4 Commits

Author	SHA1	Message	Date
canglan	d7fb971f9f	fix: public footer reads DB settings for all visitors ... - settings.js: new public GET /settings/public returns only copyright + icp (no auth, no sensitive settings leaked) - app.js loadFooter(): dropped Auth.isAdmin() gate, uses public endpoint; showPublic() (home/root) now loads footer too - security.js: apiKeyGuard whitelist /api/settings/public and /api/settings/skin-site	2026-08-22 02:51:20 +08:00
canglan	8c5ce78fd0	chore: add AGPLv3 copyright header to all source files ... - 52 JS files (backend + public/js): header with Copyright (C) 2026 Sea Network Technology Studio Author: CangLan <admin@sea-studio.top> + AGPLv3 notice - idempotent (skips if header present), all syntax-checked	2026-08-19 20:27:05 +08:00
canglan	1d669fd1d0	feat: skin site UUID lookup - auto-fetch UUID from player name ... - GET /settings/uuid-lookup?site=&name= : proxy Yggdrasil API (POST {site}/api/yggdrasil/api/profiles/minecraft), SSRF guard, 10s timeout, name regex, UUID formatting (with dashes) - GET /settings/skin-site : public read of configured skin site - settings page: 皮肤站地址 config - bind identity modals (player dashboard + admin users): 获取UUID button, auto-fill site from settings, auto-fill UID from lookup - verified live against littleskin.cn (Steve -> df273bda...) - API docs updated	2026-08-17 02:05:21 +08:00
canglan	247a4e851d	feat: MC Report System - MySQL + Express + Vanilla JS SPA	2026-07-12 01:23:19 +08:00