Skip to content

Dev#15

Merged
koishi510 merged 3 commits into
mainfrom
dev
Jan 27, 2026
Merged

Dev#15
koishi510 merged 3 commits into
mainfrom
dev

Conversation

@koishi510
Copy link
Copy Markdown
Owner

Related Issue

Summary

Change Type

  • New Feature (feat)
  • Bug Fix (fix)
  • Refactoring (refactor)
  • Performance Improvement (perf)
  • Documentation (docs)
  • Dependency / Configuration (chore)

Self-Check Checklist

Backend:

  • Code runs correctly in local environment
  • Ran uv run ruff format . and uv run ruff check . --fix
  • Ran uv run mypy app/
  • (If dependencies changed) Ran uv lock && uv export > requirements.txt and committed both files

Frontend:

  • (If frontend changed) Ran npm run lint in frontend/
  • (If frontend changed) Ran npm run build in frontend/ without errors

General:

  • Removed all temporary debug output (print/console.log)
  • No sensitive data (API keys, credentials) in the code

Test Steps

  1. Pull branch and sync environment:
    uv sync
    cd frontend && npm install && cd ..
  2. Run the application:
    # Terminal 1 - Backend
    uv run uvicorn app.main:app --reload --port 8000
    # Terminal 2 - Frontend
    cd frontend && npm run dev
  3. Verification steps:
    • ...

@koishi510 koishi510 requested a review from 4rthurCai as a code owner January 27, 2026 19:41
@koishi510 koishi510 merged commit 76eda46 into main Jan 27, 2026
4 checks passed
4rthurCai added a commit that referenced this pull request Mar 15, 2026
- CORS: disable credentials when origins is wildcard (#1)
- Token blacklist: evict expired entries before dropping new tokens (#3)
- Static files: add security headers, block dangerous file types (#5)
- HSTS: add Strict-Transport-Security header (#6)
- HTML sanitization: escape user content in community service (#10)
- Security logging: log auth failures, admin ops, JWT errors (#12)
- Guest sessions: HMAC-sign session IDs to prevent spoofing (#15)
- AI credentials: read from env vars instead of hardcoding (#16)
- Cache-Control: add no-store for API responses (#17)
- URL validation: reject non-HTTP(S) URLs in chat search (#19)
- Like endpoints: split POST/DELETE into idempotent AddLike/RemoveLike (PR #167)
koishi510 pushed a commit that referenced this pull request Mar 15, 2026
- CORS: disable credentials when origins is wildcard (#1)
- Token blacklist: evict expired entries before dropping new tokens (#3)
- Static files: add security headers, block dangerous file types (#5)
- HSTS: add Strict-Transport-Security header (#6)
- HTML sanitization: escape user content in community service (#10)
- Security logging: log auth failures, admin ops, JWT errors (#12)
- Guest sessions: HMAC-sign session IDs to prevent spoofing (#15)
- AI credentials: read from env vars instead of hardcoding (#16)
- Cache-Control: add no-store for API responses (#17)
- URL validation: reject non-HTTP(S) URLs in chat search (#19)
- Like endpoints: split POST/DELETE into idempotent AddLike/RemoveLike (PR #167)
koishi510 pushed a commit that referenced this pull request Mar 15, 2026
- CORS: disable credentials when origins is wildcard (#1)
- Token blacklist: evict expired entries before dropping new tokens (#3)
- Static files: add security headers, block dangerous file types (#5)
- HSTS: add Strict-Transport-Security header (#6)
- HTML sanitization: escape user content in community service (#10)
- Security logging: log auth failures, admin ops, JWT errors (#12)
- Guest sessions: HMAC-sign session IDs to prevent spoofing (#15)
- AI credentials: read from env vars instead of hardcoding (#16)
- Cache-Control: add no-store for API responses (#17)
- URL validation: reject non-HTTP(S) URLs in chat search (#19)
- Like endpoints: split POST/DELETE into idempotent AddLike/RemoveLike (PR #167)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant