Files
Nexus/docs/changelog/2026-05-23-full-audit-reconciliation-fixes.md
T
Your Name aa65f10c52 docs: Phase 2 audit records, project memory, WSL guide
Audit docs:
- docs/reports/audit-phase-2{a-j}-line-walk.md: per-file line walk findings
- docs/reports/audit-phase-2-findings-matrix.md: 63 findings (52 fixed, 3 partial, 7 accepted)
- docs/reports/2026-05-23-full-audit-report.md: full audit consolidation
- docs/reports/audit-full-vs-phase2-reconciliation.md: cross-reference
- docs/reports/audit-phase-2-walk-closure.md: closure sign-off

Project docs:
- docs/project/phase-2-audit-remediation.md: SSOT for all fixes
- docs/project/alert-push-policy.md: dashboard alert design decisions
- docs/project/production-verification-checklist.md: first-deploy checklist
- docs/project/script-execution.md: script platform design
- docs/project/wsl-integration-test.md: WSL code-only verification guide
- docs/project/line-walk-audit-standard.md: audit methodology
- docs/project/mysql-mcp-setup.md: MCP config guide

Changelogs: 18 entries (2026-05-22 to 2026-05-23)
Project memory: CLAUDE.md, AGENTS.md updated to reflect current state
Deploy: nginx_https.conf template updated

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-05-23 15:27:40 +08:00

773 B
Raw Blame History

全量审计对照修复(C2 / C9

日期: 2026-05-23

C2 — 认证审计日志字段

server/application/services/auth_service.py

  • _audit() 写入 admin_usernameip_address 列(不再仅堆在 detail 字符串里)
  • 登录/刷新/登出/TOTP/WebSSH 等调用点传递对应用户名与 IP

C9 — WebSocket 告警重复投递

server/api/websocket.py

  • 新增 _dispatch_ws_message()Redis Pub/Sub 活跃时 仅 publish,由本 worker 的 subscriber 调用一次 broadcast_local
  • Redis 不可用时回退为直接 broadcast_local
  • broadcast_alert / broadcast_recovery / broadcast_system_event 均改用该路径

文档

  • docs/reports/audit-full-vs-phase2-reconciliation.md — 全量 C1C12 对照表