/src/test/personal.test.tsx"]},{"id":"2508f797ba72291a981665d5f4fcc4fb86280af8","message":"feat(console): 为技术细节中的编号补充名称与用途注解\n\n技术细节原先只列出编号，部分地方连名称都没有，普通使用者看不懂这串字符是什么、什么时候用得上。本次为各页面技术细节中的编号、版本和代码补充名称与一句用途说明。\n\n实现内容：\n- TechDetails 展开后先显示一句总说明：这些编号用于定位记录，日常不需要关心，反馈问题时可复制给管理员或技术支持\n- DescriptionList 每项新增可选 hint，在值下方显示灰色注解；有注解时值包在 .dlist__value 中，按值定位的测试不受注解文字影响\n- 新增 lib/tech-hints.ts 统一注解文案：对象标识、记录版本、账号标识与成员标识的区别、密钥编号、客户端标识与客户端代码的区别等\n- 工作台账号标识、程序接入新建密钥后的密钥编号、应用接入新建客户端后的客户端标识原先只露出编号，改为带名称的描述列表并加注解\n- 企业、账号、成员、部门、用户组、应用接入、应用开通、角色、授权、程序接入、程序身份、权限查询接入、操作记录、状态变更影响预览中的技术细节逐项补充注解\n- 同步 acceptance-p10-t01、acceptance-t03 中按记录版本值定位的选择器为 dd .dlist__value\n\n验证：\n- npm run format:check：通过\n- npm run typecheck：通过\n- npm run lint：通过\n- npm run test：26 个测试文件、223 项全部通过（暂时移开个人中心未提交改动后单独运行）\n- 浏览器检查应用接入客户端详情抽屉的技术细节注解显示正常；其余页面未逐页目测\n- acceptance-p10-t01、acceptance-t03：未运行\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/2508f797ba72291a981665d5f4fcc4fb86280af8","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-13T00:27:34-07:00","added":["iam-admin-web/src/lib/tech-hints.ts"],"removed":[],"modified":["iam-admin-web/scripts/acceptance-p10-t01.mjs","iam-admin-web/scripts/acceptance-t03.mjs","iam-admin-web/src/components/Layout.tsx","iam-admin-web/src/pages/HomePage.tsx","iam-admin-web/src/pages/management/ApplicationAdmissionPage.tsx","iam-admin-web/src/pages/management/ApplicationLifecycle.tsx","iam-admin-web/src/pages/management/ApplicationsPage.tsx","iam-admin-web/src/pages/management/AuditPage.tsx","iam-admin-web/src/pages/management/BindingsPage.tsx","iam-admin-web/src/pages/management/DecisionCallersPage.tsx","iam-admin-web/src/pages/management/GroupsPage.tsx","iam-admin-web/src/pages/management/MachineClientsPage.tsx","iam-admin-web/src/pages/management/MembersPage.tsx","iam-admin-web/src/pages/management/OrganizationsPage.tsx","iam-admin-web/src/pages/management/PlatformPages.tsx","iam-admin-web/src/pages/management/PlatformTenantPage.tsx","iam-admin-web/src/pages/management/RolesPage.tsx","iam-admin-web/src/pages/management/ServicePrincipalsPage.tsx","iam-admin-web/src/styles/components.css"]},{"id":"e5c32be5d8e106d727495fd92d5b3bf6ab2a3b4f","message":"feat(console): 把权限查询接入改为分区详情抽屉并以选择代替粘贴标识登记\n\n权限查询接入页列表与详情只显示一串 UUID，登记时需要手动粘贴企业、应用、服务三个标识；系统过期后状态仍显示「正常」，管理员无法看出它的查询已被拒绝。本次按控制台已定的列表、抽屉与弹窗样式重排该页。\n\n实现内容：\n- 列表改为「查询的应用 / 所属企业 / 到期时间 / 状态」，应用名称是打开详情的按钮、整行可点；企业与应用名称各读取第一页（最多 100 个），读不到时回退为「类别 + 标识前 8 位」\n- 正常但已过期的系统显示「已过期」徽标并提示查询会被拒绝，正常且 3 天内到期时提前提醒；列表新增定制空状态\n- 详情抽屉分「基本信息（企业、应用、服务名称）/ 密钥说明 / 停用（危险区）」，四个标识与固定查询范围收进技术细节；停用默认收起为按钮，展开后勾选确认、可取消，停用后抽屉保持打开并把焦点留在抽屉上\n- 登记改为两步：平铺列表选正常状态的企业，再用单选卡片选该企业已启用的应用和应用下的服务，填写摘要与到期时间（输入框限定现在至 30 天后）；底部为「重新选择企业 / 确认登记」，提交字段与原来一致\n- 公共样式 .card__actions 不再收缩，卡片说明较长时操作按钮保持一行；600px 以下卡片头部换行，按钮排到标题下方\n- 同步登记单测为按企业、应用、服务选择的流程，acceptance-t03 的 A11 改为点击应用名称打开详情、展开停用并等待停用后的说明\n\n验证：\n- npm run format:check、npm run lint：通过\n- npx tsc -b：通过\n- npm run test：26 个测试文件、223 项全部通过\n- 浏览器在演示环境查看 1280 宽、375 窄屏与亮暗色；演示环境未开启登记功能，登记流程用页面内临时拦截请求验证，提交字段正确且未写入后端\n- acceptance-t03：未运行\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/e5c32be5d8e106d727495fd92d5b3bf6ab2a3b4f","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-12T23:49:35-07:00","added":[],"removed":[],"modified":["iam-admin-web/scripts/acceptance-t03.mjs","iam-admin-web/src/pages/management/DecisionCallersPage.tsx","iam-admin-web/src/styles/components.css","iam-admin-web/src/test/application-management.test.tsx"]}],"total_commits":0,"head_commit":{"id":"ff5ee33515b0a21b6ba738d00c52373fabfaa50d","message":"feat(console): 接入权限说明与操作记录的操作对象快照\n\n后端已为权限增加可选说明，并在操作记录中返回操作对象类型、代码快照和展示摘要。控制台此前无法填写或查看权限说明，操作记录也看不出操作了哪个对象。\n\n实现内容：\n- 权限类型增加 description；完整清单提交时其余每条权限原样带上当前说明或 null，版本号固定为当前值加 1\n- 平台「新增或修改权限」弹窗增加可选说明多行框：预填已有说明、显示字数、上限 1000、拦截回车，换行/制表符/格式字符在前端提示，首尾空白去掉、清空或全空白提交 null\n- 后端返回 INVALID_PERMISSION_DESCRIPTION 时给出具体修改提示\n- PermissionLabel 支持显示说明；平台权限表、企业权限清单（搜索可匹配说明）与 PermissionPicker 显示说明，为空时不占位\n- PermissionPicker 中说明经 aria-describedby 关联，不并入勾选框名称\n- 操作记录列表在操作名称下显示「类型「代码」 · 应用」；未知类型统一称「对象」，无快照时省略\n- 操作记录详情增加「操作对象」，摘要优先 display_summary，原 summary 移到技术细节「内部摘要」；旧记录说明未记录对象名称\n- acceptance-t03 同步新的按钮名称\n\n验证：\n- npm run format:check、npm run lint、npm run typecheck：通过\n- npm test：26 个测试文件、227 项通过（新增说明保留与清空、说明校验、编辑弹窗、选择器无障碍名称、操作对象快照与回退用例）\n- 浏览器在 1280 宽、375 窄屏及亮/暗色下用页面内临时拦截 fetch 模拟新字段检查显示：正常\n- 未与包含 V29 的新后端联调；acceptance-t03 未运行\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/ff5ee33515b0a21b6ba738d00c52373fabfaa50d","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-13T00:48:33-07:00","added":[],"removed":[],"modified":["iam-admin-web/scripts/acceptance-t03.mjs","iam-admin-web/src/lib/audit-actions.ts","iam-admin-web/src/lib/t03-api.ts","iam-admin-web/src/pages/management/ApplicationContracts.tsx","iam-admin-web/src/pages/management/AuditPage.tsx","iam-admin-web/src/pages/management/AuthorizationShared.tsx","iam-admin-web/src/pages/management/RolesPage.tsx","iam-admin-web/src/styles/applications.css","iam-admin-web/src/styles/audit.css","iam-admin-web/src/styles/authorization.css","iam-admin-web/src/test/application-management.test.tsx","iam-admin-web/src/test/audit.test.tsx","iam-admin-web/src/test/authorization-management.test.tsx"]},"repository":{"id":125,"owner":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"228834386@qq.com","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"},"name":"IAM","full_name":"pengzhiyu/IAM","description":"Identity and Access Management(身份识别与访问管理)","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":101765,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/pengzhiyu/IAM/languages","html_url":"https://gitea.g-hi.com/pengzhiyu/IAM","url":"https://gitea.g-hi.com/api/v1/repos/pengzhiyu/IAM","link":"","ssh_url":"git@gitea.g-hi.com:pengzhiyu/IAM.git","clone_url":"https://gitea.g-hi.com/pengzhiyu/IAM.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":2,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-10-08T17:04:24+08:00","updated_at":"2026-10-13T08:51:43+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"16+pengzhiyu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"},"sender":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"16+pengzhiyu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"}}...
