shaw
2de6ccb071
fix(security): 补齐审计日志脱敏缺口 + step-up 下载/取消体验修复
审计发现修复:
高危——审计日志请求体脱敏不全(audit_logs 沦为明文凭证聚合点):
- 键名归一化比对(小写+去分隔符),覆盖 privateKey/apiv3key 等无分隔符与 camelCase 写法
- 程序化并入 SensitiveCredentialKeys 与 providerSensitiveConfigFields 两份权威敏感表,防清单漂移
- 补齐 proxy_key(内嵌代理密码)、custom_key(自设 API Key 明文)精确键
- Codex session 导入路由 body 整体由粘贴的 auth JSON 构成,键级脱敏无法覆盖,整体不入库
- 新增守卫测试:两份权威表的每个键必须被审计脱敏命中;provider_key 等渠道标识保留以便追责
中危——step-up 前端体验:
- 备份下载改同页 anchor 导航(预签名 URL 后端强制 attachment disposition),
避免 step-up 弹窗 await 耗尽瞬态激活后 window.open 被浏览器拦截
- useStepUp.run 用户取消时抛 StepUpCancelledError sentinel,
三个调用点静默处理,不再把取消误报为红色错误 toast
低危:
- 修正审计中间件挂载位置的陈旧注释(实际挂在认证之后)
- 审计 body 捕获改 LimitReader 按 256KB 上限截断读取,超出部分拼接回填,
避免大体积导入请求被完整复制进内存两次
- TOTP step-up 弹窗验证成功后即时清空验证码输入
2026-07-16 14:38:16 +08:00
..
2026-07-14 09:49:57 +08:00
2026-05-14 11:46:24 +08:00
2026-07-15 10:51:13 +08:00
2026-07-13 19:49:56 +08:00
2026-07-15 16:07:09 +08:00
2026-07-14 16:18:26 +08:00
2026-07-14 16:18:26 +08:00
2026-04-09 18:14:28 +08:00
2026-07-01 12:21:45 +08:00
2026-07-15 09:40:08 +08:00
2026-06-16 11:39:15 +08:00
2026-07-15 23:58:46 +08:00
2026-07-15 23:58:46 +08:00
2026-07-15 23:58:46 +08:00
2026-07-15 23:58:46 +08:00
2026-07-15 23:58:46 +08:00
2026-07-15 23:58:46 +08:00
2026-05-20 15:44:00 +08:00
2026-02-02 22:13:50 +08:00
2026-05-03 22:12:57 +08:00
2026-05-03 22:12:57 +08:00
2026-05-03 22:12:57 +08:00
2026-05-20 15:52:00 +08:00
2026-04-21 10:13:28 -07:00
2026-04-09 18:14:28 +08:00
2026-05-14 16:38:45 +08:00
2026-01-03 06:37:08 -08:00
2026-01-03 06:37:08 -08:00
2026-02-02 22:13:50 +08:00
2026-06-05 14:00:57 +08:00
2026-07-11 17:31:30 +08:00
2026-05-07 09:14:47 +08:00
2026-07-08 15:51:22 +08:00
2026-07-13 14:13:11 +08:00
2026-07-16 13:47:50 +08:00
2026-04-22 18:36:44 +08:00
2026-04-22 14:56:56 +08:00
2026-03-14 17:48:21 +08:00
2026-07-16 14:38:16 +08:00
2026-07-07 10:50:36 +08:00
2026-07-07 10:50:36 +08:00
2026-07-07 18:53:56 +08:00
2026-07-07 18:53:56 +08:00
2026-07-07 20:13:28 +08:00
2026-07-07 18:53:56 +08:00
2026-02-07 19:46:42 +08:00
2026-02-08 12:05:39 +08:00
2026-02-07 19:46:42 +08:00
2026-05-29 17:19:15 +08:00
2026-07-01 00:37:51 +08:00
2026-06-12 22:09:53 +08:00
2026-05-19 22:05:43 +08:00
2026-04-14 09:35:20 +08:00
2026-07-15 09:35:34 -07:00
2026-04-09 18:14:28 +08:00
2026-04-14 18:34:57 +08:00
2026-06-25 23:41:00 +08:00
2026-07-14 01:29:30 +08:00
2026-03-02 16:04:20 +08:00
2026-03-27 14:33:05 +08:00
2026-01-01 04:01:51 +08:00
2026-07-13 15:32:42 +08:00
