vf/vf_react
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,346 Commits 29 Branches 1 Tag
db351ae494c1859b4a99422496f547d2aac3c99a
Commit Graph

145 Commits

Author SHA1 Message Date
zzlgreat
db351ae494 update pay ui 2025-12-15 08:24:16 +08:00
zzlgreat
e3b98eaa6a security: 添加 Redis 密码认证，修复安全漏洞 
- 所有 Redis 连接添加密码参数
- 支持通过 REDIS_PASSWORD 环境变量配置密码
- 修复 Redis 未授权访问漏洞（被黑客利用设置为 slave）

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-12-15 08:15:23 +08:00
zzlgreat
073a0cbd7e fix: 添加 ProxyFix 中间件修复登录状态丢失问题 
- 添加 werkzeug.middleware.proxy_fix.ProxyFix 中间件
- 配置信任反向代理的 X-Forwarded-Proto 头
- 解决 Nginx 反向代理后 Flask 无法识别 HTTPS 的问题
- 之前 SESSION_COOKIE_SECURE=True 会导致 cookie 被清除

问题根因：
1. Nginx 通过 HTTP 转发请求到 Flask
2. Flask 认为是 HTTP 请求，request.is_secure = False
3. SESSION_COOKIE_SECURE=True 导致 cookie 被立即删除

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-12-14 21:47:58 +08:00
zzlgreat
4391c112c6 update pay ui 2025-12-14 15:39:54 +08:00
zzlgreat
a2b734368b update pay ui 2025-12-14 14:26:01 +08:00
zzlgreat
d87ae07a06 update pay ui 2025-12-14 13:28:07 +08:00
zzlgreat
d76b23d8ff update pay ui 2025-12-13 20:58:44 +08:00
zzlgreat
5288666446 update pay ui 2025-12-13 16:58:18 +08:00
zzlgreat
84b32c21a3 update pay ui 2025-12-13 16:51:01 +08:00
zzlgreat
c72c512100 update pay ui 2025-12-13 16:39:54 +08:00
zzlgreat
5e8c2400a3 update pay ui 2025-12-13 10:31:46 +08:00
zdl
9f99ea7aee feat: 添加 H5 跳转小程序功能 
- 后端: 新增 JS-SDK 签名接口和 URL Scheme 生成接口
- 前端: 创建 MiniProgramLauncher 组件，支持环境自适应
  - 微信内 H5: 使用 wx-open-launch-weapp 开放标签
  - 外部浏览器: 使用 URL Scheme 拉起微信
  - PC 端: 显示小程序码引导扫码
- 引入微信 JS-SDK (jweixin-1.6.0.js)
- 新增 miniprogramService 服务层封装 API 调用