|
push
|
3
|
4
|
1791877969
|
1791878086
|
0
|
1791877967
|
1791878086
|
|
|
0
|
Edit
Delete
|
|
25819
|
feat(console): 接入权限说明与操作记录的操作对象快照
|
125
|
16
|
verify.yml
|
8
|
16
|
0
|
refs/heads/main
|
ff5ee33515b0a21b6ba738d00c52373fabfaa50d
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"85e2c17b4829f451e34f938ca6c11354a0b17f30","after":"ff5ee33515b0a21b6ba738d00c52373fabfaa50d","compare_url":"https://gitea.g-hi.com/pengzhiyu/IAM/compare/85e2c17b4829f451e34f938ca6c11354a0b17f30...ff5ee33515b0a21b6ba738d00c52373fabfaa50d","commits":[{"id":"ff5ee33515b0a21b6ba738d00c52373fabfaa50d","message":"feat(console): 接入权限说明与操作记录的操作对象快照\n\n后端已为权限增加可选说明，并在操作记录中返回操作对象类型、代码快照和展示摘要。控制台此前无法填写或查看权限说明，操作记录也看不出操作了哪个对象。\n\n实现内容：\n- 权限类型增加 description；完整清单提交时其余每条权限原样带上当前说明或 null，版本号固定为当前值加 1\n- 平台「新增或修改权限」弹窗增加可选说明多行框：预填已有说明、显示字数、上限 1000、拦截回车，换行/制表符/格式字符在前端提示，首尾空白去掉、清空或全空白提交 null\n- 后端返回 INVALID_PERMISSION_DESCRIPTION 时给出具体修改提示\n- PermissionLabel 支持显示说明；平台权限表、企业权限清单（搜索可匹配说明）与 PermissionPicker 显示说明，为空时不占位\n- PermissionPicker 中说明经 aria-describedby 关联，不并入勾选框名称\n- 操作记录列表在操作名称下显示「类型「代码」 · 应用」；未知类型统一称「对象」，无快照时省略\n- 操作记录详情增加「操作对象」，摘要优先 display_summary，原 summary 移到技术细节「内部摘要」；旧记录说明未记录对象名称\n- acceptance-t03 同步新的按钮名称\n\n验证：\n- npm run format:check、npm run lint、npm run typecheck：通过\n- npm test：26 个测试文件、227 项通过（新增说明保留与清空、说明校验、编辑弹窗、选择器无障碍名称、操作对象快照与回退用例）\n- 浏览器在 1280 宽、375 窄屏及亮/暗色下用页面内临时拦截 fetch 模拟新字段检查显示：正常\n- 未与包含 V29 的新后端联调；acceptance-t03 未运行\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/ff5ee33515b0a21b6ba738d00c52373fabfaa50d","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-13T00:48:33-07:00","added":[],"removed":[],"modified":["iam-admin-web/scripts/acceptance-t03.mjs","iam-admin-web/src/lib/audit-actions.ts","iam-admin-web/src/lib/t03-api.ts","iam-admin-web/src/pages/management/ApplicationContracts.tsx","iam-admin-web/src/pages/management/AuditPage.tsx","iam-admin-web/src/pages/management/AuthorizationShared.tsx","iam-admin-web/src/pages/management/RolesPage.tsx","iam-admin-web/src/styles/applications.css","iam-admin-web/src/styles/audit.css","iam-admin-web/src/styles/authorization.css","iam-admin-web/src/test/application-management.test.tsx","iam-admin-web/src/test/audit.test.tsx","iam-admin-web/src/test/authorization-management.test.tsx"]},{"id":"9631e78cfeee4abd1ccb7e7f777864e4815ded49","message":"chore: 合并 main 引入权限说明与操作对象快照后端\n\n前端接入权限说明与操作记录操作对象前，先把 main 上的后端交付（a435000、536e36c、85e2c17）合入前端分支。\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/9631e78cfeee4abd1ccb7e7f777864e4815ded49","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-13T00:33:36-07:00","added":["docs/console/permission-description-audit-target-handoff.md","iam-server/src/main/java/com/iam/server/accounts/AuditTargetSnapshot.java","iam-server/src/main/resources/db/migration/V29__permission_description.sql","iam-server/src/test/java/com/iam/server/protocol/ObservedProtocolFixture.java","iam-server/src/test/java/com/iam/server/protocol/PermissionDescriptionIT.java","iam-server/src/test/java/com/iam/server/protocol/ProtocolPortAllocationIT.java","iam-server/src/test/java/com/iam/server/protocol/ProtocolTestPort.java","iam-server/src/test/java/com/iam/server/security/AuthDiagnosticsTestProbe.java","iam-server/src/test/java/com/iam/server/security/AuthDiagnosticsTestProbeTest.java"],"removed":[],"modified":["docs/audit-security.md","docs/authorization.md","docs/data-foundation.md","docs/schemas/permission-catalog.schema.json","docs/tasks/P12-auth-ingress-attribution-design.md","docs/tasks/P12-software-optimization.md","iam-server/src/main/java/com/iam/server/accounts/AccountStore.java","iam-server/src/main/java/com/iam/server/accounts/AuditReadService.java","iam-server/src/main/java/com/iam/server/accounts/AuthorizationService.java","iam-server/src/main/java/com/iam/server/protocol/RefreshExpiryGuard.java","iam-server/src/main/java/com/iam/server/protocol/RefreshGovernance.java","iam-server/src/main/java/com/iam/server/security/AuthRequestDiagnostics.java","iam-server/src/test/java/com/iam/server/data/AuthorizationMigrationIT.java","iam-server/src/test/java/com/iam/server/data/MigrationIT.java","iam-server/src/test/java/com/iam/server/protocol/AuditReadIT.java","iam-server/src/test/java/com/iam/server