aa65f10c52
Audit docs:
- docs/reports/audit-phase-2{a-j}-line-walk.md: per-file line walk findings
- docs/reports/audit-phase-2-findings-matrix.md: 63 findings (52 fixed, 3 partial, 7 accepted)
- docs/reports/2026-05-23-full-audit-report.md: full audit consolidation
- docs/reports/audit-full-vs-phase2-reconciliation.md: cross-reference
- docs/reports/audit-phase-2-walk-closure.md: closure sign-off
Project docs:
- docs/project/phase-2-audit-remediation.md: SSOT for all fixes
- docs/project/alert-push-policy.md: dashboard alert design decisions
- docs/project/production-verification-checklist.md: first-deploy checklist
- docs/project/script-execution.md: script platform design
- docs/project/wsl-integration-test.md: WSL code-only verification guide
- docs/project/line-walk-audit-standard.md: audit methodology
- docs/project/mysql-mcp-setup.md: MCP config guide
Changelogs: 18 entries (2026-05-22 to 2026-05-23)
Project memory: CLAUDE.md, AGENTS.md updated to reflect current state
Deploy: nginx_https.conf template updated
Co-authored-by: Cursor <cursoragent@cursor.com>
773 B
773 B
全量审计对照修复(C2 / C9)
日期: 2026-05-23
C2 — 认证审计日志字段
server/application/services/auth_service.py:
_audit()写入admin_username、ip_address列(不再仅堆在 detail 字符串里)- 登录/刷新/登出/TOTP/WebSSH 等调用点传递对应用户名与 IP
C9 — WebSocket 告警重复投递
server/api/websocket.py:
- 新增
_dispatch_ws_message():Redis Pub/Sub 活跃时 仅 publish,由本 worker 的 subscriber 调用一次broadcast_local - Redis 不可用时回退为直接
broadcast_local broadcast_alert/broadcast_recovery/broadcast_system_event均改用该路径
文档
docs/reports/audit-full-vs-phase2-reconciliation.md— 全量 C1–C12 对照表