MarSeventh 61f210e0cb feat: 会话安全策略 - 后端支持动态 Secure/MaxAge 配置 ...

- 扩展 getSecurityConfig 和 fetchSecurityConfig 默认值，新增 sessionSecure、userSessionMaxAge、adminSessionMaxAge 字段
- 改造 buildSessionCookie 支持 secure 参数
- createSession 根据 authType 动态读取配置计算 maxAge
- destroySession 读取 sessionSecure 确保清除 Cookie 属性一致

2026-04-21 10:58:54 +08:00

..

authCore.js

fix: return explicit authType instead of null when auth is unconfigured

2026-04-18 15:28:01 +08:00

dualAuth.js

refactor: unify auth logic into authCore with authScope parameter

2026-04-18 13:24:53 +08:00

passwordHash.js

refactor: extract rehashIfNeeded to passwordHash.js, deduplicate login rehash logic

2026-04-18 15:35:13 +08:00

sessionManager.js

feat: 会话安全策略 - 后端支持动态 Secure/MaxAge 配置

2026-04-21 10:58:54 +08:00

tokenExpiration.js

refactor: unify auth logic into authCore with authScope parameter

2026-04-18 13:24:53 +08:00

tokenValidator.js

refactor: unify auth logic into authCore with authScope parameter

2026-04-18 13:24:53 +08:00

userAuth.js

refactor: unify auth logic into authCore with authScope parameter

2026-04-18 13:24:53 +08:00