/protocol/AuthIngressConservativeIT.java","iam-server/src/test/java/com/iam/server/protocol/AuthIngressLifecycleIT.java","iam-server/src/test/java/com/iam/server/protocol/AuthIngressTimeContractIT.java","iam-server/src/test/java/com/iam/server/protocol/CapacityDiagnosticsTest.java","iam-server/src/test/java/com/iam/server/protocol/ProtocolFixture.java","iam-server/src/test/java/com/iam/server/protocol/RefreshExpiryGuardTest.java","iam-server/src/test/java/com/iam/server/protocol/RefreshExpiryLifecycleIT.java","iam-server/src/test/java/com/iam/server/security/AuthRequestDiagnosticsTest.java","scripts/capacity/auth_diagnostics.py","scripts/capacity/test_auth_diagnostics.py"]},{"id":"3973681b67a737220c25c4bc3f916ca2b687b5ee","message":"feat(console): 重排个人中心并把登录记录改为当前登录加表格\n\n个人中心原先把邮箱、多因素验证放在最前，账号信息压在下方；登录记录每条都是一张大卡片，十几条记录要滚很久，已过期的登录也和当前登录一样醒目。本次按控制台其他页面的布局约定重排个人中心。\n\n实现内容：\n- 上排并列「我的账号」（名字首字头像 + 平台管理身份徽标）与「我的企业」（企业 / 你的身份 / 成员代码三列表格，手机上收窄内边距不必横向滚动）\n- 邮箱与多因素验证合并为「账号安全」卡片，左侧标题与说明、右侧内容，900px 以下上下排列；多因素验证面板与登录页共用，本次未改\n- 邮箱区域改用与多因素验证相同外观的状态摘要（未登记 / 未验证 / 已验证 + 投递状态）；登记或发送验证邮件的表单点按钮后就地展开，展开后聚焦第一个字段，提交后无论成败都清除密码；「取消待处理的验证与恢复链接」改名为「作废已发出的邮件链接」并保持常驻（找回密码链接不体现在邮箱状态里）\n- 登录记录拆为「当前这次登录」单独一块（四个时间 + 期限规则）与「其他登录」表格（登录时间 + 编号缩写 / 状态 / 最近使用 / 自动退出于）；表格时间用今天、昨天等简短写法，完整时间在悬停提示中\n- 已退出的登录不再显示退出按钮；已过期、已失效的登录仍可退出以撤销业务系统中残留的授权，按钮改为轻量样式，整行弱化\n- 退出确认弹窗底部改为「取消 + 确认退出」，补充最近使用时间，登录编号带名称与注解；账号标识同样带名称与注解\n- 单测改用新的邮箱按钮与字段名，新增「当前登录单独列出、已退出的登录不提供退出按钮」用例；acceptance-p11-t02 同步新的邮箱登记流程与已验证文案，acceptance-t05 依赖的类名与按钮名保持不变\n\n验证：\n- npm run format:check：通过\n- npm run typecheck：通过\n- npm run lint：通过\n- npm run test：26 个测试文件、224 项全部通过\n- 浏览器检查 1280 宽、375 窄屏与亮暗色，整页无横向溢出；邮箱登记表单与退出确认弹窗只打开查看，未实际提交\n- acceptance-p11-t02、acceptance-t05：未运行\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/3973681b67a737220c25c4bc3f916ca2b687b5ee","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-13T00:28:12-07:00","added":[],"removed":[],"modified":["iam-admin-web/scripts/acceptance-p11-t02.mjs","iam-admin-web/src/pages/EmailRecoveryPage.tsx","iam-admin-web/src/pages/PersonalPage.tsx","iam-admin-web/src/styles/email.css","iam-admin-web/src/styles/personal.css","iam-admin-web/src/test/email-recovery.test.tsx","iam-admin-web/src/test/personal.test.tsx"]},{"id":"2508f797ba72291a981665d5f4fcc4fb86280af8","message":"feat(console): 为技术细节中的编号补充名称与用途注解\n\n技术细节原先只列出编号，部分地方连名称都没有，普通使用者看不懂这串字符是什么、什么时候用得上。本次为各页面技术细节中的编号、版本和代码补充名称与一句用途说明。\n\n实现内容：\n- TechDetails 展开后先显示一句总说明：这些编号用于定位记录，日常不需要关心，反馈问题时可复制给管理员或技术支持\n- DescriptionList 每项新增可选 hint，在值下方显示灰色注解；有注解时值包在 .dlist__value 中，按值定位的测试不受注解文字影响\n- 新增 lib/tech-hints.ts 统一注解文案：对象标识、记录版本、账号标识与成员标识的区别、密钥编号、客户端标识与客户端代码的区别等\n- 工作台账号标识、程序接入新建密钥后的密钥编号、应用接入新建客户端后的客户端标识原先只露出编号，改为带名称的描述列表并加注解\n- 企业、账号、成员、部门、用户组、应用接入、应用开通、角色、授权、程序接入、程序身份、权限查询接入、操作记录、状态变更影响预览中的技术细节逐项补充注解\n- 同步 acceptance-p10-t01、acceptance-t03 中按记录版本值定位的选择器为 dd .dlist__value\n\n验证：\n- npm run format:check：通过\n- npm run typecheck：通过\n- npm run lint：通过\n- npm run test：26 个测试文件、223 项全部通过（暂时移开个人中心未提交改动后单独运行）\n- 浏览器检查应用接入客户端详情抽屉的技术细节注解显示正常；其余页面未逐页目测\n- acceptance-p10-t01、acceptance-t03：未运行\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/2508f797ba72291a981665d5f4fcc4fb86280af8","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-13T00:27:34-07:00","added":["iam-admin-web/src/lib/tech-hints.ts"],"removed":[],"modified":["iam-admin-web/scripts/acceptance-p10-t01.mjs","iam-admin-web/scripts/acceptance-t03.mjs","iam-admin-web/src/components/Layout.tsx","iam-admin-web/src/pages/HomePage.tsx","iam-admin-web/src/pages/management/ApplicationAdmissionPage.tsx","iam-admin-web/src/pages/management/ApplicationLifecycle.tsx","iam-admin-web/src/pages/management/ApplicationsPage.tsx","iam-admin-web/src/pages/management/AuditPage.tsx","iam-admin-web/src/pages/management/BindingsPage.tsx","iam-admin-web/src/pages/management/DecisionCallersPage.tsx","iam-admin-web/src/pages/management/GroupsPage.tsx","iam-admin-web/src/pages/management/MachineClientsPage.tsx","iam-admin-web/src/pages/management/MembersPage.tsx","iam-admin-web/src/pages/management/OrganizationsPage.tsx","iam-admin-web/src/pages/management/PlatformPages.tsx","iam-admin-web/src/pages/management/PlatformTenantPage.tsx","iam-admin-web/src/pages/management/RolesPage.tsx","iam-admin-web/src/pages/management/ServicePrincipalsPage.tsx","iam-admin-web/src/styles/components.css"]},{"id":"e5c32be5d8e106d727495fd92d5b3bf6ab2a3b4f","message":"feat(console): 把权限查询接入改为分区详情抽屉并以选择代替粘贴标识登记\n\n权限查询接入页列表与详情只显示一串 UUID，登记时需要手动粘贴企业、应用、服务三个标识；系统过期后状态仍显示「正常」，管理员无法看出它的查询已被拒绝。