rogee/gochat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
584 Commits 1 Branch 0 Tags
57f8a64fd846319684933e7ac9f422d6adb6bf13
Commit Graph
17 Commits
Author SHA1 Message Date
Rogeeandrogee eb83d241fe HH-547: allow cross-origin widget requests (#126) 
* HH-547: allow cross-origin widget requests

* fix(HH-547): align production preflight with wildcard CORS

---------

Co-authored-by: Rogee <rogee@ipao.vip>
 2026-08-23 20:11:04 +08:00
rogee 25ef9ae494 fix(deploy): reuse shared redis and serve dashboard at root 2026-08-23 17:32:02 +08:00
Rogeeandrogee a5d244d293 HH-500: add reproducible production dist bundle (#111) 
* HH-500: add reproducible production dist bundle

* HH-500: make production bundle builds reproducible

* HH-500: lock complete runtime APK closure

---------

Co-authored-by: Rogee <rogee@ipao.vip>
 2026-08-23 00:22:20 +08:00
Rogeeandrogee fb83285617 HH-445: deploy production observability and runbooks (#96) 
* HH-445: deploy production observability and runbooks

* fix(ops): share production database DSN

* fix(HH-445): enforce database TLS gate

* fix(HH-445): preserve production serve command

* fix(prod): require external database dependencies

* fix(prod): unify database host rejection gates

* test(prod): enforce exact database TLS runbook contract

---------

Co-authored-by: Rogee <rogee@ipao.vip>
 2026-08-22 19:39:57 +08:00
Rogeeandrogee f719529d66 fix(security): harden auth and secret handling (HH-444) (#101) 
* fix(security): harden auth and credential handling (HH-444)

* fix(security): address HH-444 review blockers

* fix(security): close remaining HH-444 review blockers

---------

Co-authored-by: Rogee <rogee@ipao.vip>
 2026-08-22 15:45:06 +08:00
Rogeeandrogee 7a9fec33c5 HH-439: harden production artifact pipeline (#86) 
* HH-439: harden production artifact pipeline

* fix(HH-439): address production compose review

* fix(HH-439): preserve previous JWT secrets in production

---------

Co-authored-by: Rogee <rogee@ipao.vip>
 2026-08-21 20:20:00 +08:00
Rogeeandrogee cf263d10b4 HH-437: harden production auth and tenant authorization (#84) 
* HH-437 harden auth and account authorization

* HH-437 reject revoked platform access

---------

Co-authored-by: Rogee <rogee@ipao.vip>
 2026-08-21 19:13:10 +08:00
Rogee 04b999e377 refactor: 移除 FakeMessagePlatform channel 全部逻辑、展示、配置 
- 删除 channels/fake/ 整个 Node.js FakeMessagePlatform (8文件)
- 删除后端 FakeProvider (fake.go + fake_test.go) + FakeWebhookHandler (fake_webhook.go)
- bootstrap.go: 移除 FakeProvider 接线 + isFakeChannelEnabled()
- router.go: 移除 FakeWebhook 字段 + /webhooks/fake/:identifier 路由
- provider.go: 移除 ChannelFake 常量
- inbox_service.go: 移除 fake channel 类型验证 + isFakeChannelAllowed()
- 前端: 移除 Fake.vue + ChannelFactory/ChannelList/ChannelItem 引用 + i18n (en/zh_CN)
- package.json: 移除 fake:start/dev/test/dev:all 脚本
- pnpm-workspace.yaml: 移除 channels/fake
- .env/.env.example/quickstart: 移除 GOCHAT_ALLOW_FAKE_CHANNEL
- 测试: bridge_listener_test 改用 web_widget, router_test 移除 fake 路由断言
- 保留 fake:ai LLM Provider (backend/internal/llm/fake_provider.go) — 与 channel 无关
 2026-07-30 09:09:17 +08:00
Rogee 92f0d51375 refactor: 统一 DB/Redis 配置为 DSN 模式 + 移除 Helm/K8s 部署 
- DatabaseConfig: Host/Port/User/Password/Name/DBName/SSLMode → 单个 DSN 字段
- RedisConfig: Host/Port/Password/DB/URL → 单个 DSN 字段
- 环境变量: GOCHAT_DATABASE_* (7个) → GOCHAT_DATABASE_DSN, GOCHAT_REDIS_* (5个) → GOCHAT_REDIS_DSN
- validator.go: DSN URL 解析校验 (scheme + host)
- redis.go: redis.ParseURL(cfg.DSN) 直连
- 所有 docker-compose / CI / shell 脚本 / .env 同步更新
- 删除 deploy/helm/ 整个目录 (20个文件)
- CI 删除 helm-validate / deploy-staging / deploy-production 三个 job
- 文档同步更新 (README, 架构设计, PRD, 滚动升级)
 2026-07-29 20:58:10 +08:00
Rogee 851ca7e372 refactor: 移除 SAML/LDAP/MFA 登录方式，仅保留本地账号密码和 OIDC 
后端移除：
- SAML: auth/saml.go, handler/saml_handler.go, account_saml_settings_handler.go,
  model/account_saml_settings.go, model/saml_idp_config.go, repo/*.go
- LDAP: auth/ldap.go, handler/ldap_handler.go, model/account_ldap_settings.go,
  repo/account_ldap_settings_repo.go
- MFA: auth/mfa.go, handler/mfa_handler.go
- auth_service: 移除 mfaService 依赖、MFARequired 字段、LoginWithMFA 方法
- auth_handler: 移除 LoginMFA handler、MFA 分支逻辑
- bootstrap: 移除 SAML/LDAP/MFA service 初始化和 handler 注册
- sso_middleware: 精简为仅支持 OIDC provider
- router: 移除 SAML/LDAP/MFA 路由注册
- config: 移除 SAMLConfig/LDAPConfig struct 和 defaults

