aeroxw/tick-stock-panel
1
0
Fork 0
mirror of https://ghfast.top/https://github.com/aeroxw/tick-stock-panel.git synced 2026-09-12 17:54:15 +08:00
Code Issues Packages Projects Releases Wiki Activity

feat: 新增访问密码认证(首次本机设密码 + 公网防护)

Browse Source 
- 后端: PBKDF2 密码哈希 + 会话 token(auth.json 存储, 零数据库)
- 中间件: 未设密码时本机可设/公网拒绝(防裸奔+防抢占), 已设密码后 401 拦截
- 5个 API: status/setup/login/logout/change-password, 含本机限制+登录限流
- 前端: 登录页/设密码页 + 全局 401/403 拦截跳转
- 安全: HttpOnly cookie + 5次失败锁5分钟 + 改密码清会话
This commit is contained in:
shy3130
2026-06-28 20:02:00 +08:00
parent 5585f445fc
commit 69cd7af8d9
8 changed files with 673 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/uv.lock
Generated
+1 -1
View File
@@ -2491,7 +2491,7 @@ all = [
[[package]]
name = "tickflow-stock-panel-backend"
version = "0.1.62"
version = "0.1.63"
source = { editable = "." }
dependencies = [
{ name = "apscheduler" },