fix: 修掉十路审查发现的 9 个 P0 与一批 P1(数据正确性 / 越权 / 现场可用性)
P0(9 条全修): - 多通道项目奖牌重复计数:domain 层按 (EventID,CategoryID,EntryID/Subject) 去重, 通道优先级 athlete→team→id - 「只排名不计分」项目(scored:false)不再进奖牌榜,REST/WS/导出口径统一 - aggregate 流水 entry_id 恒 NULL 导致重算后分数翻倍:作废范围改按 event+category 定位 - 已发布成绩仍可被「存草稿」覆盖并清空 rank:服务端 409 STATE_INVALID + 前端禁编辑 - voidResult / 规则导入重算后名次不回写:接住 Ranked 调 applyComputedRanks - 赛事包覆盖导入可能「旧项目已删、新项目没成」:先改名成功再清理,失败回滚 - 导入赛事包可覆盖正在运行的赛事目录:name==当前项目直接 400 - Console spawn 失败后守护器永久卡死:清 child/pid + 调度重启 + stop 超时兜底 - /ws 快照向非 admin 下发 admin-only 配置:按角色裁剪 settings P1(计分口径 / 契约 / 现场): - standings.tieBreak 三处接线;profiles[].recordBonusMode 生效;破纪录校验 RecordEligible 与 entry 归属;破纪录登记校验已发布成绩 - export.loadRanked 与主路径对齐;ListBackups reason 解析;CLI backup 前缀修正 (原来只增不减会撑爆磁盘);单位积分明细/导出统一权重折算;停用单位展示 - 规则导入原子化(重算并入同一事务)+ 返回 compatible/affectedEventCount/ recalculatedLedgerRows;登录审计 user_id 修正 - WS 策略性断开用 Close(code,reason);HelloMessage 补 page/instanceId; 实例注册表清理;settings/单位/项目写操作补 change_log 触发大屏刷新 - 大屏:全量快照不再被版本守卫丢弃;个人积分榜刷新;公告返回页/轮播;行数截断; REST 竞态;1008 停止重连;握手超时;时区补 Z;401 仅 AUTH_REQUIRED 才登出 - 管理端:published 行禁编辑;saveDraft 补 unit(1:06.33 显示);前端预览改用服务端 points;空成绩行不再恒「已修改」;修订详情按 id 拉取;切项目请求序号与 dirty 保护; 发布后刷新项目状态;NAV/路由按角色过滤;recorder 不再打 admin-only 接口 - Console:大屏窗口销毁后重建;大屏 URL 复用 host 归一化;backup.bat 改纯 ASCII (已在 Meowhome 实跑验证) 自检:服务端 gofmt/build/vet 通过、12 包测试全绿;前端 vue-tsc + build 通过、 node --test 24/24;console check-syntax 12 文件通过。
This commit is contained in:
1 parent
96cf181ae3
commit
13f1f03cd0
124 files changed
+5658
-1820
No files matched your search
@@ -0,0 +1,48 @@
|
||||
package dto
|
||||
|
||||
import "git.yeij.top/AskaEth/Scoreboard/server/internal/domain"
|
||||
|
||||
// Event 是 GET /api/events 与 snapshot.events 的线上结构(列表口径,不含组别与通道)。
|
||||
//
|
||||
// 与 REST 的 eventDTO 逐字段对齐:scheduledAt/venue/remark 可空、sortOrder 必填,
|
||||
// 不能沿用 domain.Event 的 omitempty,否则前端会同时遇到「字段缺失」和「null」。
|
||||
type Event struct {
|
||||
ID int64 `json:"id"`
|
||||
SportID int64 `json:"sportId"`
|
||||
Code string `json:"code"`
|
||||
Name string `json:"name"`
|
||||
EventType string `json:"eventType"`
|
||||
ResultMode string `json:"resultMode"`
|
||||
ResultType string `json:"resultType"`
|
||||
Compare string `json:"compare"`
|
||||
RecordEligible bool `json:"recordEligible"`
|
||||
Scored bool `json:"scored"`
|
||||
Multiplier float64 `json:"multiplier"`
|
||||
Status string `json:"status"`
|
||||
ScheduledAt *string `json:"scheduledAt"`
|
||||
Venue *string `json:"venue"`
|
||||
SortOrder int `json:"sortOrder"`
|
||||
Remark *string `json:"remark"`
|
||||
}
|
||||
|
||||
// EventFromDomain 把领域小项转换成线上结构。
|
||||
func EventFromDomain(e domain.Event) Event {
|
||||
return Event{
|
||||
ID: e.ID,
|
||||
SportID: e.SportID,
|
||||
Code: e.Code,
|
||||
Name: e.Name,
|
||||
EventType: string(e.EventType),
|
||||
ResultMode: string(e.ResultMode),
|
||||
ResultType: string(e.ResultType),
|
||||
Compare: string(e.Compare),
|
||||
RecordEligible: e.RecordEligible,
|
||||
Scored: e.Scored,
|
||||
Multiplier: e.Multiplier,
