milky/asd-backend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
280 Commits 1 Branch 0 Tags
3135f790bbfa20a582d0f66054966d97d7ed98b6
Commit Graph

280 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
milky0217
3135f790bb fix: 移除 deploy 模板中的 PAYMENT_MAINTENANCE_MODE
Some checks failed
Deploy Backend / deploy (push) Has been cancelled
Details 
生产环境已配置支付宝正式密钥，关闭支付维护模式。
- 从 blue/green service 模板移除 Environment=PAYMENT_MAINTENANCE_MODE=true
- 服务器 .env 已更新为生产密钥
- 生产网关: openapi.alipay.com
 2026-07-22 20:06:11 +08:00
milky0217
6b0871f77d feat: 根据 User-Agent 自动切换手机/电脑网站支付
Some checks failed
Deploy Backend / deploy (push) Has been cancelled
Details 
- 新增 is_mobile_ua() 检测手机浏览器（mobile/android/iphone/ipad/harmonyos）
- build_alipay_form_html 新增 is_mobile 参数
- 手机端: alipay.trade.wap.pay + QUICK_WAP_PAY
- 桌面端: alipay.trade.page.pay + FAST_INSTANT_TRADE_PAY
- 同时应用于 payment_page 和 alipay_pay_page 两个入口
 2026-07-20 15:22:42 +08:00
milky0217
a7ffd387d9 feat: 添加访客登录 API (POST /api/guest-login) 支持网站独立支付
Some checks failed
Deploy Backend / deploy (push) Has been cancelled
Details 
- 新增 web_guest_login handler: 创建访客用户（免微信 code），返回 JWT
- 路由注册在公共区（无需 JWT 认证）
- /payment 页面新增「访客登录」按钮，直接选择套餐支付
- 保留微信小程序登录作为备选
- 已部署到 dev.xmclassmate.top 验证通过
 2026-07-20 15:08:30 +08:00
milky0217
2c86219c82 feat: Alipay 安全加固 + 切换手机网站支付 (wap.pay)
Some checks failed
Deploy Backend / deploy (push) Has been cancelled
Details 
- Phase 1: 移除 Git 中 ALIPAY 密钥，改用 EnvironmentFile
  所有 4 个 deploy 模板删除 ALIPAY_* 内联 Environment，改为指向 .env
  check_service_file() 不再要求 ALIPAY_APP_ID 在 Environment 中
  init_env() 生成模板添加 EnvironmentFile 行

- Phase 2: 切换到手机网站支付 (alipay.trade.wap.pay)
  payment.rs: product_code QUICK_WAP_PAY, method alipay.trade.wap.pay
  用户从手机浏览器访问时自动唤起支付宝 APP

- Phase 3: 服务器 .env 文件创建
  所有环境 .env 文件已通过 SSH 创建（600 权限）
  dev 使用沙箱网关 (openapi-sandbox.dl.alipaydev.com)
  prod 使用正式网关 (openapi.alipay.com)

- 生产部署完成（blue→green 双环境同步）
  密钥安全: 不再存在于任何 Git 跟踪文件中
 2026-07-20 14:52:39 +08:00
milky0217
4c5c879583 fix: static_files 添加 txt 的 Content-Type 映射 2026-07-20 09:36:00 +08:00
milky0217
70bb63be8d feat: 添加 robots.txt（屏蔽爬虫索引 API/支付） 2026-07-20 09:33:36 +08:00
milky0217
9fc5c2429e feat: daily-report.sh 每日健康报告邮件 + logwatch 替换 2026-07-20 09:28:49 +08:00
milky0217
1a359f8d84 fix: 日志输出从文件改为 stdout（journald 可见），紧凑格式，去掉 tracing-appender 2026-07-20 09:24:12 +08:00
milky0217
d9c9d1dca0 fix: test_nginx_proxy_temp 改用 remote() 执行 2026-07-19 09:58:57 +08:00
milky0217
