Zayden-Jung/probably-rendering-one-more-pixel-tonight
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add verified email accounts independent of administrator access #6

Merged
Zayden-Jung merged 1 commits from codex/wiki-email-auth into main 2026-10-29 08:37:35 +00:00
Conversation 0 Commits 1 Files Changed 15
+468 -4
codex-bot commented 2026-10-29 08:35:27 +00:00
Collaborator
Copy Link
Copy Source

为知识站增加独立邮箱账户：注册、邮件确认、登录、可撤销会话与退出。账户 cookie 与管理员动态码完全独立；公开知识 GET 与 account 入口不授予旧写 API 权限。

新增 PostgreSQL 迁移、scrypt 密码存储、摘要验证令牌、来源检查和持久化限速；SMTP 仅通过运行时变量配置，无秘密提交。新增 /account 及 /api/account/*，保留现有 Pages Router。

验证：静态 diff 检查通过，完整构建、单元和 PostgreSQL 集成验证交由已确认的 ces-control。未运行本地构建预览。SMTP 实际投递与服务器页面验收需主 chat 配置秘密并手动合并部署后进行；本 PR 不部署工作分支。

部署需设置 ACCOUNT_PUBLIC_ORIGIN、SMTP_PASSWORD，以及 HTTP 验收的 AUTH_COOKIE_SECURE=false；生产 HTTPS 应保留 secure cookie。现有 AUTH_CONFIG_FILE 必须继续配置，旧管理员权限边界依赖现有部署开关。

为知识站增加独立邮箱账户：注册、邮件确认、登录、可撤销会话与退出。账户 cookie 与管理员动态码完全独立；公开知识 GET 与 account 入口不授予旧写 API 权限。 新增 PostgreSQL 迁移、scrypt 密码存储、摘要验证令牌、来源检查和持久化限速；SMTP 仅通过运行时变量配置，无秘密提交。新增 /account 及 /api/account/*，保留现有 Pages Router。 验证：静态 diff 检查通过，完整构建、单元和 PostgreSQL 集成验证交由已确认的 ces-control。未运行本地构建预览。SMTP 实际投递与服务器页面验收需主 chat 配置秘密并手动合并部署后进行；本 PR 不部署工作分支。 部署需设置 ACCOUNT_PUBLIC_ORIGIN、SMTP_PASSWORD，以及 HTTP 验收的 AUTH_COOKIE_SECURE=false；生产 HTTPS 应保留 secure cookie。现有 AUTH_CONFIG_FILE 必须继续配置，旧管理员权限边界依赖现有部署开关。
codex-bot added 1 commit 2026-10-29 08:35:27 +00:00
Add independent verified email accounts and revocable sessions
waterfall-wiki CI and deployment / verify-and-deploy (pull_request) Failing after 11m56s
Details
134bc2c9cc
Zayden-Jung merged commit 2df69ec1c6 into main 2026-10-29 08:37:35 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
codex-bot hexin-codex-bot yilin-codex-bot Zayden-Jung
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Zayden-Jung/probably-rendering-one-more-pixel-tonight#6
Delete Branch "codex/wiki-email-auth"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?