fix(security): complete security and delivery compliance remediation

2026-07-28 17:56:28 +08:00
parent 5b07ec6df0
commit 81ab82e9ba
32 changed files with 798 additions and 94 deletions
@@ -67,7 +67,7 @@ def require_permission(permission: str):
        token = authorization[7:]
        payload = verify_token(token)
        if not payload:
-            logger.warning("auth rejected: token 验证失败 (permission=%s): token前20字符=%.20s...", permission, token[:20])
+            logger.warning("auth rejected: token 验证失败 (permission=%s)", permission)
            raise HTTPException(status_code=401, detail="令牌无效或已过期")

        role = payload.get('role', 'user')