941a8e5350 fix: insert_weather_data 配额查询使用已重命名的 membership_expires_at 列 2026-07-19 09:52:35 +08:00
milky0217
51752f2d4d fix: nginx AppArmor 缺少 proxy temp 路径；test: 新增 POST body 代理测试（避免权限遗漏上线）
Some checks failed
Deploy Backend / deploy (push) Has been cancelled
Details
2026-07-18 21:58:23 +08:00
milky0217
797a1438ea fix: nginx AppArmor 缺少 proxy temp 路径，导致保存功能无法使用
Some checks failed
Deploy Backend / deploy (push) Has been cancelled
Details
2026-07-18 21:57:28 +08:00
milky0217
79a07a882a fix: 🔴 Refresh token 泄露 JWT_SECRET — 改用随机 UUID 替代 base64(secret)
Some checks failed
Deploy Backend / deploy (push) Has been cancelled
Details
2026-07-17 20:23:35 +08:00
milky0217
5a5953f21f chore: 网页端名称统一改为小明计算助手
Some checks failed
Deploy Backend / deploy (push) Has been cancelled
Details
2026-07-17 13:33:20 +08:00
milky0217
2908d8c86c sec: 实施最小权限 — 创建 rust-backend 系统用户运行后端，限制 deploy sudo 仅允许部署/运维命令
Some checks failed
Deploy Backend / deploy (push) Has been cancelled
Details
2026-07-15 11:17:24 +08:00
milky0217
36d384f8fa chore: 删除已废弃的 scripts/backup-db.sh（被 daily-backup.sh 替代）
Some checks failed
Deploy Backend / deploy (push) Has been cancelled
Details
2026-07-15 11:07:37 +08:00
milky0217
917d69c171 feat: Graceful shutdown (10s)；backup 格式兼容 .dump.gz；容器连接监控
Some checks failed
Deploy Backend / deploy (push) Has been cancelled
Details
2026-07-15 11:05:11 +08:00
milky0217
ae64614342 fix: DB 备份保留从 1 增至 7；添加每日 cron 自动备份（生产+开发库）
Some checks failed
Deploy Backend / deploy (push) Has been cancelled
Details
2026-07-15 11:01:22 +08:00
milky0217
a47502f07e perf: 合并 insert_weather_data N+1 查询为单次；添加 Docker 内存限制和磁盘告警
Some checks failed
Deploy Backend / deploy (push) Has been cancelled
Details
2026-07-15 10:52:24 +08:00
milky0217
fff3877f03 fix: 修复 service 模板 — 添加 PAYMENT_MAINTENANCE_MODE=true, APP_VERSION=0.3.0
Some checks failed
Deploy Backend / deploy (push) Has been cancelled
Details
2026-07-13 18:46:02 +08:00
milky0217
0fa9c9c71c fix: nginx proxy 配置路径从 /www/sites/.../proxy/root.conf 改为 /etc/nginx/sites-enabled/
Some checks failed
Deploy Backend / deploy (push) Has been cancelled
Details
2026-07-13 18:36:00 +08:00
milky0217
ba00fcb1c6 fix: 适配新服务器蓝绿部署 — nginx 原生/PostgreSQL Docker 容器名/部署脚本
Some checks failed
Deploy Backend / deploy (push) Has been cancelled
Details
2026-07-13 18:30:38 +08:00
milky0217
38ee5ccbc6 feat: 所有页面添加ICP备案号 浙ICP备2026052792号
Some checks failed
Deploy Backend / deploy (push) Has been cancelled
Details
2026-07-13 17:30:06 +08:00