前端移除：
- v3/login: 移除 MFA 验证流程和 SAML 登录入口
- v3/api/auth: 移除 MFA 响应处理
- v3/routes: 移除 SSO login 路由
- dashboard: 移除 MFA 设置页面、SAML 安全设置页面
- i18n: 移除 mfa.json
- featureFlags: 移除 SAML feature flag

.env.example / .env: 移除 SAML/LDAP 配置段
 2026-07-29 19:03:04 +08:00
Rogee 09f274e965 chore: 移除 .env.example 中 Twitter/Microsoft Channel OAuth 配置 2026-07-29 16:57:56 +08:00
Rogee 27d8d4ed08 chore: 精简 .env.example，移除未使用的配置项 
移除的配置（代码中不存在消费者）：
- GOCHAT_VERSION
- GOCHAT_METRICS_ENABLED / GOCHAT_METRICS_PORT
- GOCHAT_WS_* (WebSocket 配置)
- GOCHAT_ANALYTICS_* (Analytics/Reporting 配置)
- SMTP_FROM_EMAIL (代码用 SMTP_FROM / MAILER_SENDER_EMAIL)

新增 Search / Storage 段（代码中有 env binding 但 .env.example 缺失）。
Redis 改为使用 GOCHAT_REDIS_URL（代码实际消费的字段）。
SAML 补充 GOCHAT_SAML_ENABLED 开关。
 2026-07-29 16:41:05 +08:00
Rogee fa6737e258 refactor: 精简配置体系，移除 OAuth 登录/Rate Limit/Admin env 配置 
- 移除 .env.example 中 Feature Flags 段（代码中不存在这些 env var）
- 移除 Google/GitHub OAuth 登录认证代码（auth/oauth.go、auth_handler
  OAuthAuthorize/OAuthCallback 路由、auth_service OAuthLogin），保留
  Twitter/Google 作为消息渠道 provider
- 从 OAuthConfig 移除 GitHub 字段（Google 保留供 channel provider 使用）
- 移除 RateLimitConfig 可配置性，RateLimit 中间件改为硬编码 100 req/min、
  60s window，移除 config/validator/reloader 中的 rate_limit 相关代码
- 移除 .env.example 中 GOCHAT_ADMIN_EMAIL/PASSWORD 配置
- 新增 gochat init 命令：交互式或通过 --email/--password/--name flags
  初始化超级管理员账户，创建默认 Account + AccountUser 关联
 2026-07-29 16:26:19 +08:00
rogee df23caf7d9 feat(copilot): move provider configuration to settings 2026-07-12 22:27:29 +08:00
rogee f923791d39 update 2026-07-12 12:20:23 +08:00
rogee 7f2d5579ff fix: stabilize development config and account settings 2026-07-11 17:15:38 +08:00
Rogee 8ac150bc7b second commit 2026-06-04 15:44:48 +08:00