wangjia/pangolin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 26 Wiki Activity

feat(devices): P3 强制退出 + 清除增强(per-device 凭证吊销)
ci-pangolin / Lint — shellcheck (push) Successful in 9s
Details
ci-pangolin / OpenAPI Sync Check (push) Successful in 17s
Details
ci-pangolin / Redline Scan — 脱敏 (UI 文案) (push) Successful in 5s
Details
ci-pangolin / Flutter — analyze + test (push) Successful in 26s
Details
ci-pangolin / Portable SQL — 可移植性 (mysql/sqlite) (push) Successful in 5s
Details
ci-pangolin / Codegen Drift — token 生成物未漂移 (push) Successful in 5s
Details
ci-pangolin / Go — build + test (push) Successful in 12s
Details
ci-pangolin / E2E Smoke — L4 进程级端到端 (push) Successful in 15s
Details
ci-pangolin / Go — integration (mysql/redis testcontainers) (push) Failing after 4m4s
Details
ci-pangolin / Golden — 视觉回归 (components + auth) (push) Successful in 15s
Details

Browse Source 
后端:新端点 POST /v1/me/devices/{uuid}/logout(ForceLogout:吊销该设备会话+
丢 Redis JTI,设备留列表)。DeleteDevice 增强:先吊销会话再删设备(FK ON DELETE
CASCADE 清理会话行)+ 按 dp_uuid 吊销数据面凭证。CredentialRevoker 接口改
per-device RevokeDevice(dpUUID),由 nodes.Service 实现(查 connect_credentials
持有节点→推 CommandTypeRevoke + 删凭证行),main 注入替 NoopRevoker;devices 注入
SessionPort/JTIRevoker。修 SQLite 跨连接死锁(会话吊销移到 delete tx 之前)。
migration 000016 sessions FK 加 ON DELETE CASCADE。
客户端:account_api.forceLogout + devicesProvider.forceLogout(UI 留 P6)。
测试:ForceLogout(吊销会话+JTI+设备保留+403/404)+ DeleteDevice(级联+按 dp_uuid
吊销);NoopRevoker 改 dp_uuid;全量 server/flutter 测试绿。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
wangjia
2026-06-29 06:01:41 +08:00
parent 2f298f0a0a
commit bcc114088c
16 changed files with 325 additions and 74 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/superpowers/plans/2026-06-29-device-session-management.md
+5 -5
View File
@@ -34,11 +34,11 @@
- [ ] 验收：列表显示在线/版本/最后登录（待 P6 UI + 端到端）；停 agent ~3min 转离线
## P3 · 两个操作（强制退出 + 清除增强）
- [ ] 新端点 `POST /v1/me/devices/{uuid}/logout`（handler + `Service.ForceLogout`）：`sessions.RevokeByDevice` + 逐 jti `TokenManager.Revoke`
- [ ] `DeleteDevice` 增强：加 `sessions.RevokeByDevice`；`CredentialRevoker` 改 per-device
- [ ] `CredentialRevoker` 接口改 `RevokeDevice(ctx, dpUUID)`；`nodes.Hub` 实现；`main.go` 注入 hub 替 NoopRevoker
- [ ] 客户端 `account_api.forceLogout` + `devicesProvider.forceLogout`
- [ ] 测试：ForceLogout 删 jti+标 revoked_at；DeleteDevice per-device revoke
- [x] 新端点 `POST /v1/me/devices/{uuid}/logout`（handler + `Service.ForceLogout`）：`sessions.RevokeByDevice` + 逐 jti `TokenManager.Revoke`
- [x] `DeleteDevice` 增强：加 `sessions.RevokeByDevice`；`CredentialRevoker` 改 per-device
- [x] `CredentialRevoker` 接口改 `RevokeDevice(ctx, dpUUID)`；`nodes.Hub` 实现；`main.go` 注入 hub 替 NoopRevoker
- [x] 客户端 `account_api.forceLogout` + `devicesProvider.forceLogout`
- [x] 测试：ForceLogout 删 jti+标 revoked_at；DeleteDevice per-device revoke
- [ ] 验收：强制退出→refresh 失败；清除→设备消失+凭证作废
## P4 · 每设备流量验证