| event_payload |
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"ec19ba1b701730e2901aba160298111d06e8660c","after":"ec29ace2dc8f4e3e51b716c3bb673b741f85b47f","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/ec19ba1b701730e2901aba160298111d06e8660c...ec29ace2dc8f4e3e51b716c3bb673b741f85b47f","commits":[{"id":"ec29ace2dc8f4e3e51b716c3bb673b741f85b47f","message":"docs(identity): 托管登录端到端首次走通记录——PKCE 换令牌 / JWKS 验签 / userinfo / 重放与篡改拒绝(缺失清单 I-7)\n\n- stack/reports/identity-oidc-e2e.2026-09-16.json:authorize → 登录(人工)→ 同意 → 回调码 → 换令牌 200(RS256 kid dev-20260916,iss http://localhost:3098/t/demo,tenant_id / sid / acr / amr / nonce)→ JWKS 验签 valid → userinfo 200 → 重放 400 → 篡改 401 → introspect 对 public client 401;授权码 60 s\n- 生产口径容器换令牌 503 属设计内(本地 JWK 签名器只允许 test / development;生产 = OpenBao Transit);演示用本机 development 口径 identity 单 profile 进程(:3101),常驻容器不动\n- 踩坑登记:bash 加载含 JSON 的 env 会剥双引号 → discovery 503 / token 500;值须单引号\n- runbook §2 与缺失清单 §8.1 同步\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/ec29ace2dc8f4e3e51b716c3bb673b741f85b47f","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-16T17:09:55-07:00","added":["stack/reports/identity-oidc-e2e.2026-09-16.json"],"removed":[],"modified":["docs/runbook.md","docs/缺失模块完善清单-2026-09-16.md"]}],"total_commits":0,"head_commit":{"id":"ec29ace2dc8f4e3e51b716c3bb673b741f85b47f","message":"docs(identity): 托管登录端到端首次走通记录——PKCE 换令牌 / JWKS 验签 / userinfo / 重放与篡改拒绝(缺失清单 I-7)\n\n- stack/reports/identity-oidc-e2e.2026-09-16.json:authorize → 登录(人工)→ 同意 → 回调码 → 换令牌 200(RS256 kid dev-20260916,iss http://localhost:3098/t/demo,tenant_id / sid / acr / amr / nonce)→ JWKS 验签 valid → userinfo 200 → 重放 400 → 篡改 401 → introspect 对 public client 401;授权码 60 s\n- 生产口径容器换令牌 503 属设计内(本地 JWK 签名器只允许 test / development;生产 = OpenBao Transit);演示用本机 development 口径 identity 单 profile 进程(:3101),常驻容器不动\n- 踩坑登记:bash 加载含 JSON 的 env 会剥双引号 → discovery 503 / token 500;值须单引号\n- runbook §2 与缺失清单 §8.1 同步\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/ec29ace2dc8f4e3e51b716c3bb673b741f85b47f","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-16T17:09:55-07:00","added":["stack/reports/identity-oidc-e2e.2026-09-16.json"],"removed":[],"modified":["docs/runbook.md","docs/缺失模块完善清单-2026-09-16.md"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":15100,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":42,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-17T07:57:53+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}... |