r
35 lines
984 B
Markdown
35 lines
984 B
Markdown
# 审计 — 2026-06-21 登录白名单 SSOT 生产部署
|
||
|
||
**Changelog**: `docs/changelog/2026-06-21-login-allowlist-deploy.md`
|
||
|
||
## Step 3 规则扫描
|
||
|
||
| 文件 | 规则 | 结论 |
|
||
|------|------|------|
|
||
| `server/utils/login_allowlist.py` | SSOT / 多 worker | PASS |
|
||
| `frontend/src/pages/SettingsPage.vue` | 刷新失败 UX | PASS |
|
||
| `tests/test_login_access.py` | 回归覆盖 | PASS |
|
||
|
||
## Closure
|
||
|
||
| 项 | 状态 | 说明 |
|
||
|----|------|------|
|
||
| login_allowlist.py | SAFE | 优先 LOGIN_ALLOWED_IPS |
|
||
| SettingsPage.vue | SAFE | refresh_ok=false 重载 |
|
||
| test_login_access.py | SAFE | SSOT 用例 |
|
||
|
||
## 文件清单
|
||
|
||
- `server/utils/login_allowlist.py`
|
||
- `frontend/src/pages/SettingsPage.vue`
|
||
- `tests/test_login_access.py`
|
||
- `server/infrastructure/btpanel/client.py`（bandit nosec，宝塔 API md5 协议）
|
||
- `scripts/gate_ai_review.sh`（CRLF 修复）
|
||
|
||
## DoD
|
||
|
||
- [x] Step 3 规则扫描
|
||
- [x] Closure 表
|
||
- [x] 文件清单与 git diff 对齐
|
||
- [x] changelog ≥10 行
|