duxingchen eba0c3be98 fix: 端点层operator_id兜底current_user.username — 管理员代办检测生效 ...

根因: 移动端不传?operator_id=参数, 后端收到None
      _admin_proxy_note(None, assignee) → 不触发标记

修复: 6个端点(receive/reject/transfer/end/recall/spawn)
      operator_id or current_user.get(username) 兜底

2026-08-12 17:19:56 +08:00

..

__init__.py

feat: 实现后端核心业务逻辑 (Auth鉴权、二维码服务、看板与产品端点)

2026-08-04 17:09:47 +08:00

app_version.py

fix: OTA检测闭环 — 新增GET /check-update + App端uni.getSystemInfoSync版本对比

2026-08-07 12:35:00 +08:00

auth.py

feat: 双Token认证(Access 2h/Refresh 7d) + 通知系统(转交/驳回自动推送)

2026-08-07 11:44:04 +08:00

dashboard.py

feat: 看板全局时间筛选 + 协同留言抽屉

2026-08-12 13:50:56 +08:00

materials.py

security: API鉴权补全 + SQL拼接隐患消除

2026-08-12 12:03:12 +08:00

notifications.py

security: API鉴权补全 + SQL拼接隐患消除

2026-08-12 12:03:12 +08:00

orders.py

security: 补全剩余端点鉴权 + 移除硬编码管理员后门

2026-08-12 12:04:40 +08:00

print.py

security: 补全剩余端点鉴权 + 移除硬编码管理员后门

2026-08-12 12:04:40 +08:00

products.py

fix(backend): 权限漏洞修复 + 业务逻辑审查修复

2026-08-11 15:05:30 +08:00

records.py

security: 补全剩余端点鉴权 + 移除硬编码管理员后门

2026-08-12 12:04:40 +08:00

tasks.py

fix: 端点层operator_id兜底current_user.username — 管理员代办检测生效

2026-08-12 17:19:56 +08:00

upload.py

feat(api): 核心端点 — 接收/驳回/转交/打印/上传/用户/物料/记录CRUD

2026-08-05 14:00:43 +08:00

users.py

IRIS过滤容错: 后端SQL失败时降级全量+前端严格过滤department===IRIS

2026-08-06 10:08:18 +08:00