fix(security): harden uploads and wecom binding

2026-07-28 12:18:45 +08:00
parent 29e4e4a804
commit 6b43b77c3b
14 changed files with 185 additions and 84 deletions
@@ -51,6 +51,10 @@ async def lifespan(app: FastAPI):
        await conn.run_sync(lambda c: c.exec_driver_sql(
            "ALTER TABLE users ADD COLUMN IF NOT EXISTS color VARCHAR(7)"
        ))
+        await conn.run_sync(lambda c: c.exec_driver_sql(
+            "CREATE UNIQUE INDEX IF NOT EXISTS uq_users_wecom_userid "
+            "ON users (wecom_userid) WHERE wecom_userid IS NOT NULL"
+        ))
        # system_config table for v0.5
        await conn.run_sync(lambda c: c.exec_driver_sql(
            "CREATE TABLE IF NOT EXISTS system_config (key VARCHAR(64) PRIMARY KEY, value TEXT DEFAULT '')"