本次按控制台已定的列表、抽屉与弹窗样式重排该页。\n\n实现内容：\n- 列表改为「查询的应用 / 所属企业 / 到期时间 / 状态」，应用名称是打开详情的按钮、整行可点；企业与应用名称各读取第一页（最多 100 个），读不到时回退为「类别 + 标识前 8 位」\n- 正常但已过期的系统显示「已过期」徽标并提示查询会被拒绝，正常且 3 天内到期时提前提醒；列表新增定制空状态\n- 详情抽屉分「基本信息（企业、应用、服务名称）/ 密钥说明 / 停用（危险区）」，四个标识与固定查询范围收进技术细节；停用默认收起为按钮，展开后勾选确认、可取消，停用后抽屉保持打开并把焦点留在抽屉上\n- 登记改为两步：平铺列表选正常状态的企业，再用单选卡片选该企业已启用的应用和应用下的服务，填写摘要与到期时间（输入框限定现在至 30 天后）；底部为「重新选择企业 / 确认登记」，提交字段与原来一致\n- 公共样式 .card__actions 不再收缩，卡片说明较长时操作按钮保持一行；600px 以下卡片头部换行，按钮排到标题下方\n- 同步登记单测为按企业、应用、服务选择的流程，acceptance-t03 的 A11 改为点击应用名称打开详情、展开停用并等待停用后的说明\n\n验证：\n- npm run format:check、npm run lint：通过\n- npx tsc -b：通过\n- npm run test：26 个测试文件、223 项全部通过\n- 浏览器在演示环境查看 1280 宽、375 窄屏与亮暗色；演示环境未开启登记功能，登记流程用页面内临时拦截请求验证，提交字段正确且未写入后端\n- acceptance-t03：未运行\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/e5c32be5d8e106d727495fd92d5b3bf6ab2a3b4f","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-12T23:49:35-07:00","added":[],"removed":[],"modified":["iam-admin-web/scripts/acceptance-t03.mjs","iam-admin-web/src/pages/management/DecisionCallersPage.tsx","iam-admin-web/src/styles/components.css","iam-admin-web/src/test/application-management.test.tsx"]}],"total_commits":0,"head_commit":{"id":"ff5ee33515b0a21b6ba738d00c52373fabfaa50d","message":"feat(console): 接入权限说明与操作记录的操作对象快照\n\n后端已为权限增加可选说明，并在操作记录中返回操作对象类型、代码快照和展示摘要。控制台此前无法填写或查看权限说明，操作记录也看不出操作了哪个对象。\n\n实现内容：\n- 权限类型增加 description；完整清单提交时其余每条权限原样带上当前说明或 null，版本号固定为当前值加 1\n- 平台「新增或修改权限」弹窗增加可选说明多行框：预填已有说明、显示字数、上限 1000、拦截回车，换行/制表符/格式字符在前端提示，首尾空白去掉、清空或全空白提交 null\n- 后端返回 INVALID_PERMISSION_DESCRIPTION 时给出具体修改提示\n- PermissionLabel 支持显示说明；平台权限表、企业权限清单（搜索可匹配说明）与 PermissionPicker 显示说明，为空时不占位\n- PermissionPicker 中说明经 aria-describedby 关联，不并入勾选框名称\n- 操作记录列表在操作名称下显示「类型「代码」 · 应用」；未知类型统一称「对象」，无快照时省略\n- 操作记录详情增加「操作对象」，摘要优先 display_summary，原 summary 移到技术细节「内部摘要」；旧记录说明未记录对象名称\n- acceptance-t03 同步新的按钮名称\n\n验证：\n- npm run format:check、npm run lint、npm run typecheck：通过\n- npm test：26 个测试文件、227 项通过（新增说明保留与清空、说明校验、编辑弹窗、选择器无障碍名称、操作对象快照与回退用例）\n- 浏览器在 1280 宽、375 窄屏及亮/暗色下用页面内临时拦截 fetch 模拟新字段检查显示：正常\n- 未与包含 V29 的新后端联调；acceptance-t03 未运行\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/ff5ee33515b0a21b6ba738d00c52373fabfaa50d","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-13T00:48:33-07:00","added":[],"removed":[],"modified":["iam-admin-web/scripts/acceptance-t03.mjs","iam-admin-web/src/lib/audit-actions.ts","iam-admin-web/src/lib/t03-api.ts","iam-admin-web/src/pages/management/ApplicationContracts.tsx","iam-admin-web/src/pages/management/AuditPage.tsx","iam-admin-web/src/pages/management/AuthorizationShared.tsx","iam-admin-web/src/pages/management/RolesPage.tsx","iam-admin-web/src/styles/applications.css","iam-admin-web/src/styles/audit.css","iam-admin-web/src/styles/authorization.css","iam-admin-web/src/test/application-management.test.tsx","iam-admin-web/src/test/audit.test.tsx","iam-admin-web/src/test/authorization-management.test.tsx"]},"repository":{"id":125,"owner":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"228834386@qq.com","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"},"name":"IAM","full_name":"pengzhiyu/IAM","description":"Identity and Access Management(身份识别与访问管理)","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":102073,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/pengzhiyu/IAM/languages","html_url":"https://gitea.g-hi.com/pengzhiyu/IAM","url":"https://gitea.g-hi.com/api/v1/repos/pengzhiyu/IAM","link":"","ssh_url":"git@gitea.g-hi.com:pengzhiyu/IAM.git","clone_url":"https://gitea.g-hi.com/pengzhiyu/IAM.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":2,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-10-08T17:04:24+08:00","updated_at":"2026-10-13T15:52:47+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"16+pengzhiyu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"},"sender":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"16+pengzhiyu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"}}...
