Uh oh!
There was an error while loading. Please reload this page.
feat(usercenter): M1 loginByProvider + M2a 解绑/列表（合并进 main） - #47
Merged
Conversation
RFC #42 / ADR-001 第二阶段。 loginByProvider（loginByGithub 委托至此）： - 账号仍按 "{provider}_{id}" 用户名主查（双写期，M3 才翻转到 identity 主查） - 无论新建/已存在都维护一行 user_identities（identity 双写），缺行惰性补齐， 兜住 M0-M1 窗口回填未覆盖的账号；identity 写失败不阻断登录（同 INV-003 策略） - github_id 列双写沿用（createUser/updateProfile 已写） OAuth state/cookie 硬化（INV-007，登录 CSRF）： - render 种 httpOnly + SameSite=Lax 的 ih_oauth_state cookie - callback 在换 token 前校验 URL state == cookie，缺失/不匹配即拒（error=oauth_state） - callback 端点保持 github 专用（泛化 AuthRequest 工厂留到 M3 真接第二个 provider） 新增 INV-007 进 SECURITY.md（INV-006 已被限流占用，按流水规则顺延）。 全量 257 测试通过；生产数据核查：51 个 github 账号 username 约定 0 例外。
RFC #42 / ADR-001。绑定新 provider（M2b）走 OAuth 流程另开 PR；本 PR 做查看+解绑， 自包含，闭合 M0 review 的两个发现。 - GET /api/user-center/identities：列出当前用户已绑定身份（不泄漏 provider_user_id） - DELETE /api/user-center/identities/{provider}：解绑 - 不能解绑最后一种登录方式（防永久锁死；OAuth 随机密码不可靠，保守按剩余身份数判定） - 解绑 github 同事务清空 github_id 列（否则 schema.sql 启动回填按残留列值静默复活） - repository 加 deleteByUserIdAndProvider / clearGithubId 全量 263 测试通过（+6：列表/解绑/锁死拦截/未拥有拒绝/清列/匿名 401）。
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
把 M1 + M2a 干净地补进 main。
背景：#44（M1）的 base 误填成 M0 分支，合进了分支而非 main，导致 M1 从未进主干；
#46（M2a）分支因此与 squash 后的 main 冲突。本 PR 从当前 main cherry-pick M1 与
M2a 两个 commit（M0/review/db-fix 已在 main #43），无冲突，全量 263 测试通过。
硬化（INV-007）
替代 #46（将关闭）。