fix(security): complete security and delivery compliance remediation

backend/app/api/v1/olt.py

@@ -4,9 +4,11 @@ from sqlalchemy.orm import Session
 from sqlalchemy import distinct
 from pydantic import BaseModel
 from app.core.database import get_db
+from app.core.errors import internal_error
 from app.core.config import settings
 from app.middleware.permission_middleware import require_permission
 from app.models.device import OLTDevice
+from app.schemas.olt import serialize_olt
 import pandas as pd
 import io
 
@@ -64,7 +66,7 @@ def get_devices(
             q = q.filter(OLTDevice.region.in_(areas))
         else:
             return []
-    return q.all()
+    return [serialize_olt(device) for device in q.all()]
 
 
 @router.post("/devices")
@@ -148,8 +150,8 @@ async def import_devices(
         df = pd.read_excel(io.BytesIO(content))
         # 标准化列名
         df.columns = [str(c).strip() for c in df.columns]
-    except Exception as e:
-        raise HTTPException(status_code=400, detail=f"文件解析失败: {str(e)}")
+    except Exception:
+        raise HTTPException(status_code=400, detail="文件解析失败，请确认文件格式")
 
     required_cols = ['IP地址', '用户名', '密码']
     missing = [c for c in required_cols if c not in df.columns]
@@ -267,7 +269,7 @@ def clear_onu_port(
         with SSHService(olt.ip_address, olt.username, olt.password) as ssh:
             ssh.clear_onu_port(body.port_id)
     except Exception as e:
-        raise HTTPException(status_code=500, detail=f"清除失败: {str(e)}")
+        raise internal_error("Clear ONU port", e)
 
     # 从 ports 列表移除已清除的端口
     remaining = [p for p in record.ports if p["port_id"] != body.port_id]
@@ -571,7 +573,7 @@ def get_olt_ports(
             ports = ssh.get_olt_ports()
         return {"ports": ports}
     except Exception as e:
-        raise HTTPException(status_code=500, detail=str(e))
+        raise internal_error("Get OLT ports", e)
 
 
 @router.post("/devices/{olt_id}/ports/toggle")
@@ -588,5 +590,5 @@ def toggle_olt_port(olt_id: int, body: TogglePortRequest, port_name: str, db: Se
             ssh.toggle_olt_port(port_name, body.action)
         return {"message": f"端口 {port_name} 已{'关闭' if body.action == 'shutdown' else '开启'}"}
     except Exception as e:
-        raise HTTPException(status_code=500, detail=str(e))
+        raise internal_error("Toggle OLT port", e)