Skip to content

feat(server): 账号改密/重绑 TOTP、/health 与管理页检查更新 - #19

Merged
hillsburg merged 1 commit into
mainfrom
feat/admin-security-health-update
Jul 21, 2026
Merged

hillsburg merged 1 commit into
mainfrom
feat/admin-security-health-update

Conversation

@hillsburg

Copy link
Copy Markdown
Owner

Summary

  • 账号安全(/admin/account):修改密码;重绑 TOTP(生产需当前密码+当前验证码 → 扫新码确认)
  • /health:匿名探活(含 DB CanConnect + 版本);SetupMiddleware 未初始化时亦放行;upgrade-bisheng.sh 默认 HEALTH_URL 改为 /health
  • 检查更新:仪表盘按钮查询 GitHub Releases(只读展示下载/Release 链接,不自动安装);Update:* 可配置

Test plan

  • /health 返回 200 status=ok;停库或坏连接时为 503
  • 账号页改密后可用新密码登录
  • 生产环境重绑 TOTP:旧码校验 → 扫新码 → 用新码登录
  • 开发环境重绑可跳过旧 TOTP
  • 仪表盘「检查更新」能显示当前/最新版本与下载链接(需外网)
  • Update:Enabled=false 时提示已关闭

Made with Cursor

新增账号安全页;运维探活改用 /health;仪表盘只读查询 GitHub Releases,升级仍走脚本。

Co-authored-by: Cursor <cursoragent@cursor.com>
@hillsburg
hillsburg force-pushed the feat/admin-security-health-update branch from 668c6ee to 29b9ffc Compare July 21, 2026 15:09
@hillsburg
hillsburg merged commit 70d798e into main Jul 21, 2026
1 check passed
@hillsburg
hillsburg deleted the feat/admin-security-health-update branch July 21, 2026 15:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant