pangolin

wangjia/pangolin

Fork 0

Commit Graph

Author	SHA1	Message	Date
wangjia	2f298f0a0a	feat(devices): P2 sessions 表 + 在线/最后登录/客户端版本 ci-pangolin / Lint — shellcheck (push) Successful in 8s Details ci-pangolin / OpenAPI Sync Check (push) Successful in 18s Details ci-pangolin / Redline Scan — 脱敏 (UI 文案) (push) Successful in 6s Details ci-pangolin / Flutter — analyze + test (push) Successful in 24s Details ci-pangolin / Portable SQL — 可移植性 (mysql/sqlite) (push) Successful in 5s Details ci-pangolin / Codegen Drift — token 生成物未漂移 (push) Successful in 4s Details ci-pangolin / Go — build + test (push) Successful in 11s Details ci-pangolin / E2E Smoke — L4 进程级端到端 (push) Successful in 14s Details ci-pangolin / Go — integration (mysql/redis testcontainers) (push) Failing after 4m13s Details ci-pangolin / Golden — 视觉回归 (components + auth) (push) Successful in 14s Details migration 000016(mysql+sqlite,含 down):新增 sessions 表(绑 device+refresh JTI) + devices 加 client_version/totp_trusted_until。devices 唯一键改 + platform CHECK 加 linux(需 SQLite 表重建)拆出后续迁移,降风险。后端:新 internal/sessions Store(Create/Rotate/Revoke/RevokeByDevice/ LastLoginByDevice);TokenManager 外露 refresh JTI(IssueWithJTI/RefreshWithJTI/ ParseRefreshJTI);auth.Service 注入 SessionStore——登录建会话、刷新轮换、登出吊销; DeviceRegistrar 返回 deviceID;ReportUsage 心跳 touch devices.last_seen(在线判定); devices.ListDevices 经 LastLoginSource 注入返回 online(last_seen<3min)/client_version/ last_login;RegisterIfAbsent 存 client_version。客户端:Device model 加 online/clientVersion/lastLogin(fromJson 自动解析)。测试:sessions store 3 例 + ListDevices 在线/最后登录 + device model 2 例 + migration v16;全量 go test/flutter test 绿。 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-29 00:50:24 +08:00
wangjia	889cff4556	docs(plan): 设备&会话管理实现计划 P1-P6(md执行源 + html阅读版 + 登记 + 链接) 新增 docs/superpowers/plans/2026-06-29-device-session-management.md(执行真相, checkbox) + docs/device-session-management-plan.html(阅读版);登记进 index.html 「实现计划」;总方案顶部加「→ 实现计划」链接。P1 设备注册打通→P2 sessions表+ 在线→P3 强制退出/清除→P4 每设备流量→P5 2FA(future)→P6 UI重做。 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-29 00:15:35 +08:00

Author

SHA1

Message

Date

wangjia

2f298f0a0a

feat(devices): P2 sessions 表 + 在线/最后登录/客户端版本

ci-pangolin / Lint — shellcheck (push) Successful in 8s

Details

ci-pangolin / OpenAPI Sync Check (push) Successful in 18s

Details

ci-pangolin / Redline Scan — 脱敏 (UI 文案) (push) Successful in 6s

Details

ci-pangolin / Flutter — analyze + test (push) Successful in 24s

Details

ci-pangolin / Portable SQL — 可移植性 (mysql/sqlite) (push) Successful in 5s

Details

ci-pangolin / Codegen Drift — token 生成物未漂移 (push) Successful in 4s

Details

ci-pangolin / Go — build + test (push) Successful in 11s

Details

ci-pangolin / E2E Smoke — L4 进程级端到端 (push) Successful in 14s

Details

ci-pangolin / Go — integration (mysql/redis testcontainers) (push) Failing after 4m13s

Details

ci-pangolin / Golden — 视觉回归 (components + auth) (push) Successful in 14s

Details

migration 000016(mysql+sqlite,含 down):新增 sessions 表(绑 device+refresh JTI)
+ devices 加 client_version/totp_trusted_until。devices 唯一键改 + platform CHECK
加 linux(需 SQLite 表重建)拆出后续迁移,降风险。

后端:新 internal/sessions Store(Create/Rotate/Revoke/RevokeByDevice/
LastLoginByDevice);TokenManager 外露 refresh JTI(IssueWithJTI/RefreshWithJTI/
ParseRefreshJTI);auth.Service 注入 SessionStore——登录建会话、刷新轮换、登出吊销;
DeviceRegistrar 返回 deviceID;ReportUsage 心跳 touch devices.last_seen(在线判定);
devices.ListDevices 经 LastLoginSource 注入返回 online(last_seen<3min)/client_version/
last_login;RegisterIfAbsent 存 client_version。
客户端:Device model 加 online/clientVersion/lastLogin(fromJson 自动解析)。
测试:sessions store 3 例 + ListDevices 在线/最后登录 + device model 2 例 +
migration v16;全量 go test/flutter test 绿。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-29 00:50:24 +08:00

wangjia

889cff4556

docs(plan): 设备&会话管理实现计划 P1-P6(md执行源 + html阅读版 + 登记 + 链接)

新增 docs/superpowers/plans/2026-06-29-device-session-management.md(执行真相,
checkbox) + docs/device-session-management-plan.html(阅读版);登记进 index.html
「实现计划」;总方案顶部加「→ 实现计划」链接。P1 设备注册打通→P2 sessions表+
在线→P3 强制退出/清除→P4 每设备流量→P5 2FA(future)→P6 UI重做。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-29 00:15:35 +08:00

2 Commits