Nexus

admin/Nexus

Fork 0

Commit Graph

Author	SHA1	Message	Date
Nexus Agent	abeab9d3e4	Fix recovery Telegram dedup and unify Beijing time display. Store alert metrics without per-value Redis members to stop duplicate recovery pushes; format all operator-facing timestamps in Asia/Shanghai across Web UI and Telegram.	2026-06-08 23:18:56 +08:00
Your Name	488838c989	feat: separate subscription/manual IPs + master enable/disable toggle Data model (separate storage): - login_allowlist_enabled: 'true'/'false' master switch - login_subscription_url: URL to fetch every 2h - login_subscription_ips: last fetch result (replaced entirely each refresh) - login_manual_ips: manually added (never overwritten by refresh) - login_allowed_ips: combined (used by auth for legacy compat) ip_allowlist_refresh.py: - Saves to login_subscription_ips (replace) + rebuilds login_allowed_ips auth_service.py: - Login check: only runs when LOGIN_ALLOWLIST_ENABLED is 'true' - Combines subscription_ips + manual_ips at auth time (no stale combined key needed) settings.py: - POST /ip-allowlist/toggle: quick enable/disable endpoint - GET /ip-allowlist: returns subscription_ips, manual_ips separately - POST /ip-allowlist: saves manual_ips + optional subscription_url + optional enabled settings.html: - Toggle switch: enable/disable with warning if list is empty - Green notice when enabled (warns about self-lockout risk) - Grey notice when disabled - Subscription IPs section: read-only, auto-refresh badge - Manual IPs section: deletable per-IP, clear all button Co-authored-by: Cursor <cursoragent@cursor.com>	2026-05-23 18:19:47 +08:00
Your Name	da43960f38	feat: subscription URL stored in settings, auto-refresh allowlist every 2h config.py: - LOGIN_SUBSCRIPTION_URL: stored in DB, configurable from UI - LOGIN_MANUAL_IPS: manually added IPs (preserved across auto-refresh) background/ip_allowlist_refresh.py (new): - ip_allowlist_refresh_loop(): primary-worker task, every 2h - _do_refresh(): fetch subscription, parse IPs, merge with manual IPs, write combined to LOGIN_ALLOWED_IPS + DB setting; runs once at startup (5s delay) - get_last_refresh_time(): returns last successful refresh timestamp main.py: - Register ip_allowlist_refresh_loop as background task settings.py: - GET /ip-allowlist: now returns subscription_url, manual_ips, last_refresh - POST /ip-allowlist: saves manual_ips + subscription_url, triggers refresh - POST /ip-allowlist/manual: append to manual list only, trigger rebuild - DELETE /ip-allowlist/ip: remove single manual IP, trigger rebuild settings.html: - Subscription URL field with 保存 + 🔄 instant-refresh button - Last refresh timestamp display - Status badge shows '订阅自动刷新' when URL configured - IP badges: blue=manual (deletable), grey=from subscription (auto) - 预览 button to inspect subscription IPs without saving Co-authored-by: Cursor <cursoragent@cursor.com>	2026-05-23 18:15:29 +08:00

Author

SHA1

Message

Date

Nexus Agent

abeab9d3e4

Fix recovery Telegram dedup and unify Beijing time display.

Store alert metrics without per-value Redis members to stop duplicate recovery pushes; format all operator-facing timestamps in Asia/Shanghai across Web UI and Telegram.

2026-06-08 23:18:56 +08:00

Your Name

488838c989

feat: separate subscription/manual IPs + master enable/disable toggle

Data model (separate storage):
- login_allowlist_enabled: 'true'/'false' master switch
- login_subscription_url: URL to fetch every 2h
- login_subscription_ips: last fetch result (replaced entirely each refresh)
- login_manual_ips: manually added (never overwritten by refresh)
- login_allowed_ips: combined (used by auth for legacy compat)

ip_allowlist_refresh.py:
- Saves to login_subscription_ips (replace) + rebuilds login_allowed_ips

auth_service.py:
- Login check: only runs when LOGIN_ALLOWLIST_ENABLED is 'true'
- Combines subscription_ips + manual_ips at auth time (no stale combined key needed)

settings.py:
- POST /ip-allowlist/toggle: quick enable/disable endpoint
- GET /ip-allowlist: returns subscription_ips, manual_ips separately
- POST /ip-allowlist: saves manual_ips + optional subscription_url + optional enabled

settings.html:
- Toggle switch: enable/disable with warning if list is empty
- Green notice when enabled (warns about self-lockout risk)
- Grey notice when disabled
- Subscription IPs section: read-only, auto-refresh badge
- Manual IPs section: deletable per-IP, clear all button

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-05-23 18:19:47 +08:00

Your Name

da43960f38

feat: subscription URL stored in settings, auto-refresh allowlist every 2h

config.py:
- LOGIN_SUBSCRIPTION_URL: stored in DB, configurable from UI
- LOGIN_MANUAL_IPS: manually added IPs (preserved across auto-refresh)

background/ip_allowlist_refresh.py (new):
- ip_allowlist_refresh_loop(): primary-worker task, every 2h
- _do_refresh(): fetch subscription, parse IPs, merge with manual IPs,
  write combined to LOGIN_ALLOWED_IPS + DB setting; runs once at startup (5s delay)
- get_last_refresh_time(): returns last successful refresh timestamp

main.py:
- Register ip_allowlist_refresh_loop as background task

settings.py:
- GET /ip-allowlist: now returns subscription_url, manual_ips, last_refresh
- POST /ip-allowlist: saves manual_ips + subscription_url, triggers refresh
- POST /ip-allowlist/manual: append to manual list only, trigger rebuild
- DELETE /ip-allowlist/ip: remove single manual IP, trigger rebuild

settings.html:
- Subscription URL field with 保存 + 🔄 instant-refresh button
- Last refresh timestamp display
- Status badge shows '订阅自动刷新' when URL configured
- IP badges: blue=manual (deletable), grey=from subscription (auto)
- 预览 button to inspect subscription IPs without saving

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-05-23 18:15:29 +08:00

3 Commits