milky0217
178008496e 优化: Keep-Alive/rate-limiter/dead-code清理 + deploy.sh蓝绿自动检测 + 压测文档 2026-07-03 19:45:57 +08:00
milky0217
6d066c8e82 fix: 取消订单错误提示区分已支付/已取消状态+支付确认提示优化 2026-06-17 13:32:01 +08:00
milky0217
fb224c829f fix: 成功页sync-order轮询传JWT-实时确认支付状态 2026-06-17 10:39:33 +08:00
milky0217
b220368544 fix: 退款回调同步使用手动表单解析避免GBK编码问题 2026-06-15 13:24:38 +08:00
milky0217
452728be32 feat: deploy.sh增加活动环境检测-禁止直接部署到当前活动端口 2026-06-15 11:19:26 +08:00
milky0217
ac49ccb552 fix: Alipay回调手动解析表单支持GBK/GB2312编码回退 2026-06-15 11:17:43 +08:00
milky0217
776d318330 fix: deploy.sh设置400秒超时+支付代码全面审计 2026-06-15 11:00:16 +08:00
milky0217
43c349919d fix: 防止用户误取消已付款订单-回调重新激活+2分钟内禁止取消+成功页30s超时提示 2026-06-15 10:37:28 +08:00
milky0217
e672f00b66 fix: 支付确认TOCTOU竞态(AND status=pending)+定时器补充过期订单清理 2026-06-10 14:11:47 +08:00
milky0217
c00e391c9b fix: deploy测试-用远程heredoc替代stdin管道避免SSH复用bug-去重测试不阻断部署 2026-06-10 14:05:13 +08:00
milky0217
9cef5a2730 fix: 测试SQL工具heredoc变量展开+移除重复函数 2026-06-10 13:31:34 +08:00
milky0217
d7b7e0c0a3 fix: 部署测试SQL工具bug-硬编码user_id=1/无清理trap/迁移文件未引号 2026-06-10 13:16:19 +08:00
milky0217
23b6b2a11b test: 补全支付链测试缺口(去重/维护模式/退款/验证检测/前端状态) 2026-06-10 09:33:39 +08:00
milky0217
ca320c6db0 fix: 部署测试BASE_URL变量提升为全局避免其他测试函数未定义 2026-06-10 09:27:19 +08:00
milky0217
184948d24b fix: 部署测试test.sh使用HTTPS协议(4433/4434端口)+跳过mock支付测试生产环境 2026-06-10 09:21:31 +08:00
milky0217
2681003bbd test: 支付链路自动化测试(SQL间隔一致性+部署后支付流程测试) 2026-06-10 09:17:52 +08:00
milky0217
55e0bb1e6e fix: deploy模板缺少支付宝密钥导致每次部署后回退到模拟支付 2026-06-10 09:09:35 +08:00
milky0217
ebb68b0fc6 fix: set-paid-user.sh添加DB_NAME默认值+兼容管道输入 2026-06-10 09:03:17 +08:00
milky0217
2aea682098 fix: reqwest Client添加10s超时防止登录请求挂起阻塞worker 2026-06-09 15:44:48 +08:00
milky0217
b54a9d8131 chore: 更新service文件APP_VERSION为0.2.7 2026-06-08 10:22:28 +08:00
milky0217
f330d3a5b3 docs: 更新BLUE-GREEN-DEPLOY.md-限制&注意事项+数据库名称+实施状态 2026-06-07 16:49:22 +08:00
milky0217
24143cf3fd fix: deploy.sh蓝绿部署时service文件路径按target区分(common.sh get_service_file_local) 2026-06-07 16:42:38 +08:00
milky0217
00df4135c7 feat: deploy.sh部署后自动调用switch-env.sh切换代理 2026-06-07 16:37:29 +08:00
milky0217
caf3c7cc61 fix: 支付后增加会员时长验证(verify_membership_after_payment)防止ELSE静默错误 2026-06-07 16:34:30 +08:00
milky0217
b806d0c7e0 feat: 支付成功页轮询确认+升级页onShow自动同步pending订单 2026-06-07 10:24:52 +08:00
milky0217
ce3c0ab701 fix: check-members.sh排除管理员+异常订单显示备注 2026-06-05 22:45:36 +08:00
milky0217
101b8fbf2c feat: check-members.sh增加订单一致性检查-标记无付款记录的异常会员 2026-06-05 22:40:44 +08:00