|
push
|
3
|
4
|
1791878088
|
1791878106
|
0
|
1791877984
|
1791878106
|
|
|
0
|
Edit
Delete
|
|
25820
|
feat(console): 合并应用中心导航、权限清单按行修改与概览页重排
|
125
|
16
|
verify.yml
|
9
|
16
|
0
|
refs/heads/main
|
cf70e039ad30edff8e3a51877be4561ed564e95f
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"ff5ee33515b0a21b6ba738d00c52373fabfaa50d","after":"cf70e039ad30edff8e3a51877be4561ed564e95f","compare_url":"https://gitea.g-hi.com/pengzhiyu/IAM/compare/ff5ee33515b0a21b6ba738d00c52373fabfaa50d...cf70e039ad30edff8e3a51877be4561ed564e95f","commits":[{"id":"cf70e039ad30edff8e3a51877be4561ed564e95f","message":"feat(console): 合并应用中心导航、权限清单按行修改与概览页重排\n\nmain 停在 ff5ee33 之后，控制台仍是旧的侧栏分组、权限清单整体编辑和早期概览页布局。合并 feat/console-layout 上其后的 4 个前端提交，完成控制台全部页面的布局改造。\n\n实现内容：\n- 权限清单把新增与修改拆开，平台侧支持按行修改名称与说明，企业侧「可用权限」提供去平台修改的入口；权限名称等于代码时编辑弹窗不再预填代码，用户组事件标签改为「创建用户组」\n- 转义 5 处代码输入框 pattern 中的连字符\n- 侧栏分为「平台管理 / 应用 / 企业管理 / 应用授权」四组，应用定义独立成「应用」分组（网址仍为 /platform/applications），统一「应用列表」「权限定义与资源规则」「所有企业共用」「可用权限」等命名\n- 工作台改为平台管理 / 应用 / 企业管理三个并列入口，加上「我的企业」表格与账号摘要；平台概览的「需要你关注」三类事项固定列出；企业概览的应用改为表格；应用概览的三步引导放进卡片并显示进度；三个概览的功能入口按用途分两栏\n\n验证：\n- 分支上各提交前运行 format:check、lint、typecheck 与 Vitest，最后一次 27 个测试文件、234 项全部通过\n- 合并无冲突，只涉及 iam-admin-web/ 下的文件；main 上相对分支只多出 568be88（两处集成测试），合并后的前端文件与分支末端 695ea4d 一致\n- main 上未单独重新运行检查；验收脚本未运行\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/cf70e039ad30edff8e3a51877be4561ed564e95f","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-13T07:22:40-07:00","added":["iam-admin-web/src/test/home.test.tsx"],"removed":[],"modified":["iam-admin-web/scripts/acceptance-p10-t02.mjs","iam-admin-web/scripts/acceptance-p10-t03.mjs","iam-admin-web/scripts/acceptance-t03.mjs","iam-admin-web/src/data/pages.ts","iam-admin-web/src/lib/audit-actions.ts","iam-admin-web/src/pages/AppOverview.tsx","iam-admin-web/src/pages/HomePage.tsx","iam-admin-web/src/pages/PlatformOverview.tsx","iam-admin-web/src/pages/ScopePages.tsx","iam-admin-web/src/pages/TenantOverview.tsx","iam-admin-web/src/pages/management/ApplicationContracts.tsx","iam-admin-web/src/pages/management/ApplicationsPage.tsx","iam-admin-web/src/pages/management/BindingScopes.tsx","iam-admin-web/src/pages/management/BindingsPage.tsx","iam-admin-web/src/pages/management/DecisionCallersPage.tsx","iam-admin-web/src/pages/management/RolesPage.tsx","iam-admin-web/src/pages/management/ServicePrincipalsPage.tsx","iam-admin-web/src/shell/ContextSwitcher.tsx","iam-admin-web/src/shell/ContextTrail.tsx","iam-admin-web/src/shell/NavRail.tsx","iam-admin-web/src/shell/scope.tsx","iam-admin-web/src/styles/layout.css","iam-admin-web/src/styles/management.css","iam-admin-web/src/styles/pages.css","iam-admin-web/src/test/app-overview.test.tsx","iam-admin-web/src/test/application-management.test.tsx","iam-admin-web/src/test/platform-overview.test.tsx","iam-admin-web/src/test/sidebar.test.tsx","iam-admin-web/src/test/tenant-overview.test.tsx"]},{"id":"568be8853874bf5d720f1c49e060edd5f4d20825","message":"test(protocol): 按完整迁移历史校验模式切换与启动反例\n\n新增 V29 后，两处固定最高迁移版本为 28 的测试不再符合当前完整提交。改为核对动作前后历史保持，避免每次新增迁移重复修改版本预期。\n\n实现内容：\n- 仅修改 ScopedLifecycleIT 和 IdentityReadLifecycleIT 两处迁移断言\n- 按 installed_rank 比较全部 version、checksum、success，显式要求 V27、V28 已成功\n- 保留并发互斥、释放、SCOPED 函数缺失反例及原安全断言\n\n验证：\n- Java 25，在独立快照执行 ./mvnw -o -B -ntp -pl iam-server -am verify -Dit.test=ScopedLifecycleIT,IdentityReadLifecycleIT -Dfailsafe.failIfNoSpecifiedTests=false -Dfailsafe.skipAfterFailureCount=1 -Dsurefire.skipAfterFailureCount=1：通过\n- 180 项单测、ScopedLifecycleIT 9 项及 IdentityReadLifecycleIT 40 项集成通过，零失败、错误或跳过；格式、编译和打包通过\n- git diff --check：通过\n- 本提交前未运行含控制台全量验收；随后从最新完整提交另建快照验证\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/568be8853874bf5d720f1c49e060edd5f4d20825","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-13T07:00:04-07:00","added":[],"removed":[],"modified":["iam-server/src/test/java/com/iam/server/protocol/IdentityReadLifecycleIT.java","iam-server/src/test/java/com/iam/server/protocol/ScopedLifecycleIT.java"]},{"id":"695ea4d16f5066a81e3808b0ba4432b2a69cbd87","message":"feat(console): 重排工作台与平台、企业、应用三个概览页\n\n四个概览页此前沿用早期布局：工作台只有两个入口，待办和应用用零散小卡片展示，功能入口不分组，与已改造的列表页风格不一致。本次按「上方状态卡片、下方两栏分组入口」统一四页布局。\n\n实现内容：\n- 工作台：三个并列入口「平台管理 / 应用 / 企业管理」，新增应用配色 entry--apps；应用管理员入口写明负责的应用，无身份的入口锁定并说明原因\n- 工作台新增「我的企业」可点表格（企业、你的身份，每次读取 10 条，满页时可加载更多），账号摘要放侧栏并链接个人中心，基本概念改为四格横排\n- 平台概览：「需要你关注」改为卡片，三类事项固定列出，没有内容时显示对勾与「目前没有。」，有内容时显示数量、最多 3 个名称与处理入口，读取失败只在该行重试\n- 企业概览：本企业的应用改为卡片内表格，停用的应用不可进入并注明原因；空状态改用公共 EmptyList\n- 应用概览：三步引导放进卡片，步骤之间用分隔线，右上角显示完成进度；任一步读取中或失败时不显示进度\n- 三个概览的功能入口统一用 overview-groups 两栏分组，窄屏改为上下排列；删除不再使用的待办卡片、应用卡片与一切正常提示条样式\n\n验证：\n- npm run typecheck、npm run lint、npm run format:check：通过\n- npm run test：27 个测试文件、234 项通过（同步修改平台、企业、应用概览单测，新增 home.test.tsx 4 项）\n- 浏览器检查 1280 宽、375 窄屏与暗色：四页无页面级横向溢出；待办与停用应用状态用页面内临时拦截 fetch 验证\n- 验收脚本未运行（脚本只依赖「工作台」标题与 .entry--locked，均已保留）\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/695ea4d16f5066a81e3808b0ba4432b2a69cbd87","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-13T06:50:19-07:00","added":["iam-admin-web/src/test/home.test.tsx"],"removed":[],"modified":["iam-admin-web/src/pages/AppOverview.tsx","iam-admin-web/src/pages/HomePage.tsx","iam-admin-web/src/pages/PlatformOverview.tsx","iam-admin-web/src/pages/TenantOverview.tsx","iam-admin-web/src/styles/pages.css","iam-admin-web/src/test/app-overview.test.tsx","iam-admin-web/src/test/platform-overview.test.tsx","iam-admin-web/src/test/tenant-overview.test.tsx"]},{"id":"ceb5884bba8e1274c550348e99226f46614e6511","message":"feat(console): 把应用定义独立成「应用」分组并统一权限相关命名\n\nIAM 面向多租户，一个应用登记后可由多家企业开通。原导航把应用的全局定义（登录客户端、受保护的服务、权限与资源规则）放在「平台管理」下，企业内的应用授权又叫「应用管理」，使用者难以分清权限为何不在应用层维护、改了会影响谁。