|
||||
Status: string(e.Status),
|
||||
ScheduledAt: nilIfEmpty(e.ScheduledAt),
|
||||
Venue: nilIfEmpty(e.Venue),
|
||||
SortOrder: e.SortOrder,
|
||||
Remark: nilIfEmpty(e.Remark),
|
||||
}
|
||||
}
|
||||
@@ -46,6 +46,23 @@ type EventSettingsStandings struct {
|
||||
ShowIndividualMedals bool `json:"showIndividualMedals"`
|
||||
}
|
||||
|
||||
// WithoutAdminFields 返回非 admin 会话可见的配置子集。
|
||||
//
|
||||
// GET /api/settings 是 admin-only,而 /ws 快照对所有角色下发;guest/recorder
|
||||
// 只需要渲染大屏的标题、主题与榜单开关,默认积分模板、审核开关与个人积分折算
|
||||
// 系数属于系统配置,必须置空/清零后再上线。
|
||||
func (s EventSettings) WithoutAdminFields() EventSettings {
|
||||
return EventSettings{
|
||||
Event: s.Event,
|
||||
Display: s.Display,
|
||||
Standings: EventSettingsStandings{
|
||||
RankingMode: s.Standings.RankingMode,
|
||||
ShowIndividualBoard: s.Standings.ShowIndividualBoard,
|
||||
ShowIndividualMedals: s.Standings.ShowIndividualMedals,
|
||||
},
|
||||
}
|
||||
}
|
||||
|
||||
// RuleSwitches 是 GET /api/rules/switches 的线上结构:只暴露规则包里的布尔开关,
|
||||
// 不包含任何规则内容、模板明细或文件路径,供录入员判断相关功能是否启用。
|
||||
type RuleSwitches struct {
|
||||
|
||||
@@ -0,0 +1,94 @@
|
||||
package dto
|
||||
|
||||
import (
|
||||
"encoding/json"
|
||||
"testing"
|
||||
|
||||
"git.yeij.top/AskaEth/Scoreboard/server/internal/domain"
|
||||
)
|
||||
|
||||
// 非 admin 会话只能看到大屏渲染所需字段:admin-only 字段必须清零,
|
||||
// 且序列化后仍是显式的 null / 0,不能变成字段缺失。
|
||||
func TestEventSettingsWithoutAdminFields(t *testing.T) {
|
||||
profileID := int64(3)
|
||||
full := EventSettings{
|
||||
Event: EventSettingsEvent{Name: "运动会"},
|
||||
Display: EventSettingsDisplay{Title: "大屏", RotateSecond: 15},
|
||||
Standings: EventSettingsStandings{IndividualToTeamWeight: 0.5, RankingMode: "points", ShowIndividualBoard: true, ShowIndividualMedals: false},
|
||||
DefaultProfileID: &profileID,
|
||||
RequireApproval: true,
|
||||
}
|
||||
|
||||
got := full.WithoutAdminFields()
|
||||
if got.DefaultProfileID != nil {
|
||||
t.Fatalf("defaultProfileId 应置空,得到 %v", got.DefaultProfileID)
|
||||
}
|
||||
if got.RequireApproval {
|
||||
t.Fatalf("requireApproval 应清零")
|
||||
}
|
||||
if got.Standings.IndividualToTeamWeight != 0 {
|
||||
t.Fatalf("individualToTeamWeight 应清零,得到 %v", got.Standings.IndividualToTeamWeight)
|
||||
}
|
||||
if got.Event.Name != "运动会" || got.Display.Title != "大屏" || got.Display.RotateSecond != 15 {
|
||||
t.Fatalf("event/display 不应被裁剪: %+v", got)
|
||||
}
|
||||
if got.Standings.RankingMode != "points" || !got.Standings.ShowIndividualBoard || got.Standings.ShowIndividualMedals {
|
||||
t.Fatalf("榜单开关不应被裁剪: %+v", got.Standings)
|
||||
}
|
||||
|
||||
raw, err := json.Marshal(got)
|
||||
if err != nil {
|
||||
t.Fatalf("序列化: %v", err)
|
||||
}
|
||||
var top map[string]json.RawMessage
|
||||
if err := json.Unmarshal(raw, &top); err != nil {
|
||||
t.Fatalf("解析: %v", err)
|
||||
}
|
||||
if string(top["defaultProfileId"]) != "null" {
|
||||
t.Fatalf("defaultProfileId 应显式序列化为 null: %s", raw)
|
||||
}
|
||||
if string(top["requireApproval"]) != "false" {
