5 Commits

Author	SHA1	Message	Date
canglan	257cd14051	feat: external API for QQ bot - client id+secret auth, ticket tracking, bans, per-server data ... - db: api_clients table + server_groups.alias + tickets/bans server_name (auto-migrate) - external.js: client_id+secret auth (multi-client, bcrypt, show-once secret), legacy x-external-key compat, JWT pass-through - POST /tickets (optional server), GET /tickets/track?token= (full lifecycle) - GET/POST /bans, reported-players/stats/all-tickets with server filter - GET /servers (alias list), client CRUD (owner/admin, audit logged) - resolveServer: alias | 分组/子服 | server_name - polls.js: server_groups CRUD with alias (add/edit, dup check) - servers page: alias display + edit; new 外部API page: client mgmt + quick docs - API.md: full external API section (auth matrix, server param syntax) - verified: 37 checks incl. resolveServer sandbox (alias/group/fallback)	2026-08-19 19:12:34 +08:00
canglan	a11df22600	feat: system logs - email log + system log with admin UI ... - db: email_logs (sent/failed) + system_logs (info/warn/error) tables, auto-migrated for existing installs - backend/logger.js: logEmail/logSystem with try/catch (never breaks flow) - mailer: log send result (SMTP unconfigured/sent/failed + error msg) - webhook: log blocked-internal, non-2xx response, send failure - server: error middleware records 500 errors to system_logs - routes/logs.js: GET /logs/emails + /logs/system (admin/owner, filters) - UI: 系统日志 page (owner/admin) with system/email tabs + filters - API docs updated	2026-08-17 05:14:41 +08:00
canglan	1d669fd1d0	feat: skin site UUID lookup - auto-fetch UUID from player name ... - GET /settings/uuid-lookup?site=&name= : proxy Yggdrasil API (POST {site}/api/yggdrasil/api/profiles/minecraft), SSRF guard, 10s timeout, name regex, UUID formatting (with dashes) - GET /settings/skin-site : public read of configured skin site - settings page: 皮肤站地址 config - bind identity modals (player dashboard + admin users): 获取UUID button, auto-fill site from settings, auto-fill UID from lookup - verified live against littleskin.cn (Steve -> df273bda...) - API docs updated	2026-08-17 02:05:21 +08:00
canglan	25a766591e	feat: admin user management supports multi-identity bind/unbind ... - users list: identity_count column (backend subquery) - user detail: returns identities array - POST /users/:id/identities, DELETE /users/:id/identities/:identityId (owner protection, dup checks, keep >=1, audit logs) - users page: identity column in table + manage section in edit modal - API docs updated	2026-08-17 01:34:20 +08:00
canglan	4c221ad6f1	docs: full API documentation + data compat guard ... - docs/API.md: complete API reference (auth/identities/tickets/bans/users/ settings/notifications/polls/features/export/captcha/uploads/external/ install/health) with auth, rate limits, roles, data migration notes - auth.js register: also check user_identities for duplicate game_name (multi-identity compat for old data backfilled into new table) - README: link API docs, multi-identity section	2026-08-17 01:20:39 +08:00