c0b1edaed0
feat: implement payment proxy routes and add security validation tests for wallet and intent operations
2026-05-30 15:41:15 +08:00
2269aaefd7
Reduce Supabase disk IO
2026-05-29 17:22:33 +08:00
20c8395c0b
全局配置更新：OAuth 回调修复、支付安全加固、站点 URL 工具
...
- 新增 NEXT_PUBLIC_SITE_URL 支持及 site-url.ts 工具模块
- 修复 OAuth 回调域名：import.meta.env 统一读取站点 URL
- 支付 API 路由新增收款地址校验
- 后端支付服务更新
- middleware 清理
- 新增 paymentSecurity 测试
2026-05-24 18:33:47 +08:00
105713c799
@
...
支付提交增加 Tx 预校验：提交前链上验签收款地址与金额，防止转错地址；409 错误展示友好中文提示并自动对账恢复
- 新增 validate_intent_tx 方法及 POST /api/payments/intents/{id}/validate 端点，
在提交前查链上 receipt 对比收款地址和金额，mismatch 直接拦截
- 新增 handleSubmit409 辅助函数，根据后端错误详情分流处理：
已支付→自动 reconcile，已过期→提示重下单，其他→透传具体原因
- submit/validate 路由透传后端 detail 字段，生产环境也能看到具体错误
- 手动转账面板粘贴 tx hash 后自动触发验证，绿色/红色提示，
验证不通过时禁用提交按钮
Tested: tsc --noEmit + ruff check . 均通过
@
2026-05-22 04:44:14 +08:00
c9d03fd3e1
feat: implement dashboard state management, API proxy layer, and modular UI components for weather monitoring and payments
2026-05-14 15:05:13 +08:00
40f231b76d
优化 Vercel Fluid CPU：API加CDN缓存、缩小middleware范围、跳过公共API的Supabase身份转发
...
- 7条GET路由加 s-maxage + stale-while-revalidate，fetch 改为 next revalidate
- middleware matcher 从全匹配缩小到9条需auth的路径，移除 isStaticAsset
- 8条公共API路由加 includeSupabaseIdentity: false
- backend-auth getSession 为空时跳过 getUser
- subscription-help 加 I18nProvider，移除 force-dynamic → 静态预渲染
- next.config.mjs 加静态资源 immutable 缓存头
Tested: npx tsc --noEmit 通过，npm run build 通过
2026-05-13 14:23:04 +08:00
569f3eef97
Make weather-market UI reliable before shipping
...
Proxy routes now share one upstream-error adapter so client-actionable statuses such as auth, entitlement, validation, and rate limits survive the BFF instead of becoming opaque 502s. The scan terminal mobile overrides also load last and remove desktop rail constraints so phones get a single readable column.
Constraint: Mobile users reported the dashboard was unreadable, and BFF proxy errors were masking expected client states.
Rejected: Let every route keep bespoke error JSON | continued inconsistent status codes and production detail leakage.
Confidence: high
Scope-risk: moderate
Directive: Keep ScanTerminalMobile.module.css imported after desktop scan-terminal CSS so mobile breakpoints win.
Tested: npx tsc --noEmit --pretty false --project frontend/tsconfig.json
Tested: npm run build
Tested: npm run test:business
Tested: Chrome mobile smoke test at 390px with no horizontal overflow
Not-tested: Real device Safari/Android manual QA
2026-04-29 11:22:49 +08:00
7171192ea6
Guard payments to allowed hosts and show checkout context
2026-03-22 13:42:48 +08:00
4413b31396
Fix Pro payment recovery and wallet provider selection
2026-03-21 12:19:53 +08:00
e7e52c0da7
Release v1.5.0 and add ops admin dashboard
2026-03-21 00:40:28 +08:00
508c322c8b
Fix wallet unlink 401 error
2026-03-17 15:38:40 +08:00
5a6d9eeda4
Fix wallet delete authorization
2026-03-17 15:32:09 +08:00
609fc8914a
feat: Implement user account center with authentication, subscription management, and cryptocurrency payment integration.
2026-03-16 20:30:46 +08:00
02e35a3a5f
feat: Implement a new contract-based payment system with wallet binding, payment intents, and subscription plan management.
2026-03-14 10:35:30 +08:00
663d6be506
feat: Add API routes for creating, confirming, and submitting payment intents, and verifying wallets.
2026-03-13 12:20:01 +08:00
2de083d53a
feat: Add API route to proxy payments wallet challenge requests to the backend.
2026-03-13 12:10:07 +08:00
54c4a26162
feat: Implement subscription-based premium features, payment processing, and enhanced dashboard components.
2026-03-13 06:41:33 +08:00
e62a36e0bc
feat: Introduce web application with payment processing and Supabase authentication.
2026-03-13 05:13:48 +08:00
2569718930@qq.com