\n\n实现内容：\n- 侧边栏改为「平台管理 / 应用 / 企业管理 / 应用授权」四组：平台管理只对平台管理员展示链接；新增「应用」分组（应用列表），平台管理员与应用管理员可见；原「应用管理」改名「应用授权」；网址保持不变\n- 应用详情网址仍在 /platform/applications 下，导航高亮、顶部上下文标识（「应用定义」）与面包屑（应用 › 应用列表）归入「应用」\n- 平台侧「应用接入」改为「应用列表」、「权限清单与资源规则」改为「权限定义与资源规则」，徽标改为「所有企业共用」，权限定义卡片与修改弹窗写明对所有开通企业生效\n- 企业侧「权限清单」改为「可用权限」，入口改为「修改权限定义」；工作台、平台概览、切换对话框、无权限说明、操作记录操作名称及相关提示同步新命名\n- 侧边栏测试改为可切换平台角色，新增平台管理员与应用管理员分组可见性用例；弹出面板测试先等待焦点进入面板再按 Esc，消除原有时序抖动\n- acceptance-t03、acceptance-p10-t02、acceptance-p10-t03 同步新的标签名称\n\n验证：\n- npm run format:check、npm run lint、npm run typecheck：通过\n- npm test：26 个测试文件、230 项通过；侧边栏测试单独连续运行 5 次均通过\n- 浏览器经 5173 连接演示后端，在 1280 宽、375 窄屏及亮/暗色下检查四个分组、应用详情、企业可用权限与跳转、修改弹窗影响说明：正常\n- 应用管理员视角仅有单元测试覆盖（演示环境无应用管理员账号）；验收脚本未运行\n- 「已在 N 个企业开通」需后端提供按应用统计的接口，本次未实现\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/ceb5884bba8e1274c550348e99226f46614e6511","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-13T06:36:58-07:00","added":[],"removed":[],"modified":["iam-admin-web/scripts/acceptance-p10-t02.mjs","iam-admin-web/scripts/acceptance-p10-t03.mjs","iam-admin-web/scripts/acceptance-t03.mjs","iam-admin-web/src/data/pages.ts","iam-admin-web/src/lib/audit-actions.ts","iam-admin-web/src/pages/AppOverview.tsx","iam-admin-web/src/pages/HomePage.tsx","iam-admin-web/src/pages/PlatformOverview.tsx","iam-admin-web/src/pages/ScopePages.tsx","iam-admin-web/src/pages/management/ApplicationContracts.tsx","iam-admin-web/src/pages/management/ApplicationsPage.tsx","iam-admin-web/src/pages/management/BindingScopes.tsx","iam-admin-web/src/pages/management/BindingsPage.tsx","iam-admin-web/src/pages/management/DecisionCallersPage.tsx","iam-admin-web/src/pages/management/RolesPage.tsx","iam-admin-web/src/shell/ContextSwitcher.tsx","iam-admin-web/src/shell/ContextTrail.tsx","iam-admin-web/src/shell/NavRail.tsx","iam-admin-web/src/shell/scope.tsx","iam-admin-web/src/styles/layout.css","iam-admin-web/src/test/app-overview.test.tsx","iam-admin-web/src/test/sidebar.test.tsx"]},{"id":"7a1bd50d627fb56ebd548956a8a05c61fd306f64","message":"fix(console): 转义代码输入框 pattern 中的连字符\n\n浏览器按 v 模式编译 input 的 pattern，字符类末尾未转义的「-」会被判为非法正则，浏览器报错并直接跳过该格式校验。其余页面已使用转义写法，本次统一。\n\n实现内容：\n- 权限代码（新增权限、资源类型代码）、角色代码、程序身份代码、应用代码共 5 处 pattern 改为 \\- 转义，匹配规则不变\n\n验证：\n- 两种写法用 new RegExp(..., 'v') 编译通过\n- 浏览器中新增权限弹窗输入 Bad-Code 时 validity.patternMismatch 为 true\n- npm run format:check、npm run lint、npm run typecheck：通过；npm test：26 个测试文件、228 项通过\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/7a1bd50d627fb56ebd548956a8a05c61fd306f64","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-13T06:11:02-07:00","added":[],"removed":[],"modified":["iam-admin-web/src/pages/management/ApplicationContracts.tsx","iam-admin-web/src/pages/management/ApplicationsPage.tsx","iam-admin-web/src/pages/management/RolesPage.tsx","iam-admin-web/src/pages/management/ServicePrincipalsPage.tsx"]}],"total_commits":0,"head_commit":{"id":"cf70e039ad30edff8e3a51877be4561ed564e95f","message":"feat(console): 合并应用中心导航、权限清单按行修改与概览页重排\n\nmain 停在 ff5ee33 之后，控制台仍是旧的侧栏分组、权限清单整体编辑和早期概览页布局。合并 feat/console-layout 上其后的 4 个前端提交，完成控制台全部页面的布局改造。\n\n实现内容：\n- 权限清单把新增与修改拆开，平台侧支持按行修改名称与说明，企业侧「可用权限」提供去平台修改的入口；权限名称等于代码时编辑弹窗不再预填代码，用户组事件标签改为「创建用户组」\n- 转义 5 处代码输入框 pattern 中的连字符\n- 侧栏分为「平台管理 / 应用 / 企业管理 / 应用授权」四组，应用定义独立成「应用」分组（网址仍为 /platform/applications），统一「应用列表」「权限定义与资源规则」「所有企业共用」「可用权限」等命名\n- 工作台改为平台管理 / 应用 / 企业管理三个并列入口，加上「我的企业」表格与账号摘要；平台概览的「需要你关注」三类事项固定列出；企业概览的应用改为表格；应用概览的三步引导放进卡片并显示进度；三个概览的功能入口按用途分两栏\n\n验证：\n- 分支上各提交前运行 format:check、lint、typecheck 与 Vitest，最后一次 27 个测试文件、234 项全部通过\n- 合并无冲突，只涉及 iam-admin-web/ 下的文件；main 上相对分支只多出 568be88（两处集成测试），合并后的前端文件与分支末端 695ea4d 一致\n- main 上未单独重新运行检查；验收脚本未运行\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/cf70e039ad30edff8e3a51877be4561ed564e95f","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-13T07:22:40-07:00","added":["iam-admin-web/src/test/home.test.tsx"],"removed":[],"modified":["iam-admin-web/scripts/acceptance-p10-t02.mjs","iam-admin-web/scripts/acceptance-p10-t03.mjs","iam-admin-web/scripts/acceptance-t03.mjs","iam-admin-web/src/data/pages.ts","iam-admin-web/src/lib/audit-actions.ts","iam-admin-web/src/pages/AppOverview.tsx","iam-admin-web/src/pages/HomePage.tsx","iam-admin-web/src/pages/PlatformOverview.tsx","iam-admin-web/src/pages/ScopePages.tsx","iam-admin-web/src/pages/TenantOverview.tsx","iam-admin-web/src/pages/management/ApplicationContracts.tsx","iam-admin-web/src/pages/management/ApplicationsPage.tsx","iam-admin-web/src/pages/management/BindingScopes.tsx","iam-admin-web/src/pages/management/BindingsPage.tsx","iam-admin-web/src/pages/management/DecisionCallersPage.tsx","iam-admin-web/src/pages/management/RolesPage.tsx","iam-admin-web/src/pages/management/ServicePrincipalsPage.tsx","iam-admin-web/src/shell/ContextSwitcher.tsx","iam-admin-web/src/shell/ContextTrail.tsx","iam-admin-web/src/shell/NavRail.tsx","iam-admin-web/src/shell/scope.tsx","iam-admin-web/src/styles/layout.css","iam-admin-web/src/styles/management.css","iam-admin-web/src/styles/pages.css","iam-admin-web/src/test/app-overview.test.tsx","iam-admin-web/src/test/application-management.test.tsx","iam-admin-web/src/test/platform-overview.test.tsx","iam-admin-web/src/test/sidebar.test.tsx","iam-admin-web/src/test/tenant-overview.test.tsx"]},"repository":{"id":125,"owner":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"228834386@qq.com","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"},"name":"IAM","full_name":"pengzhiyu/IAM","description":"Identity and Access Management(身份识别与访问管理)","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":102073,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/pengzhiyu/IAM/languages","html_url":"https://gitea.g-hi.com/pengzhiyu/IAM","url":"https://gitea.g-hi.com/api/v1/repos/pengzhiyu/IAM","link":"","ssh_url":"git@gitea.g-hi.com:pengzhiyu/IAM.git","clone_url":"https://gitea.g-hi.com/pengzhiyu/IAM.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":2,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-10-08T17:04:24+08:00","updated_at":"2026-10-13T15:53:04+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"16+pengzhiyu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"},"sender":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"16+pengzhiyu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"}}...
