|
|
257cd14051
|
feat: external API for QQ bot - client id+secret auth, ticket tracking, bans, per-server data
- db: api_clients table + server_groups.alias + tickets/bans server_name (auto-migrate)
- external.js: client_id+secret auth (multi-client, bcrypt, show-once secret),
legacy x-external-key compat, JWT pass-through
- POST /tickets (optional server), GET /tickets/track?token= (full lifecycle)
- GET/POST /bans, reported-players/stats/all-tickets with server filter
- GET /servers (alias list), client CRUD (owner/admin, audit logged)
- resolveServer: alias | 分组/子服 | server_name
- polls.js: server_groups CRUD with alias (add/edit, dup check)
- servers page: alias display + edit; new 外部API page: client mgmt + quick docs
- API.md: full external API section (auth matrix, server param syntax)
- verified: 37 checks incl. resolveServer sandbox (alias/group/fallback)
|
2026-08-19 19:12:34 +08:00 |
|
|
|
a11df22600
|
feat: system logs - email log + system log with admin UI
- db: email_logs (sent/failed) + system_logs (info/warn/error) tables,
auto-migrated for existing installs
- backend/logger.js: logEmail/logSystem with try/catch (never breaks flow)
- mailer: log send result (SMTP unconfigured/sent/failed + error msg)
- webhook: log blocked-internal, non-2xx response, send failure
- server: error middleware records 500 errors to system_logs
- routes/logs.js: GET /logs/emails + /logs/system (admin/owner, filters)
- UI: 系统日志 page (owner/admin) with system/email tabs + filters
- API docs updated
|
2026-08-17 05:14:41 +08:00 |
|
|
|
559970c5b7
|
feat: one account can bind both netease + skin identities
- db: user_identities table (UNIQUE user_id+source), migrate backfill from users
- auth: GET/POST/DELETE /api/auth/identities - bind/unbind/list identities
(netease requires UID, one per source, name uniqueness, keep >=1)
- register/external/plugin/admin-created users auto-write primary identity
- tickets: submit uses selected identity (validated belongs to user)
- dashboard: 我的身份 card with bind/unbind UI
- ticket-create: identity selector when >1 identity
|
2026-08-17 01:17:09 +08:00 |
|
|
|
6e9101a506
|
fix: deploy crash + multiple bug fixes + cleanup
- server.js: fix getSiteName() returning string when not installed causing
'getSiteName(...).then is not a function' crash on homepage (deploy blocker)
- server.js: auto-load business routes after install completes (no restart needed),
HTML cache keyed by api_key
- install: validate db name/email/password, trigger route loading after complete
- app.js: fix forgot/reset/verify pages rendering HomePage (missing page mapping)
- verify.js: support URL token auto-verification for external registration links
- auth: new email_code template for 6-digit code, reset_password template
(forgot-password was using verify_email template)
- upload.js: fix MP4 magic-bytes check using undefined buf variable
- tickets.js: status enum validation, anonymous submission rate limit
- security.js: XSS whitelist preserves email template HTML, strips scripts,
blocks javascript:/data: hrefs; CORS reject returns 403
- bans.js: allow clearing reason/duration, status enum validation
- users.js: fix req.user.role ReferenceError in create user modal
- home.js: tracking results now have detail view button
- .gitignore: ignore data/ (db credentials), logs, session files, temp scripts
|
2026-08-16 21:21:25 +08:00 |
|
|
|
ce51abc127
|
fix: add source field to bans + display in list
|
2026-07-18 01:26:37 +08:00 |
|
|
|
5ed109ec0e
|
feat: ban list with dashboard widget, owner add/edit bans
|
2026-07-18 00:52:33 +08:00 |
|
|
|
a8309aa456
|
refactor: use user_servers junction table instead of JSON column
|
2026-07-15 04:55:57 +08:00 |
|
|
|
a34314ac9d
|
feat: admin server assignment in user management
|
2026-07-15 04:53:27 +08:00 |
|
|
|
125b4f99fc
|
fix: only two sources (netease/skin), plugin uses skin
|
2026-07-15 04:36:01 +08:00 |
|
|
|
c493c1204b
|
feat: registration source selector (netease/skin/java)
|
2026-07-15 04:34:06 +08:00 |
|
|
|
0d26653c85
|
fix: migrate new tables on every startup, not just fresh install
|
2026-07-14 04:00:49 +08:00 |
|
|
|
4d8bc848e1
|
feat: features as GitHub Issues style with comments/discussion, status filter
|
2026-07-14 03:25:50 +08:00 |
|
|
|
4913984391
|
feat: poll groups/servers, timed polls, features sort+filter by group
|
2026-07-14 03:17:13 +08:00 |
|
|
|
ee2f33c61f
|
feat: feature voting (PCL-style), poll owner edit/delete, blind polls for all
|
2026-07-14 01:17:56 +08:00 |
|
|
|
116fe89ac8
|
feat: poll/voting system with live results and bar charts
|
2026-07-13 21:37:16 +08:00 |
|
|
|
2a18b4b1a8
|
perf: cache config.json reads by mtime, reduce sync I/O
|
2026-07-13 04:18:52 +08:00 |
|
|
|
33078855cb
|
feat: appealing status, auto-close parent on appeal resolved, closed=final
|
2026-07-12 17:42:42 +08:00 |
|
|
|
10b6ff94ed
|
feat: admin complaint (owner only) + result appeal (one per ticket, owner only)
|
2026-07-12 15:19:09 +08:00 |
|
|
|
5dd0db76be
|
fix: add UNIQUE on email, check dup email in profile update, generic error messages in auth route
|
2026-07-12 04:20:56 +08:00 |
|
|
|
247a4e851d
|
feat: MC Report System - MySQL + Express + Vanilla JS SPA
|
2026-07-12 01:23:19 +08:00 |
|
