ForgQi
dd7bb7a9ee
Centralize authorization into a policy layer so route, field, and user-permission checks all use the same decision point. The frontend now revalidates /v1/me after 403s or dropped connections, and the users page fetches the real role/permission catalog from the backend instead of hardcoding role descriptions. This also tightens field-level protection for sensitive config/template data and avoids exposing user-management controls when auth is off. The backend and migrations are updated to handle LF/CRLF checkout differences in SQL migration checksums, with compatibility reconciliation for older databases and safeguards to prevent silent drift of previously shipped migrations.
5 lines
337 B
Plaintext
5 lines
337 B
Plaintext
# sqlx 对迁移文件的原始字节求 SHA-384 并记进 _sqlx_migrations。同一份 SQL 在
|
|
# core.autocrlf=true 的 Windows（含 GitHub windows-latest 上的发布构建）会被检出成 CRLF，
|
|
# 编出来的二进制就内嵌另一套摘要。一律检出成 LF，各平台的构建才记同一套校验和。
|
|
*.sql text eol=lf
|