kczx-user-management 1.4.0 → 1.4.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/package.json +1 -1
- package/src/gate.js +6 -0
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "kczx-user-management",
|
|
3
|
-
"version": "1.4.
|
|
3
|
+
"version": "1.4.1",
|
|
4
4
|
"type": "module",
|
|
5
5
|
"description": "dsh 插件 · 登录门 + 账号 / 权限 / 配额 / 审计台账（dsh-passwords 的功能已并入）：HTTPS 登录网关与自签证书、用户增删改查、工作区白名单与归属跟踪、每小时 token 与每日时长配额、沙盒档位下限、上传/git 开关、三本审计台账（登录/访问/操作）、IP 封禁、TOTP 两步验证。",
|
|
6
6
|
"license": "MIT",
|
package/src/gate.js
CHANGED
|
@@ -31,6 +31,12 @@ const PUBLIC_PATHS = [
|
|
|
31
31
|
LOGIN_PAGE_PATH,
|
|
32
32
|
BRANDING_LOGO_PATH,
|
|
33
33
|
`${API_PREFIX}/login`,
|
|
34
|
+
// First-run owner creation. Anonymous by design — it verifies the setup key
|
|
35
|
+
// and refuses the moment any account exists — and the setup form is rendered
|
|
36
|
+
// by the public /login page. Without this entry the gate answered the form's
|
|
37
|
+
// POST with 401 {"error":"unauthorized"} before handleApi ever saw it, so a
|
|
38
|
+
// fresh deployment could be looked at but never initialised.
|
|
39
|
+
`${API_PREFIX}/setup`,
|
|
34
40
|
`${API_PREFIX}/register`,
|
|
35
41
|
`${API_PREFIX}/session`,
|
|
36
42
|
`${API_PREFIX}/logout`,
|