cykj/hzdyjs
1
0 Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
669 Commits 2 Branches 18 Tags
fa6bf7aea276f59779cec59f1cad12d4a645a18b
Commit Graph
669 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
“wuzhen”andCursor fa6bf7aea2 fix(security): 恢复 CORS 通配，避免生产域名不匹配导致整站无法访问 
Constraint: 优先恢复生产可用性，CORS 收紧可后续再按域名白名单做
Confidence: high
Scope-risk: narrow
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-26 15:19:04 +08:00
“wuzhen”andCursor 9b1ce3c4b1 fix(security): 恢复 JWT 默认密钥，避免已登录用户会话整体失效 
随机更换 jwt-secret-key 会导致生产环境旧 token 全部无法校验，影响正常访问；改回原固定密钥。

Constraint: 用户明确要求不以随机密钥打断现有会话
Confidence: high
Scope-risk: narrow
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-26 14:59:46 +08:00
Codex 5b4be04645 ci: enable web release builds on LAN Drone runner 2026-10-26 14:19:06 +08:00
“wuzhen”andCursor da8d332fac fix(security): 修复网安扫描相关严重/高危/中危漏洞并加固学生密码重置 
关闭工作流 SpEL 命令执行与社团活动 SQL 注入，补齐越权、调试接口、登录喷洒和异常回显等问题；学生密码改为随机临时密码，Web/移动端支持复制。

Constraint: 流程发起/办理接口保持仅登录校验，避免影响请假审批
Rejected: 开启验证码 | Web/移动端登录页均未实现，开启会导致无法登录
Confidence: high
Scope-risk: broad
Not-tested: 生产环境与社团社长/指导老师视角
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-26 13:44:51 +08:00
“wuzhen”andCursor 845c7fd942 fix(dorm): 假期留宿按时刻判定，点名可同时显示请假与留宿 
结束时刻过后不再整天标留宿；请假与假期留宿可同时展示，标签仅显示状态名。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-26 09:36:38 +08:00
“wuzhen”andCursor df4c21bd0d feat(xg): 新增按学号重置学生密码（Web/移动端） 
学工老师可按学号查询并重置学生登录密码为固定默认值，独立权限不复用系统用户重置。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-26 08:29:50 +08:00
zlwuandCursor 0765f00458 chore: 刷新 mobile/pnpm-lock.yaml 与 package.json 对齐（含 dayjs） 
Co-authored-by: Cursor <cursoragent@cursor.com>
ci-pkg-test-202610241923-no-web9 		2026-10-24 19:23:06 +08:00
zlwuandCursor bea76c9e11 ci: 简化 mobile 流水线为 frozen-lockfile，并更新设计文档 
Co-authored-by: Cursor <cursoragent@cursor.com>
ci-pkg-test-202610241829-no-web8 		2026-10-24 18:29:12 +08:00
zlwuandCursor 2550e9713d fix: 纳入 mobile pnpm-lock 并简化 CI 安装，保证与本地依赖树一致 
删除无效 pnpm-workspace.yaml；CI 用 frozen-lockfile + 跳过 puppeteer 下载。

Co-authored-by: Cursor <cursoragent@cursor.com>
ci-pkg-test-202610241829-no-web7 		2026-10-24 18:29:00 +08:00
zlwuandCursor 4e1ca614d4 fix: mobile CI 使用 hoisted node_modules，修复 webpack DefinePlugin 找不到 
Co-authored-by: Cursor <cursoragent@cursor.com>
ci-pkg-test-202610241820-no-web6 		2026-10-24 18:20:30 +08:00
zlwuandCursor 291de33d54 fix: mobile CI 跳过 puppeteer Chromium 下载，避免 install 长时间卡住 
Co-authored-by: Cursor <cursoragent@cursor.com>
ci-pkg-test-202610241812-no-web5 		2026-10-24 18:11:59 +08:00
zlwuandCursor 902b04a21a docs: 同步 mobile CI 安装说明（无 lockfile / 无效 workspace） 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-24 17:24:52 +08:00
zlwuandCursor ba6a6af131 fix: mobile CI 改用非 frozen install（pnpm-lock 未纳入仓库） 
Co-authored-by: Cursor <cursoragent@cursor.com>
ci-pkg-test-202610241724-no-web4 		2026-10-24 17:24:40 +08:00
zlwuandCursor 5ab54912a5 fix: mobile CI 临时移走无效 pnpm-workspace.yaml 后再 install 
Co-authored-by: Cursor <cursoragent@cursor.com>
ci-pkg-test-202610241717-no-web3 		2026-10-24 17:17:01 +08:00
zlwuandCursor d6af2f1892 fix: mobile CI 用 --registry 指定镜像，避免 pnpm config 因 workspace 报错 
Co-authored-by: Cursor <cursoragent@cursor.com>
ci-pkg-test-202610241709-no-web2 		2026-10-24 17:09:16 +08:00
zlwuandCursor dcd29040de ci: Drone 暂跳过 web，仅 tag 打包 backend 与 mobile-h5 
测试机内存不足以完成 Vite 生产构建，web 后续另议。

