bookworm-admin
|
c6f89aad79
|
Path A: client switch to issuer token-exchange + strip orphan legacy files
auto-setup.ps1 / bw-ota.ps1: replace anonymous-first + Gitea-credential
dialog branches with issuer token-exchange (auth.bookwormweb.com); embed
public crypto payloads via base64 (no secrets). build.ps1: regenerate
base64 payloads from source at compile time.
Strip 4 zero-reference legacy/admin orphan files (setup-all.js,
patches/admin-cb-routes.js, tools/legacy-gen-launcher-bats.ps1.archive,
create-admin-powershell.bat). Coupled sensitive sources (gen-authcode.js,
admin-authcode-gui.ps1, crypto-helper.js, install.ps1) deferred: still
referenced by build.ps1 -Admin path and auto-setup priority-4 backward-compat
decrypt chain; require dedicated surgery.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-29 19:50:04 +08:00 |
|
|
|
6ac69b93ac
|
security(v3.2.0): W4 凭证不嵌 URL + W5 OTA Copy 替代 Move
W4: clone URL 不再含明文凭证, 改为先 Cache-GitCredentials
(credential manager) 再用原始 URL clone, git 自动取凭证
W5: OTA 原子替换 Move-Item → Copy-Item + Remove
(04-27 Move 数据丢失教训, Copy 中途失败可完整回滚)
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
2026-04-28 00:37:35 +08:00 |
|
