hailin
/
rwadurian
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
2,636 Commits 1 Branch 10 Tags 184 MiB
Commit Graph

7 Commits

Author SHA1 Message Date
hailin 34603aac8e fix(security): 修复修改登录密码页面加载失败时静默降级的 bug 
与 change_payment_password_page 同款问题：加载失败时原本默默设为
hasPassword=true（注册时必须设置的假设），改为显示错误状态+重试按钮。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-05 09:17:53 -08:00
hailin 405e7e407e fix(security): 修复支付密码页面加载失败时静默降级为设置模式的 bug 
加载状态失败时改为显示错误提示和重试按钮，避免误导用户认为未设置支付密码。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-05 08:19:44 -08:00
hailin 6f912b1232 feat(payment-password): 添加忘记支付密码功能（全栈） 
后端（identity-service，纯新增）：
- user-application.service 添加 2 个方法：
  sendResetPaymentPasswordSmsCode(userId) —— 发送验证码到已绑定手机（Redis key 独立）
  resetPaymentPassword(userId, smsCode, newPassword) —— 验证码校验 + 格式校验 + bcrypt 更新
- user-account.controller 新增 2 个端点（均为 @ApiBearerAuth）：
  POST /user/send-reset-payment-password-sms
  POST /user/reset-payment-password

前端（mobile-app，纯新增）：
- account_service 新增 sendResetPaymentPasswordSmsCode / resetPaymentPassword 两个方法
- 新建 reset_payment_password_page.dart：验证码 + 新6位PIN，重置成功后自动返回
- 路由：RoutePaths / RouteNames / AppRouter 各新增 resetPaymentPassword 条目
- change_payment_password_page：旧密码输入框下方添加「忘记支付密码？」入口链接

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-05 07:04:20 -08:00
hailin cad7ebe832 feat(payment-password): 添加支付密码功能（全栈） 
后端（identity-service）：
- Prisma schema 新增 paymentPasswordHash 字段及手动迁移脚本
- user-application.service 添加 4 个方法：isPaymentPasswordSet / setPaymentPassword /
  changePaymentPassword / verifyPaymentPassword（纯新增，不修改已有逻辑）
- user-account.controller 新增 4 个端点：
  GET /user/payment-password-status
  POST /user/set-payment-password
  POST /user/change-payment-password
  POST /user/verify-payment-password → { valid: bool }

前端（mobile-app）：
- account_service 新增 4 个方法对应后端 4 个接口
- 新建 change_payment_password_page.dart：6 位数字支付密码设置/修改页面
- 路由：RoutePaths / RouteNames / AppRouter 注册 /security/payment-password
- profile_page：'修改登录密码' 改为 '修改密码'，下方新增 '支付密码' 入口
- PasswordVerifyDialog：新增 title / subtitle / hint 可选参数，支持登录/支付双模式
- planting_location_page：认种确认改为验证支付密码（verifyPaymentPassword）
- pre_planting_purchase_page：预种确认后追加支付密码验证步骤

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-05 06:18:40 -08:00
hailin a38aac5581 feat(email): 实现邮箱绑定/解绑功能 
后端:
- 新增 EmailService 邮件发送服务，支持 Gmail SMTP
- 新增 EmailCode 数据模型用于存储邮箱验证码
- UserAccount 添加 email 字段
- 新增 API 接口:
  - GET /user/email-status 获取邮箱绑定状态
  - POST /user/send-email-code 发送邮箱验证码
  - POST /user/bind-email 绑定邮箱
  - POST /user/unbind-email 解绑邮箱
- 新增 DTOs: SendEmailCodeDto, BindEmailDto, UnbindEmailDto
- 新增 Commands: SendEmailCodeCommand, BindEmailCommand, UnbindEmailCommand

前端:
- account_service 新增邮箱相关方法和 EmailStatus 类
- bind_email_page 更新为使用真实 API:
  - 绑定/更换邮箱功能
  - 独立的解绑验证码输入和倒计时
  - 解绑确认对话框

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2025-12-23 20:53:20 -08:00
hailin 69fa43ebee feat(auth): 实现修改密码API和Token过期自动跳转登录 
后端:
- 新增 ChangePasswordCommand 和 ChangePasswordDto
- 新增 POST /user/change-password 接口
- 实现 changePassword() 方法，验证旧密码后更新新密码

前端:
- 新增 AuthEventService 认证事件服务，处理 token 过期事件
- api_client 在 token 刷新失败时发送过期事件
- App 监听认证事件，token 过期时清除账号状态并跳转登录页
- splash_page 优化路由逻辑：退出登录后跳转手机登录页而非向导页
- change_password_page 调用真实 API 修改密码
- account_service 新增 changePassword() 方法
- multi_account_service 退出登录时清除 phoneNumber 和 isPasswordSet

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2025-12-23 20:25:56 -08:00
hailin d1a7c44f23 fix(referral): correct response parsing for authorization-service API 
The authorization-service uses TransformInterceptor which wraps all API
responses in a standard format: { success, data, timestamp }

Before this fix, the AuthorizationServiceClient was reading:
  response.data.accountSequence (undefined)

After this fix, it correctly reads:
  response.data.data.accountSequence

This ensures that nearestCommunity, nearestProvinceAuth, and nearestCityAuth
are properly extracted from the wrapped response, allowing community benefits
to be correctly allocated to authorized users instead of falling back to
SYSTEM_HEADQUARTERS_COMMUNITY.

Changes:
- Added AuthorizationServiceResponse<T> interface to model wrapped response
- Updated findNearestCommunity() to use wrapped response type
- Updated findNearestProvince() to use wrapped response type
- Updated findNearestCity() to use wrapped response type
- Updated catchError handlers to return properly structured fallback data

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2025-12-11 03:08:50 -08:00