|
||||
t.Fatalf("requireApproval 应显式序列化为 false: %s", raw)
|
||||
}
|
||||
var standings map[string]json.RawMessage
|
||||
if err := json.Unmarshal(top["standings"], &standings); err != nil {
|
||||
t.Fatalf("解析 standings: %v", err)
|
||||
}
|
||||
if string(standings["individualToTeamWeight"]) != "0" {
|
||||
t.Fatalf("individualToTeamWeight 应显式序列化为 0: %s", raw)
|
||||
}
|
||||
}
|
||||
|
||||
// 单位/小项的 DTO 必须把可空列写成显式 null,不能沿用 domain 的 omitempty。
|
||||
func TestTeamAndEventFromDomainNullableFields(t *testing.T) {
|
||||
teamRaw, err := json.Marshal(TeamFromDomain(domain.Team{ID: 1, Code: "T1", Name: "第一单位"}))
|
||||
if err != nil {
|
||||
t.Fatalf("序列化单位: %v", err)
|
||||
}
|
||||
var team map[string]json.RawMessage
|
||||
if err := json.Unmarshal(teamRaw, &team); err != nil {
|
||||
t.Fatalf("解析单位: %v", err)
|
||||
}
|
||||
for _, key := range []string{"shortName", "logoPath", "color"} {
|
||||
if got, ok := team[key]; !ok || string(got) != "null" {
|
||||
t.Fatalf("单位字段 %s 应为显式 null: %s", key, teamRaw)
|
||||
}
|
||||
}
|
||||
|
||||
eventRaw, err := json.Marshal(EventFromDomain(domain.Event{ID: 1, Code: "E1", Name: "100米"}))
|
||||
if err != nil {
|
||||
t.Fatalf("序列化小项: %v", err)
|
||||
}
|
||||
var event map[string]json.RawMessage
|
||||
if err := json.Unmarshal(eventRaw, &event); err != nil {
|
||||
t.Fatalf("解析小项: %v", err)
|
||||
}
|
||||
for _, key := range []string{"scheduledAt", "venue", "remark"} {
|
||||
if got, ok := event[key]; !ok || string(got) != "null" {
|
||||
t.Fatalf("小项字段 %s 应为显式 null: %s", key, eventRaw)
|
||||
}
|
||||
}
|
||||
if string(event["sortOrder"]) != "0" {
|
||||
t.Fatalf("sortOrder 应保留 0: %s", eventRaw)
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,41 @@
|
||||
package dto
|
||||
|
||||
import "git.yeij.top/AskaEth/Scoreboard/server/internal/domain"
|
||||
|
||||
// Team 是 GET /api/teams 与 snapshot.teams 的线上结构。
|
||||
//
|
||||
// 与 REST 的 teamDTO 逐字段对齐:可空列必须是显式 null,不能靠 domain 的
|
||||
// omitempty 把空串省成字段缺失,否则前端解析同一份契约会拿到两种形状。
|
||||
type Team struct {
|
||||
ID int64 `json:"id"`
|
||||
Code string `json:"code"`
|
||||
Name string `json:"name"`
|
||||
ShortName *string `json:"shortName"`
|
||||
LogoPath *string `json:"logoPath"`
|
||||
Color *string `json:"color"`
|
||||
SortOrder int `json:"sortOrder"`
|
||||
Active bool `json:"active"`
|
||||
}
|
||||
|
||||
// TeamFromDomain 把领域单位转换成线上结构。
|
||||
func TeamFromDomain(t domain.Team) Team {
|
||||
return Team{
|
||||
ID: t.ID,
|
||||
Code: t.Code,
|
||||
Name: t.Name,
|
||||
ShortName: nilIfEmpty(t.ShortName),
|
||||
LogoPath: nilIfEmpty(t.LogoPath),
|
||||
Color: nilIfEmpty(t.Color),
|
||||
SortOrder: t.SortOrder,
|
||||
Active: t.Active,
|
||||
}
|
||||
}
|
||||
|
||||
// TeamsFromDomain 批量转换单位;空输入返回空切片,序列化为 [] 而不是 null。
|
||||
func TeamsFromDomain(ts []domain.Team) []Team {
|
||||
out := make([]Team, 0, len(ts))
|
||||
for _, t := range ts {
|
||||
out = append(out, TeamFromDomain(t))
|
||||
}
|
||||
return out
|
||||
}
|
||||
Reference in new issue
Block a user