photo-live

xinyouhe/photo-live

Fork 0

Commit Graph

Author	SHA1	Message	Date
浅念	31ba03de11	feat(api): password change endpoint and source device id on uploads P3 Task 3 契约增补批次（单一事实来源 openapi.yaml + cn 实现 + e2e）： - POST /v1/auth/password-change（operationId changePassword，需求 4.1 的 P1 契约缺口补齐）：Bearer + {oldPassword 1-128, newPassword 8-128} → 204；旧密码错误 401 AUTH_INVALID_CREDENTIALS；成功后事务内更新 argon2 哈希、撤销该用户除当前会话外的全部其他会话（当前会话保留，本人不下线）、写审计 auth.password_change。 - sourceDeviceId（A19 设备来源语义）：UploadInitRequest 可选 8-64 位设备标识；upload_sessions 落列（VARCHAR(64) utf8mb4_0900_bin，可空，存量行 NULL 兼容）；GET /uploads 条目回显；幂等重放不比对（first-writer，首次落库值不随重放漂移）。 - e2e：auth 增 4 例（未认证 401 / 新密码过短 400 / 旧密码错误 401 且会话无副作用 / 成功后他端会话撤销当前保留 + 新旧密码登录裁决 + 审计）； uploads 增 1 例（携带落库回显、换设备重放保留首值、缺省 null、长度越界 400）。api e2e 179 → 184；contracts gen/redocly/单测、worker、 sync 门全绿。 Co-Authored-By: Claude Code <noreply@anthropic.com>	2026-09-19 00:59:39 +08:00
浅念	a2a3ccd340	feat(api): idempotent upload session init with presigned credential POST /v1/uploads (Task 18, A03): @@unique(userId, clientTaskId) idempotency anchor — same params return the original session (201, no duplicate photo); param drift (album/bytes/contentType/extension) -> 409 UPLOAD_SESSION_CONFLICT. photos.objectKey is set to the FINAL originals key at init while the session holds the staging key; IDs come from an app-side cuid-like generator so both self-referencing keys are written in one transaction. Credential is a real MinIO presigned PUT (SIGNED_URL_TTL_SECONDS, lazily read). Permission order: album invisible 404 -> member 403 -> uploadEnabled 409 -> size/ext 400 -> category ownership 400. No audit on init (audit anchors on complete). Pre-step for Task 19: QUEUE_PHOTO_PROCESS contract constant + lazy-safe BullMQ queue producer (Redis down at boot must not crash the app; enqueue failure only logs — sweep compensates). e2e reset now also wipes the MinIO photo-live/dev prefix; jest maps @photo/storage to TS source. Co-Authored-By: Claude Code <noreply@anthropic.com>	2026-09-17 22:42:13 +08:00

Author

SHA1

Message

Date

浅念

31ba03de11

feat(api): password change endpoint and source device id on uploads

P3 Task 3 契约增补批次（单一事实来源 openapi.yaml + cn 实现 + e2e）：

- POST /v1/auth/password-change（operationId changePassword，需求 4.1 的
  P1 契约缺口补齐）：Bearer + {oldPassword 1-128, newPassword 8-128} → 204；
  旧密码错误 401 AUTH_INVALID_CREDENTIALS；成功后事务内更新 argon2 哈希、
  撤销该用户除当前会话外的全部其他会话（当前会话保留，本人不下线）、写
  审计 auth.password_change。
- sourceDeviceId（A19 设备来源语义）：UploadInitRequest 可选 8-64 位设备
  标识；upload_sessions 落列（VARCHAR(64) utf8mb4_0900_bin，可空，存量
  行 NULL 兼容）；GET /uploads 条目回显；幂等重放不比对（first-writer，
  首次落库值不随重放漂移）。
- e2e：auth 增 4 例（未认证 401 / 新密码过短 400 / 旧密码错误 401 且会话
  无副作用 / 成功后他端会话撤销当前保留 + 新旧密码登录裁决 + 审计）；
  uploads 增 1 例（携带落库回显、换设备重放保留首值、缺省 null、长度
  越界 400）。api e2e 179 → 184；contracts gen/redocly/单测、worker、
  sync 门全绿。

Co-Authored-By: Claude Code <noreply@anthropic.com>

2026-09-19 00:59:39 +08:00

浅念

a2a3ccd340

feat(api): idempotent upload session init with presigned credential

POST /v1/uploads (Task 18, A03): @@unique(userId, clientTaskId) idempotency
anchor — same params return the original session (201, no duplicate photo);
param drift (album/bytes/contentType/extension) -> 409 UPLOAD_SESSION_CONFLICT.
photos.objectKey is set to the FINAL originals key at init while the session
holds the staging key; IDs come from an app-side cuid-like generator so both
self-referencing keys are written in one transaction. Credential is a real
MinIO presigned PUT (SIGNED_URL_TTL_SECONDS, lazily read). Permission order:
album invisible 404 -> member 403 -> uploadEnabled 409 -> size/ext 400 ->
category ownership 400. No audit on init (audit anchors on complete).

Pre-step for Task 19: QUEUE_PHOTO_PROCESS contract constant + lazy-safe
BullMQ queue producer (Redis down at boot must not crash the app; enqueue
failure only logs — sweep compensates). e2e reset now also wipes the MinIO
photo-live/dev prefix; jest maps @photo/storage to TS source.

Co-Authored-By: Claude Code <noreply@anthropic.com>

2026-09-17 22:42:13 +08:00

2 Commits