yueli 347f20497c feat: Redis幂等锁 + 关键端点防重复提交 ...

## decorators.py
- 新增 @prevent_double_submit(lock_timeout=5) 装饰器
  Redis key: idem:{user_id}:{path}:{MD5(body)}
  锁存在→409, 不存在→setex→执行业务→delete
  Redis不可用时fail-open降级放行

## purchase.py
- POST /purchase (创建): +@prevent_double_submit
- PATCH /purchase/<id>/approve (审批): +@prevent_double_submit

## outbound.py
- POST /outbound (出库): +@prevent_double_submit

## transactions.py
- POST /borrow/dispatch (借库扣减): +@prevent_double_submit

2026-07-16 13:08:37 +08:00

..

common

版本变更V3.35将图像的处理统一更换到新表当中

2026-05-26 11:28:26 +08:00

export

feat: 实现异步导出骨架（Threading + Redis 状态流转），支持 POST 提交/轮询状态/下载文件

2026-05-19 10:35:33 +08:00

inbound

feat: 盘点合并列表 — 服务端JOIN+DB分页，消除99999全量加载

2026-07-16 13:08:29 +08:00

scan

4.29扫码获取库位小工具接口

2026-04-29 15:40:43 +08:00

stock

fix(backend): resolve DetachedInstanceError in audit_log, add pessimistic locks for stock adjustments, and eliminate N+1 queries with eager loading

2026-04-02 18:44:12 +08:00

__init__.py

4.29扫码获取库位小工具接口

2026-04-29 15:40:43 +08:00

audit.py

fix: 补全审计/出库审批/采购管理/借库审批的权限保护+公司隔离

2026-07-15 11:49:53 +08:00

auth.py

fix: batch_create_user 补上缺失的 permission_required(system_user:operation)

2026-07-15 09:22:58 +08:00

bom.py

fix: Fail-Closed 字段级安全加固 — 堵住15+端点价格泄露

2026-07-16 11:26:05 +08:00

materials.py

…

outbound.py

feat: Redis幂等锁 + 关键端点防重复提交

2026-07-16 13:08:37 +08:00

permission.py

feat: 全模块公司隔离 + crossDomain权限码动态跨域控制

2026-07-15 11:11:40 +08:00

purchase.py

feat: Redis幂等锁 + 关键端点防重复提交

2026-07-16 13:08:37 +08:00

reports.py

…

scrap.py

fix: Fail-Closed 字段级安全加固 — 堵住15+端点价格泄露

2026-07-16 11:26:05 +08:00

transactions.py

feat: Redis幂等锁 + 关键端点防重复提交

2026-07-16 13:08:37 +08:00

warehouse.py

fix: sort warehouse tree by name, fix tree batch delete cascade, and implement safe history location autofill

2026-04-08 17:32:00 +08:00