ForgQi
dd7bb7a9ee
Centralize authorization into a policy layer so route, field, and user-permission checks all use the same decision point. The frontend now revalidates /v1/me after 403s or dropped connections, and the users page fetches the real role/permission catalog from the backend instead of hardcoding role descriptions. This also tightens field-level protection for sensitive config/template data and avoids exposing user-management controls when auth is off. The backend and migrations are updated to handle LF/CRLF checkout differences in SQL migration checksums, with compatibility reconciliation for older databases and safeguards to prevent silent drift of previously shipped migrations.
61 lines
637 B
Plaintext
61 lines
637 B
Plaintext
.idea
|
|
.vscode
|
|
*.pyc
|
|
*.flv
|
|
*.mp4
|
|
*.part
|
|
*.webm
|
|
backup
|
|
venv./
|
|
.venv/
|
|
.run/
|
|
test/
|
|
pdm.lock
|
|
.pdm-python
|
|
config.*.*
|
|
config.yaml
|
|
!public/config.yaml
|
|
/configlog.ini
|
|
ds_update.log*
|
|
*.cookie
|
|
*.zip
|
|
*.exe
|
|
*.egg-info
|
|
dist/
|
|
build/
|
|
cover/
|
|
cache/
|
|
.cursor/
|
|
|
|
*.back
|
|
bili.cookie.json
|
|
archive.txt
|
|
/node_modules
|
|
watch_process.pid
|
|
biliup/**/public
|
|
*.xml
|
|
!package-lock.json
|
|
qrcode.png
|
|
*.log
|
|
*.tsbuildinfo
|
|
/*.ts
|
|
/biliup/stream-gears/
|
|
data/
|
|
.next
|
|
out
|
|
downloads/
|
|
target
|
|
_internal
|
|
.trae/
|
|
pnpm-lock.yaml
|
|
cookies.json
|
|
.augment/
|
|
.cunzhi-memory/
|
|
.serena/
|
|
.cargo/
|
|
logs/
|
|
CLAUDE.md
|
|
.claude/
|
|
/crates/stream-gears/stream_gears/*.so
|
|
/crates/stream-gears/stream_gears/*.pyd
|