Co-authored-by: Cursor <cursoragent@cursor.com>
ci-pkg-test-202610241701-no-web 		2026-10-24 17:01:06 +08:00
zlwuandCursor d6769846f5 fix: CI web 构建堆提升至 5120MB，避免低内存优化后仍 OOM 
Co-authored-by: Cursor <cursoragent@cursor.com>
ci-pkg-test-202610241540-mem5g 		2026-10-24 15:40:39 +08:00
zlwuandCursor 9d93a373ae perf(web): 降低生产构建内存峰值，并启用 CI 低内存打包模式 
关闭按需 Element Plus 样式与构建期 dts、限制 rollup 并行、CI 跳过 gzip；
新增 npm run build:ci，供 Drone 在小内存机器上打包。

Co-authored-by: Cursor <cursoragent@cursor.com>
ci-pkg-test-202610241530-lowmem 		2026-10-24 15:30:38 +08:00
zlwuandCursor df6ce133dd fix: CI web 构建堆改为 6144MB，匹配前端实际内存需求 
Co-authored-by: Cursor <cursoragent@cursor.com>
ci-pkg-test-202610241424-mem6g 		2026-10-24 14:24:30 +08:00
zlwuandCursor 8c33135f4c fix: CI web 构建堆改为 3584MB，配合测试机扩容后的 swap 
Co-authored-by: Cursor <cursoragent@cursor.com>
ci-pkg-test-202610241321-mem35 		2026-10-24 13:21:47 +08:00
zlwuandCursor f067c95d93 fix: CI web 构建改用 2G 堆内存，适配测试机小内存 
Co-authored-by: Cursor <cursoragent@cursor.com>
ci-pkg-test-202610241310-mem2g 		2026-10-24 13:10:08 +08:00
zlwuandCursor 8a48b2cf02 fix: 统一 classMsg API 引用大小写，修复 Linux CI 构建找不到模块 
Co-authored-by: Cursor <cursoragent@cursor.com>
ci-pkg-test-202610241223-case 		2026-10-24 12:23:24 +08:00
zlwuandCursor 2fac0c91f6 fix: web 打包改用 Node 18 与 legacy-peer-deps，规避 npm edgesOut 错误 
Co-authored-by: Cursor <cursoragent@cursor.com>
ci-pkg-test-202610241204-n18 		2026-10-24 12:04:32 +08:00
zlwuandCursor 6ccb9f8cd4 fix: web 打包改用 npm install（仓库未纳入 package-lock.json） 
Co-authored-by: Cursor <cursoragent@cursor.com>
ci-pkg-test-202610241156-web 		2026-10-24 11:56:25 +08:00
zlwuandCursor 97706f1c5e feat: 增加 Drone tag 触发的 backend/web/mobile-h5 三端打包流水线 
Co-authored-by: Cursor <cursoragent@cursor.com>
ci-pkg-test-202610241140 		2026-10-24 11:39:46 +08:00
“wuzhen”andCursor b26bf58744 fix(mobile): 审批弹窗加大字号、补请假天数并缩小意见框 
同步请假类型下线外出/回家、新增临时回寝的安全 SQL（历史单不迁移）。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-22 08:45:27 +08:00
“wuzhen”andCursor 15ed3ec9fb fix(leave/dorm): 打回重提、审批摘要与待办标题优化 
修复请假/销假打回后空 flowCode 导致启动失败；审批弹窗展示请假摘要并去掉附件；待办标题短显请假/销假；点名 todaySummary 与楼栋关联脚本一并同步。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-21 11:24:48 +08:00
“wuzhen”andCursor de223a1f5a fix(mobile): 修复待办列表办理/审批按钮点击无响应 
u-button 的 click 不带事件对象，去掉 @click.stop，避免 stopPropagation 报错导致按钮失效。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-20 20:20:36 +08:00
“wuzhen”andCursor 7cea0566ac feat(xg): 请假审批修复、点名今日汇总与寝室扣分条例脚本 
同步请假/销假审批上下文与状态、宿舍点名今日汇总与假期留宿标识，并补充寝室检查扣分条例生产 SQL 与执行说明。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-20 18:01:12 +08:00
“wuzhen” 3e6349112c Merge branch 'master' of http://101.35.245.122:3000/hzdyjs-xg/all-project 2026-10-20 12:51:47 +08:00