2026-07-13 15:32:42 +08:00
2026-05-07 09:14:47 +08:00
2026-06-12 01:47:01 +08:00
2026-06-26 10:43:05 +08:00
2026-04-15 15:02:21 +08:00
2026-01-11 15:00:16 +08:00
2026-01-11 15:00:16 +08:00
2026-05-23 15:04:24 +08:00
2026-05-23 15:04:24 +08:00
2026-06-12 15:06:01 +08:00
2025-12-25 17:15:01 +08:00
2025-12-26 16:47:44 +08:00
2026-04-14 09:35:20 +08:00
2026-07-14 01:29:30 +08:00
2026-02-05 21:52:54 +08:00
2026-02-10 11:42:39 +08:00
2025-12-31 23:42:01 +08:00
2026-07-01 12:21:45 +08:00
2026-02-28 15:01:20 +08:00
2026-06-12 01:47:01 +08:00
2026-02-02 22:13:50 +08:00
2026-02-26 10:53:04 +08:00
2026-03-02 16:04:20 +08:00
2026-01-14 15:55:44 +08:00
2026-01-14 15:55:44 +08:00
2026-01-15 18:27:06 +08:00
2026-03-02 16:04:20 +08:00
2026-07-09 22:30:04 +08:00
2026-07-09 22:30:04 +08:00
2026-07-14 14:55:30 +08:00
2026-07-14 14:55:30 +08:00
2026-05-20 16:53:23 +08:00
2026-05-20 11:33:29 +08:00
2026-07-13 09:54:51 +08:00
2026-05-26 13:57:59 +08:00
2026-07-13 23:31:18 +08:00
2026-07-15 23:58:46 +08:00
2026-07-15 23:58:46 +08:00
2026-02-28 15:01:20 +08:00
2026-02-23 12:45:37 +08:00
2025-12-25 17:15:01 +08:00
2025-12-26 16:47:44 +08:00
2026-03-02 01:12:41 +08:00
2026-01-03 06:36:35 -08:00
2026-04-08 10:39:15 -07:00
2026-03-27 20:11:24 +08:00
2026-06-05 22:47:24 +08:00
2026-06-05 22:47:24 +08:00
2026-04-22 18:01:51 +08:00
2026-04-22 18:01:51 +08:00
2026-07-11 17:32:06 +08:00
2026-07-11 17:32:06 +08:00
2026-07-09 15:38:59 +08:00
2026-04-23 12:58:13 +08:00
2026-07-13 23:32:16 +08:00
2026-04-23 12:23:04 +08:00
2026-04-23 12:23:04 +08:00
2026-07-14 14:55:30 +08:00
2026-01-15 15:14:44 +08:00
2026-07-14 14:55:30 +08:00
2026-02-28 15:01:20 +08:00
2026-06-05 10:58:44 +08:00
2026-02-14 11:21:30 +08:00
2026-07-14 14:55:30 +08:00
2026-01-11 23:49:03 +08:00
2026-01-09 20:52:57 +08:00
2026-03-03 01:05:11 +08:00
2026-06-05 14:00:57 +08:00
2026-01-23 19:39:48 +08:00
2026-02-12 14:20:14 +08:00
2026-02-12 14:20:14 +08:00
2026-06-05 10:58:44 +08:00
2026-01-12 14:17:42 +08:00
2026-05-19 19:37:41 +08:00
2026-01-11 23:57:20 +08:00
2026-07-14 01:29:46 +08:00
2026-01-24 01:14:44 +08:00
2026-01-09 20:52:57 +08:00
2026-07-14 14:55:30 +08:00
2026-06-16 11:48:13 +08:00
2026-04-09 18:14:28 +08:00
2026-03-02 16:04:20 +08:00
2026-03-02 16:04:20 +08:00
2026-04-09 19:25:08 +08:00
2026-07-14 09:23:02 +08:00
2026-07-14 09:23:02 +08:00
2026-01-15 15:14:44 +08:00
2026-02-03 17:12:27 +08:00
2026-03-19 23:48:37 +08:00
2025-12-29 19:23:49 +08:00
2026-06-08 00:01:30 +08:00