|
push
|
2
|
4
|
1791901404
|
1791901620
|
0
|
1791901403
|
1791901620
|
|
|
0
|
Edit
Delete
|
|
25821
|
feat(console): 重排工作台与平台、企业、应用三个概览页
|
125
|
16
|
verify.yml
|
10
|
16
|
0
|
refs/heads/feat/console-layout
|
695ea4d16f5066a81e3808b0ba4432b2a69cbd87
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/feat/console-layout {"ref":"refs/heads/feat/console-layout","before":"ff5ee33515b0a21b6ba738d00c52373fabfaa50d","after":"695ea4d16f5066a81e3808b0ba4432b2a69cbd87","compare_url":"https://gitea.g-hi.com/pengzhiyu/IAM/compare/ff5ee33515b0a21b6ba738d00c52373fabfaa50d...695ea4d16f5066a81e3808b0ba4432b2a69cbd87","commits":[{"id":"695ea4d16f5066a81e3808b0ba4432b2a69cbd87","message":"feat(console): 重排工作台与平台、企业、应用三个概览页\n\n四个概览页此前沿用早期布局：工作台只有两个入口，待办和应用用零散小卡片展示，功能入口不分组，与已改造的列表页风格不一致。本次按「上方状态卡片、下方两栏分组入口」统一四页布局。\n\n实现内容：\n- 工作台：三个并列入口「平台管理 / 应用 / 企业管理」，新增应用配色 entry--apps；应用管理员入口写明负责的应用，无身份的入口锁定并说明原因\n- 工作台新增「我的企业」可点表格（企业、你的身份，每次读取 10 条，满页时可加载更多），账号摘要放侧栏并链接个人中心，基本概念改为四格横排\n- 平台概览：「需要你关注」改为卡片，三类事项固定列出，没有内容时显示对勾与「目前没有。」，有内容时显示数量、最多 3 个名称与处理入口，读取失败只在该行重试\n- 企业概览：本企业的应用改为卡片内表格，停用的应用不可进入并注明原因；空状态改用公共 EmptyList\n- 应用概览：三步引导放进卡片，步骤之间用分隔线，右上角显示完成进度；任一步读取中或失败时不显示进度\n- 三个概览的功能入口统一用 overview-groups 两栏分组，窄屏改为上下排列；删除不再使用的待办卡片、应用卡片与一切正常提示条样式\n\n验证：\n- npm run typecheck、npm run lint、npm run format:check：通过\n- npm run test：27 个测试文件、234 项通过（同步修改平台、企业、应用概览单测，新增 home.test.tsx 4 项）\n- 浏览器检查 1280 宽、375 窄屏与暗色：四页无页面级横向溢出；待办与停用应用状态用页面内临时拦截 fetch 验证\n- 验收脚本未运行（脚本只依赖「工作台」标题与 .entry--locked，均已保留）\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/695ea4d16f5066a81e3808b0ba4432b2a69cbd87","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-13T06:50:19-07:00","added":["iam-admin-web/src/test/home.test.tsx"],"removed":[],"modified":["iam-admin-web/src/pages/AppOverview.tsx","iam-admin-web/src/pages/HomePage.tsx","iam-admin-web/src/pages/PlatformOverview.tsx","iam-admin-web/src/pages/TenantOverview.tsx","iam-admin-web/src/styles/pages.css","iam-admin-web/src/test/app-overview.test.tsx","iam-admin-web/src/test/platform-overview.test.tsx","iam-admin-web/src/test/tenant-overview.test.tsx"]},{"id":"ceb5884bba8e1274c550348e99226f46614e6511","message":"feat(console): 把应用定义独立成「应用」分组并统一权限相关命名\n\nIAM 面向多租户，一个应用登记后可由多家企业开通。原导航把应用的全局定义（登录客户端、受保护的服务、权限与资源规则）放在「平台管理」下，企业内的应用授权又叫「应用管理」，使用者难以分清权限为何不在应用层维护、改了会影响谁。\n\n实现内容：\n- 侧边栏改为「平台管理 / 应用 / 企业管理 / 应用授权」四组：平台管理只对平台管理员展示链接；新增「应用」分组（应用列表），平台管理员与应用管理员可见；原「应用管理」改名「应用授权」；网址保持不变\n- 应用详情网址仍在 /platform/applications 下，导航高亮、顶部上下文标识（「应用定义」）与面包屑（应用 › 应用列表）归入「应用」\n- 平台侧「应用接入」改为「应用列表」、「权限清单与资源规则」改为「权限定义与资源规则」，徽标改为「所有企业共用」，权限定义卡片与修改弹窗写明对所有开通企业生效\n- 企业侧「权限清单」改为「可用权限」，入口改为「修改权限定义」；工作台、平台概览、切换对话框、无权限说明、操作记录操作名称及相关提示同步新命名\n- 侧边栏测试改为可切换平台角色，新增平台管理员与应用管理员分组可见性用例；弹出面板测试先等待焦点进入面板再按 Esc，消除原有时序抖动\n- acceptance-t03、acceptance-p10-t02、acceptance-p10-t03 同步新的标签名称\n\n验证：\n- npm run format:check、npm run lint、npm run typecheck：通过\n- npm test：26 个测试文件、230 项通过；侧边栏测试单独连续运行 5 次均通过\n- 浏览器经 5173 连接演示后端，在 1280 宽、375 窄屏及亮/暗色下检查四个分组、应用详情、企业可用权限与跳转、修改弹窗影响说明：正常\n- 应用管理员视角仅有单元测试覆盖（演示环境无应用管理员账号）；验收脚本未运行\n- 「已在 N 个企业开通」需后端提供按应用统计的接口，本次未实现\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/ceb5884bba8e1274c550348e99226f46614e6511","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-13T06:36:58-07:00","added":[],"removed":[],"modified":["iam-admin-web/scripts/acceptance-p10-t02.mjs","iam-admin-web/scripts/acceptance-p10-t03.mjs","iam-admin-web/scripts/acceptance-t03.mjs","iam-admin-web/src/data/pages.ts","iam-admin-web/src/lib/audit-actions.ts","iam-admin-web/src/pages/AppOverview.tsx","iam-admin-web/src/pages/HomePage.tsx","iam-admin-web/src/pages/PlatformOverview.tsx","iam-admin-web/src/pages/ScopePages.tsx","iam-admin-web/src/pages/management/ApplicationContracts.tsx","iam-admin-web/src/pages/management/ApplicationsPage.tsx","iam-admin-web/src/pages/management/BindingScopes.tsx","iam-admin-web/src/pages/management/BindingsPage.tsx","iam-admin-web/src/pages/management/DecisionCallersPage.tsx","iam-admin-web/src/pages/management/RolesPage.tsx","iam-admin-web/src/shell/ContextSwitcher.tsx","iam-admin-web/src/shell/ContextTrail.tsx","iam-admin-web/src/shell/NavRail.tsx","iam-admin-web/src/shell/scope.tsx","iam-admin-web/src/styles/layout.css","iam-admin-web/src/test/app-overview.test.tsx","iam-admin-web/src/test/sidebar.test.tsx"]},{"id":"7a1bd50d627fb56ebd548956a8a05c61fd306f64","message":"fix(console): 转义代码输入框 pattern 中的连字符\n\n浏览器按 v 模式编译 input 的 pattern，字符类末尾未转义的「-」会被判为非法正则，浏览器报错并直接跳过该格式校验。其余页面已使用转义写法，本次统一。