zlwu 6034b215e5 提交 2026-10-20 11:50:53 +08:00
“wuzhen”andCursor b098b9ec44 fix(dorm): 点名提交后房间卡片立即展示本次统计人数 
提交结果里已有在寝、请假、不在人数，卡片原先只标记已点名，人数仍停在加载时的 0。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-19 08:43:52 +08:00
“wuzhen”andCursor a0bb39d069 fix(dorm): 人文学院宿舍分配班级树以班级表为准合并全校一年级 
班级树改为 xg_class_msg 主数据源（无住宿生也可见），统一入学年口径与学院向上解析，避免代理院一年级列表不全或挂错。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-14 09:46:04 +08:00
“wuzhen”andCursor 04d12bbce1 feat(dorm): 一年级宿舍分配到班级由人文学院代理操作 
复用请假代理学院配置，班级树对人文学院合并全校一年级、对他院隐藏一年级；分配/回收增加本学院床位与一年级代理写校验，不改班级真实归属。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-10-12 16:51:42 +08:00
zlwu 103a53f6f3 提交 2026-09-28 10:09:09 +08:00
“wuzhen”andCursor 623f5b65e7 fix(security): 恢复业务模块权限注解并加固上传与招生脱敏 
恢复各业务 Controller 被注释的 @SaCheckPermission，收紧 OSS 上传白名单，招生查询双因子脱敏，志愿团队改为简要 VO，降低垂直越权与敏感信息泄露风险。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-23 01:40:28 +08:00
zlwu 1e6dcb164c 提交 2026-09-22 19:22:18 +08:00
“wuzhen”andCursor 5fd0042068 fix(dorm): 班主任床位分配页去掉退宿选中床位按钮 
避免老师误点退宿，页面仅保留分配、收回与调宿操作。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-22 15:41:57 +08:00
“wuzhen”andCursor 64f805cca4 fix(dorm): 点名请假仅认审批完成，并修正点名时间时区 
宿舍点名/卫生检查只展示 finish 请假；点名提交改用服务端本地时间，避免 toISOString 少 8 小时。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-22 15:37:46 +08:00
“wuzhen”andCursor a6a5b88f47 fix(leave): 修复请假流程 waiting 与业务 draft 不同步导致无审批按钮 
申请人提交后业务表可能仍停在 draft，办理页不显示审批按钮；在请假模块内补齐任务创建时状态对齐，禁止 waiting 被回写为 draft，并仅在暂存时写 draft。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-20 10:27:28 +08:00
zlwu 65abe022c7 提交 2026-09-18 23:42:09 +08:00
“wuzhen”andCursor c2905e78f1 style(mobile): 请假列表加大姓名、天数、是否离校字号便于核查 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-16 09:40:36 +08:00
“wuzhen”andCursor a76fd32d71 feat(leave): 一年级请假二级学院与分管领导改走人文学院 
按入学年与每年9月1日切届判定一年级；代理学院 dept_id 通过 sys_config 配置，提交时覆写选人，流程定义与销假不变。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-16 09:10:11 +08:00
zlwuandCursor 08fbb49e89 docs: 同步批量换班级 API 说明与设计状态 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-15 16:58:56 +08:00
zlwuandCursor 3de49f732b feat(studentMsg): 换班级支持批量 UI 与串行提交 
弹窗改为学生列表+共用目标表单，串行调用现有接口并汇总失败明细。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-15 16:58:56 +08:00
zlwuandCursor b7175105ed feat(studentMsg): 换班级弹窗支持加载多名学生 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-15 16:54:10 +08:00
zlwuandCursor ae6ac58332 docs: 新增批量学生换班级实现计划 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-15 16:50:05 +08:00
zlwuandCursor 33e207e466 docs: 新增批量学生换班级设计说明 
确认采用前端循环现有单条接口方案，供后续实现计划引用。

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-15 16:48:12 +08:00
zlwu 66d8769020 提交 2026-09-02 13:23:38 +08:00
zlwu f231386592 提交 2026-09-02 09:58:57 +08:00