Skip to content

feat: 账号安全限流与更新检查清单优先 - #20

Merged
hillsburg merged 1 commit into
mainfrom
feat/admin-rate-limit-manifest-update
Jul 21, 2026
Merged

hillsburg merged 1 commit into
mainfrom
feat/admin-rate-limit-manifest-update

Conversation

@hillsburg

Copy link
Copy Markdown
Owner

Summary

  • 账号页改密 / 重绑 TOTP 复用 login 限流(5 次/分钟/IP),超限跳转 ?rateLimited=1
  • 更新检查:ManifestUrl 优先;失败且 AllowGitHubFallback=true 时才回退 GitHub;可关回退完全解耦

Test plan

  • 账号页连续 POST 超限出现黄色提示
  • 配置 ManifestUrl 后检查更新走清单(文案含「来源:清单」)
  • AllowGitHubFallback=false 且无 ManifestUrl 时提示未配置更新源
  • 默认配置仍可通过 GitHub 回退检查(与现网一致)

Made with Cursor

账号改密/重绑 TOTP 复用登录限流;Update:ManifestUrl 优先,GitHub 仅作可关闭回退。

Co-authored-by: Cursor <cursoragent@cursor.com>
@hillsburg
hillsburg merged commit f498a29 into main Jul 21, 2026
1 check passed
@hillsburg
hillsburg deleted the feat/admin-rate-limit-manifest-update branch July 21, 2026 15:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant