Commit Graph

149 Commits

Author SHA1 Message Date
4922baa8ad update pay ui 2025-12-15 12:36:15 +08:00
2770a82172 update pay ui 2025-12-15 12:27:08 +08:00
9603adbd31 update pay ui 2025-12-15 12:07:36 +08:00
zdl
6683e7fce7 feat: 添加微信公众号网页授权域名验证文件路由
- 添加 /MP_verify_17Fo4JhapMw6vtNa.txt 路由
- 用于公众号后台网页授权域名验证

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-15 12:01:00 +08:00
db351ae494 update pay ui 2025-12-15 08:24:16 +08:00
e3b98eaa6a security: 添加 Redis 密码认证,修复安全漏洞
- 所有 Redis 连接添加密码参数
- 支持通过 REDIS_PASSWORD 环境变量配置密码
- 修复 Redis 未授权访问漏洞(被黑客利用设置为 slave)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-15 08:15:23 +08:00
073a0cbd7e fix: 添加 ProxyFix 中间件修复登录状态丢失问题
- 添加 werkzeug.middleware.proxy_fix.ProxyFix 中间件
- 配置信任反向代理的 X-Forwarded-Proto 头
- 解决 Nginx 反向代理后 Flask 无法识别 HTTPS 的问题
- 之前 SESSION_COOKIE_SECURE=True 会导致 cookie 被清除

问题根因:
1. Nginx 通过 HTTP 转发请求到 Flask
2. Flask 认为是 HTTP 请求,request.is_secure = False
3. SESSION_COOKIE_SECURE=True 导致 cookie 被立即删除

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-14 21:47:58 +08:00
4391c112c6 update pay ui 2025-12-14 15:39:54 +08:00
a2b734368b update pay ui 2025-12-14 14:26:01 +08:00
d87ae07a06 update pay ui 2025-12-14 13:28:07 +08:00
d76b23d8ff update pay ui 2025-12-13 20:58:44 +08:00
5288666446 update pay ui 2025-12-13 16:58:18 +08:00
84b32c21a3 update pay ui 2025-12-13 16:51:01 +08:00
c72c512100 update pay ui 2025-12-13 16:39:54 +08:00
5e8c2400a3 update pay ui 2025-12-13 10:31:46 +08:00
zdl
9f99ea7aee feat: 添加 H5 跳转小程序功能
- 后端: 新增 JS-SDK 签名接口和 URL Scheme 生成接口
- 前端: 创建 MiniProgramLauncher 组件,支持环境自适应
  - 微信内 H5: 使用 wx-open-launch-weapp 开放标签
  - 外部浏览器: 使用 URL Scheme 拉起微信
  - PC 端: 显示小程序码引导扫码
- 引入微信 JS-SDK (jweixin-1.6.0.js)
- 新增 miniprogramService 服务层封装 API 调用

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-12 16:56:04 +08:00
6ecae5ed76 update pay ui 2025-12-12 15:47:19 +08:00
445a5226d5 update pay ui 2025-12-12 15:15:13 +08:00
e24e0604b8 update pay ui 2025-12-12 14:50:12 +08:00
2a4e2a41ec update pay ui 2025-12-12 13:38:54 +08:00
d7193c3a63 update pay ui 2025-12-12 13:30:55 +08:00
a6c78c0fa5 update pay ui 2025-12-12 12:44:10 +08:00
4b3ee81341 update pay ui 2025-12-12 12:38:43 +08:00
f96a333cae update pay ui 2025-12-12 10:56:18 +08:00
002c3beeac update pay ui 2025-12-12 07:23:46 +08:00
036aef1171 update pay ui 2025-12-12 06:59:33 +08:00
3590226213 update pay ui 2025-12-12 01:16:04 +08:00
93bfecdafc update pay ui 2025-12-12 01:14:31 +08:00
fb0f449017 update pay ui 2025-12-12 01:03:57 +08:00
cdd96a69c5 update pay ui 2025-12-12 00:45:31 +08:00
c689157ce6 update pay ui 2025-12-12 00:42:55 +08:00
8d6fd4cae7 update pay ui 2025-12-12 00:31:49 +08:00
ac60e2d147 update pay ui 2025-12-12 00:21:11 +08:00
777f6f7723 update pay ui 2025-12-12 00:17:45 +08:00
d6d2b0ca94 update pay ui 2025-12-11 23:13:56 +08:00
9d095be968 update pay ui 2025-12-11 23:10:58 +08:00
870b266a31 update pay ui 2025-12-11 23:02:48 +08:00
bdad36bb16 update pay ui 2025-12-11 22:43:33 +08:00
198f456655 update pay ui 2025-12-11 22:36:02 +08:00
54c4f64a49 update pay ui 2025-12-11 21:34:20 +08:00
56e980f19d update pay ui 2025-12-11 21:28:57 +08:00
d19d18810d update pay ui 2025-12-11 21:15:09 +08:00
0599e2dad3 update pay ui 2025-12-11 17:00:05 +08:00
bf4521af47 update pay ui 2025-12-11 16:41:13 +08:00
34741155d3 update pay ui 2025-12-11 14:58:13 +08:00
736886fd40 update pay ui 2025-12-11 14:48:00 +08:00
9829015cb3 Merge branch 'feature_bugfix/251201_py_h5_ui' of https://git.valuefrontier.cn/vf/vf_react into feature_bugfix/251201_py_h5_ui 2025-12-11 14:23:34 +08:00
b7790db357 update pay ui 2025-12-11 14:23:25 +08:00
zdl
fa14346ca2 fix: 微信登录统一使用 unionid 匹配,增加调试信息
- 统一 H5 和 PC 模式都只用 unionid 匹配用户
- 没有 unionid 时返回错误,不再用 openid 兜底创建新用户
- 增加调试参数:debug_openid、debug_unionid、debug_keys_in_userinfo 等
- 修复重定向路径:/auth/signin → /home(原路径不存在)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-11 14:14:25 +08:00
zdl
35823fd61f fix: 修正微信公众号 AppSecret 配置
将 WECHAT_MP_APPSECRET 更新为正确的值,修复 H5 网页授权登录

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-11 11:42:49 +08:00