2026-06-21 08:14:05 +08:00
|
|
|
|
# 审计 — 2026-06-21 登录白名单 SSOT 生产部署
|
|
|
|
|
|
|
|
|
|
|
|
**Changelog**: `docs/changelog/2026-06-21-login-allowlist-deploy.md`
|
|
|
|
|
|
|
|
|
|
|
|
## Step 3 规则扫描
|
|
|
|
|
|
|
|
|
|
|
|
| 文件 | 规则 | 结论 |
|
|
|
|
|
|
|------|------|------|
|
|
|
|
|
|
| `server/utils/login_allowlist.py` | SSOT / 多 worker | PASS |
|
|
|
|
|
|
| `frontend/src/pages/SettingsPage.vue` | 刷新失败 UX | PASS |
|
|
|
|
|
|
| `tests/test_login_access.py` | 回归覆盖 | PASS |
|
|
|
|
|
|
|
|
|
|
|
|
## Closure
|
|
|
|
|
|
|
|
|
|
|
|
| 项 | 状态 | 说明 |
|
|
|
|
|
|
|----|------|------|
|
|
|
|
|
|
| login_allowlist.py | SAFE | 优先 LOGIN_ALLOWED_IPS |
|
|
|
|
|
|
| SettingsPage.vue | SAFE | refresh_ok=false 重载 |
|
|
|
|
|
|
| test_login_access.py | SAFE | SSOT 用例 |
|
|
|
|
|
|
|
|
|
|
|
|
## 文件清单
|
|
|
|
|
|
|
|
|
|
|
|
- `server/utils/login_allowlist.py`
|
|
|
|
|
|
- `frontend/src/pages/SettingsPage.vue`
|
|
|
|
|
|
- `tests/test_login_access.py`
|
2026-06-21 08:14:26 +08:00
|
|
|
|
- `server/infrastructure/btpanel/client.py`（bandit nosec，宝塔 API md5 协议）
|
2026-06-21 08:14:05 +08:00
|
|
|
|
- `scripts/gate_ai_review.sh`（CRLF 修复）
|
|
|
|
|
|
|
|
|
|
|
|
## DoD
|
|
|
|
|
|
|
|
|
|
|
|
- [x] Step 3 规则扫描
|
|
|
|
|
|
- [x] Closure 表
|
|
|
|
|
|
- [x] 文件清单与 git diff 对齐
|
|
|
|
|
|
- [x] changelog ≥10 行
|