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-12-12 16:56:04 +08:00
zzlgreat
6ecae5ed76 update pay ui 2025-12-12 15:47:19 +08:00
zzlgreat
445a5226d5 update pay ui 2025-12-12 15:15:13 +08:00
zzlgreat
e24e0604b8 update pay ui 2025-12-12 14:50:12 +08:00
zzlgreat
2a4e2a41ec update pay ui 2025-12-12 13:38:54 +08:00
zzlgreat
d7193c3a63 update pay ui 2025-12-12 13:30:55 +08:00
zzlgreat
a6c78c0fa5 update pay ui 2025-12-12 12:44:10 +08:00
zzlgreat
4b3ee81341 update pay ui 2025-12-12 12:38:43 +08:00
zzlgreat
f96a333cae update pay ui 2025-12-12 10:56:18 +08:00
zzlgreat
002c3beeac update pay ui 2025-12-12 07:23:46 +08:00
zzlgreat
036aef1171 update pay ui 2025-12-12 06:59:33 +08:00
zzlgreat
3590226213 update pay ui 2025-12-12 01:16:04 +08:00
zzlgreat
93bfecdafc update pay ui 2025-12-12 01:14:31 +08:00
zzlgreat
fb0f449017 update pay ui 2025-12-12 01:03:57 +08:00
zzlgreat
cdd96a69c5 update pay ui 2025-12-12 00:45:31 +08:00
zzlgreat
c689157ce6 update pay ui 2025-12-12 00:42:55 +08:00
zzlgreat
8d6fd4cae7 update pay ui 2025-12-12 00:31:49 +08:00
zzlgreat
ac60e2d147 update pay ui 2025-12-12 00:21:11 +08:00
zzlgreat
777f6f7723 update pay ui 2025-12-12 00:17:45 +08:00
zzlgreat
d6d2b0ca94 update pay ui 2025-12-11 23:13:56 +08:00
zzlgreat
9d095be968 update pay ui 2025-12-11 23:10:58 +08:00
zzlgreat
870b266a31 update pay ui 2025-12-11 23:02:48 +08:00
zzlgreat
bdad36bb16 update pay ui 2025-12-11 22:43:33 +08:00
zzlgreat
198f456655 update pay ui 2025-12-11 22:36:02 +08:00
zzlgreat
54c4f64a49 update pay ui 2025-12-11 21:34:20 +08:00
zzlgreat
56e980f19d update pay ui 2025-12-11 21:28:57 +08:00
zzlgreat
d19d18810d update pay ui 2025-12-11 21:15:09 +08:00
zzlgreat
0599e2dad3 update pay ui 2025-12-11 17:00:05 +08:00
zzlgreat
bf4521af47 update pay ui 2025-12-11 16:41:13 +08:00
zzlgreat
34741155d3 update pay ui 2025-12-11 14:58:13 +08:00
zzlgreat
736886fd40 update pay ui 2025-12-11 14:48:00 +08:00
zzlgreat
9829015cb3 Merge branch 'feature_bugfix/251201_py_h5_ui' of https://git.valuefrontier.cn/vf/vf_react into feature_bugfix/251201_py_h5_ui 2025-12-11 14:23:34 +08:00
zzlgreat
b7790db357 update pay ui 2025-12-11 14:23:25 +08:00
zdl
fa14346ca2 fix: 微信登录统一使用 unionid 匹配，增加调试信息 
- 统一 H5 和 PC 模式都只用 unionid 匹配用户
- 没有 unionid 时返回错误，不再用 openid 兜底创建新用户
- 增加调试参数：debug_openid、debug_unionid、debug_keys_in_userinfo 等
- 修复重定向路径：/auth/signin → /home（原路径不存在）

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-12-11 14:14:25 +08:00
zdl
35823fd61f fix: 修正微信公众号 AppSecret 配置 
将 WECHAT_MP_APPSECRET 更新为正确的值，修复 H5 网页授权登录

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-12-11 11:42:49 +08:00
zdl
6c26f6dabc fix: 微信H5登录Session改用Redis存储，解决多进程不共享问题 
问题：Gunicorn 4 workers 多进程部署时，wechat_qr_sessions 内存字典
不共享，导致 H5 微信授权回调被不同 worker 处理时找不到 session，
用户点击允许后登录状态无法更新。

解决方案：
- 新增 Redis 客户端配置和 session 操作函数（set/get/update/delete/exists）
- 将 wechat_qr_sessions 内存字典改为 Redis 存储
- Session 自动过期（TTL 5分钟），无需手动清理
- 添加 Redis 不可用时的错误处理

修改的接口：
- /api/auth/wechat/qrcode - PC 扫码登录
- /api/auth/wechat/h5-auth - H5 授权登录
- /api/account/wechat/qrcode - 账号绑定
- /api/auth/wechat/check - 登录状态检查
- /api/account/wechat/check - 绑定状态检查
- /api/auth/wechat/callback - 微信回调
- /api/auth/login/wechat - 微信登录确认

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-12-11 11:12:05 +08:00
zzlgreat
68c7b6232d update pay ui 2025-12-11 08:06:23 +08:00
zzlgreat
8748e81a7b update pay ui 2025-12-11 07:39:34 +08:00
zzlgreat
2c5b3b7b50 Merge branch 'feature_bugfix/251201_py_h5_ui' of https://git.valuefrontier.cn/vf/vf_react into feature_bugfix/251201_py_h5_ui 2025-12-11 07:32:36 +08:00