2026-07-15 23:58:46 +08:00
2026-07-15 23:58:46 +08:00
2025-12-26 16:47:44 +08:00
2025-12-26 16:47:44 +08:00
2025-12-26 16:47:44 +08:00
2026-05-20 16:08:41 +08:00
2026-04-09 18:14:28 +08:00
2026-05-20 16:08:41 +08:00
2026-02-02 22:13:50 +08:00
2026-07-14 01:29:30 +08:00
2026-02-05 12:42:54 +08:00
2026-07-14 01:29:30 +08:00
2026-07-14 01:29:30 +08:00
2026-02-28 20:38:35 +08:00
2026-03-08 06:59:53 +08:00
2026-07-15 00:12:40 +08:00
2026-07-16 00:40:46 +08:00
2026-07-16 04:07:15 +08:00
2026-07-16 10:31:21 +08:00
2026-07-13 21:56:47 +08:00
2026-07-13 21:56:47 +08:00
2026-02-02 22:13:50 +08:00
2026-02-12 12:07:20 +08:00
2026-02-12 12:04:13 +08:00
2026-07-14 01:29:30 +08:00
2026-07-14 01:29:30 +08:00
2026-07-14 01:29:30 +08:00
2026-07-14 01:29:30 +08:00
2026-06-02 12:46:46 +08:00
2026-03-04 10:15:42 +08:00
2025-12-29 10:03:27 +08:00
2026-03-07 18:19:04 +08:00
2026-02-02 22:13:50 +08:00
2026-06-26 10:36:09 +08:00
2026-03-03 16:11:05 +08:00
2025-12-30 17:13:32 +08:00
2026-01-03 06:34:00 -08:00
2026-01-11 21:54:52 -08:00
2026-03-27 14:33:05 +08:00
2026-03-27 14:33:05 +08:00
2026-07-16 13:47:50 +08:00
2026-01-03 06:36:35 -08:00
2026-01-03 10:52:24 +08:00
2025-12-25 16:01:17 +08:00
2025-12-25 17:15:01 +08:00
2026-07-15 23:58:46 +08:00
2026-04-23 14:53:57 +08:00
2026-07-07 18:53:56 +08:00
2026-07-07 18:53:56 +08:00
2026-02-02 22:13:50 +08:00
2026-02-28 15:01:20 +08:00
2026-02-28 15:01:20 +08:00
2026-07-10 15:13:11 +08:00
2026-07-08 08:49:21 +08:00
2026-05-30 17:52:18 +08:00
2026-07-15 10:03:38 -07:00
2026-07-03 21:02:32 +08:00
2026-07-15 10:03:38 -07:00
2026-07-15 10:03:38 -07:00
2026-04-09 18:14:28 +08:00
2026-06-24 23:43:03 +08:00
2026-07-08 08:49:21 +08:00
2026-07-10 15:13:11 +08:00
2026-03-12 18:38:09 +08:00
2026-07-10 15:13:11 +08:00
2026-01-01 19:09:06 +08:00
2026-04-23 16:34:37 +08:00
2026-07-10 10:18:50 +08:00
2026-07-07 10:04:38 +08:00
2026-05-29 17:19:15 +08:00
2026-06-30 13:22:27 +08:00
2026-05-26 10:49:20 +08:00
2026-05-29 17:19:15 +08:00
2026-05-29 17:19:15 +08:00
2026-05-26 10:49:20 +08:00
2026-04-22 13:22:33 +08:00
2026-04-22 14:56:56 +08:00
2026-04-22 14:56:56 +08:00
2026-06-08 22:54:01 +08:00
2026-06-06 10:28:28 +08:00
2026-04-21 00:13:40 +08:00
2026-04-22 16:38:36 +08:00
2026-05-30 17:52:18 +08:00
2026-07-10 10:56:49 +08:00
2026-07-10 10:56:49 +08:00
2026-04-22 02:42:43 +08:00
2026-07-10 10:56:49 +08:00
2026-04-23 16:34:37 +08:00
2026-07-10 10:56:49 +08:00
2026-07-10 10:56:49 +08:00
2026-07-16 13:47:50 +08:00