\n\n实现内容：\n- 权限代码（新增权限、资源类型代码）、角色代码、程序身份代码、应用代码共 5 处 pattern 改为 \\- 转义，匹配规则不变\n\n验证：\n- 两种写法用 new RegExp(..., 'v') 编译通过\n- 浏览器中新增权限弹窗输入 Bad-Code 时 validity.patternMismatch 为 true\n- npm run format:check、npm run lint、npm run typecheck：通过；npm test：26 个测试文件、228 项通过\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/7a1bd50d627fb56ebd548956a8a05c61fd306f64","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-13T06:11:02-07:00","added":[],"removed":[],"modified":["iam-admin-web/src/pages/management/ApplicationContracts.tsx","iam-admin-web/src/pages/management/ApplicationsPage.tsx","iam-admin-web/src/pages/management/RolesPage.tsx","iam-admin-web/src/pages/management/ServicePrincipalsPage.tsx"]},{"id":"54b1e1ee340da10ec01235cc9d1cf8d6ca22ca5c","message":"feat(console): 把权限清单的新增与修改拆开并支持按行修改\n\n平台权限清单原先只有一个「新增或修改权限」入口，要修改已有权限必须手输准确的代码，输错会误建一项不能删除的权限；企业侧只读权限清单也看不出该去哪里修改。\n\n实现内容：\n- 平台权限清单每行增加「修改」：代码只读展示，名称和说明预填，内容未变不能保存，修改不再要求勾选确认\n- 未设置名称的权限名称框留空且可留空，只改说明时名称保持原样；已停用的权限也可修改名称和说明\n- 顶部按钮改为「新增权限」：代码与已有权限重复时拦下并引导到列表「修改」，新增仍需勾选确认\n- 企业侧应用权限清单在平台管理员或该应用的应用管理员登录时，页头显示「去平台修改权限」入口\n- 操作记录中 authorization.group_changed 改称「创建用户组」（后端只在新建用户组时写入）\n- 表格行末操作按钮新增 management-actions--end 靠右排列\n- acceptance-t03 改用「新增权限」按钮，并把提交按钮限定在弹窗内\n\n验证：\n- npm run format:check、npm run lint、npm run typecheck：通过\n- npm test：26 个测试文件、228 项通过（新增修改模式与新增重复代码拦截用例）\n- 浏览器经 5173 连接演示后端实际保存：只填说明保存成功且名称保持原样、其余权限说明保留、清单版本逐次加 1；重复代码被拦下；企业侧入口跳转与说明显示正常\n- acceptance-t03 未运行\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/54b1e1ee340da10ec01235cc9d1cf8d6ca22ca5c","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-13T06:10:34-07:00","added":[],"removed":[],"modified":["iam-admin-web/scripts/acceptance-t03.mjs","iam-admin-web/src/lib/audit-actions.ts","iam-admin-web/src/pages/management/ApplicationContracts.tsx","iam-admin-web/src/pages/management/RolesPage.tsx","iam-admin-web/src/styles/management.css","iam-admin-web/src/test/application-management.test.tsx"]}],"total_commits":0,"head_commit":{"id":"695ea4d16f5066a81e3808b0ba4432b2a69cbd87","message":"feat(console): 重排工作台与平台、企业、应用三个概览页\n\n四个概览页此前沿用早期布局：工作台只有两个入口，待办和应用用零散小卡片展示，功能入口不分组，与已改造的列表页风格不一致。本次按「上方状态卡片、下方两栏分组入口」统一四页布局。\n\n实现内容：\n- 工作台：三个并列入口「平台管理 / 应用 / 企业管理」，新增应用配色 entry--apps；应用管理员入口写明负责的应用，无身份的入口锁定并说明原因\n- 工作台新增「我的企业」可点表格（企业、你的身份，每次读取 10 条，满页时可加载更多），账号摘要放侧栏并链接个人中心，基本概念改为四格横排\n- 平台概览：「需要你关注」改为卡片，三类事项固定列出，没有内容时显示对勾与「目前没有。」，有内容时显示数量、最多 3 个名称与处理入口，读取失败只在该行重试\n- 企业概览：本企业的应用改为卡片内表格，停用的应用不可进入并注明原因；空状态改用公共 EmptyList\n- 应用概览：三步引导放进卡片，步骤之间用分隔线，右上角显示完成进度；任一步读取中或失败时不显示进度\n- 三个概览的功能入口统一用 overview-groups 两栏分组，窄屏改为上下排列；删除不再使用的待办卡片、应用卡片与一切正常提示条样式\n\n验证：\n- npm run typecheck、npm run lint、npm run format:check：通过\n- npm run test：27 个测试文件、234 项通过（同步修改平台、企业、应用概览单测，新增 home.test.tsx 4 项）\n- 浏览器检查 1280 宽、375 窄屏与暗色：四页无页面级横向溢出；待办与停用应用状态用页面内临时拦截 fetch 验证\n- 验收脚本未运行（脚本只依赖「工作台」标题与 .entry--locked，均已保留）\n","url":"https://gitea.g-hi.com/pengzhiyu/IAM/commit/695ea4d16f5066a81e3808b0ba4432b2a69cbd87","author":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"committer":{"name":"starry","email":"gamebyteyu@gmail.com","username":""},"verification":null,"timestamp":"2026-10-13T06:50:19-07:00","added":["iam-admin-web/src/test/home.test.tsx"],"removed":[],"modified":["iam-admin-web/src/pages/AppOverview.tsx","iam-admin-web/src/pages/HomePage.tsx","iam-admin-web/src/pages/PlatformOverview.tsx","iam-admin-web/src/pages/TenantOverview.tsx","iam-admin-web/src/styles/pages.css","iam-admin-web/src/test/app-overview.test.tsx","iam-admin-web/src/test/platform-overview.test.tsx","iam-admin-web/src/test/tenant-overview.test.tsx"]},"repository":{"id":125,"owner":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"228834386@qq.com","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"},"name":"IAM","full_name":"pengzhiyu/IAM","description":"Identity and Access Management(身份识别与访问管理)","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":102367,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/pengzhiyu/IAM/languages","html_url":"https://gitea.g-hi.com/pengzhiyu/IAM","url":"https://gitea.g-hi.com/api/v1/repos/pengzhiyu/IAM","link":"","ssh_url":"git@gitea.g-hi.com:pengzhiyu/IAM.git","clone_url":"https://gitea.g-hi.com/pengzhiyu/IAM.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":2,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-10-08T17:04:24+08:00","updated_at":"2026-10-13T22:23:23+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"16+pengzhiyu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"},"sender":{"id":16,"login":"pengzhiyu","login_name":"","source_id":0,"full_name":"","email":"16+pengzhiyu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/bcd8cfbb58b96e4afa8ab5f6ac09cb16","html_url":"https://gitea.g-hi.com/pengzhiyu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-07-15T09:26:56+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"pengzhiyu"}}...
|
push
|
2
|
4
|
1791901620
|
1791901831
|
0
|
1791901432
|
1791901831
|
|
|
0
|
Edit
Delete
|