qinglong f7b4908322 security: 公网生产环境加固 — P0/P1 全部修复 ...

API 认证 (16 个未保护端点 → 全部加 panel_auth):
- 文件管理器: 11 端点 (list/mkdir/delete/upload/download/read/write/...)
- 项目管理: 6 端点 (list/run/stop/logs/stdin/page), 修复硬编码路径前缀
- 代理管理: 3 端点 (list/add/remove)
- 系统状态: 2 HTTP + 1 WS (token 校验)
- 插件页面: 3 端点 (page/sse/event)
- 内部路由: 3 端点 (plugins/commands/data)

认证系统加固:
- 密码哈希: 固定盐 → 每用户独立 secrets.token_hex(16) 随机盐
- 默认密码警告: 启动时检测并打印 critical 级别日志
- 登录频率限制: 5 次失败 / IP → 锁定 60 秒, 返回 429

基础设施:
- 安全响应头: X-Content-Type-Options/X-Frame-Options/X-XSS-Protection/Referrer-Policy
- WebSocket 鉴权: query string token 校验

Co-Authored-By: Claude <noreply@anthropic.com>

2026-06-13 13:37:14 +08:00

..

web_panel

security: 公网生产环境加固 — P0/P1 全部修复

2026-06-13 13:37:14 +08:00

__init__.py

Initial commit: SenSu Alpha 0.2.0

2026-06-10 12:28:05 +08:00

api_service.py

Initial commit: SenSu Alpha 0.2.0

2026-06-10 12:28:05 +08:00

auth_service.py

security: 公网生产环境加固 — P0/P1 全部修复

2026-06-13 13:37:14 +08:00

command_service.py

feat(v0.5.2): 插件索引仓库 + install 命令

2026-06-13 11:08:47 +08:00

init_service.py

feat(v0.5.1): 插件进程隔离 — 集成到 PluginService

2026-06-13 11:07:30 +08:00

internet_service.py

security: 公网生产环境加固 — P0/P1 全部修复

2026-06-13 13:37:14 +08:00

log_service.py

feat: WS实时推送、网速双线图、按钮MD3修复、页面加载器修复 (v0.6.0)

2026-06-11 16:23:31 +08:00

permission_service.py

Initial commit: SenSu Alpha 0.2.0

2026-06-10 12:28:05 +08:00

plugin_index.py

feat(v0.5.2): 插件索引仓库 + install 命令

2026-06-13 11:08:47 +08:00

plugin_service.py

feat(v0.5.1): 插件进程隔离 — 集成到 PluginService

2026-06-13 11:07:30 +08:00

process_isolated.py

v0.4+v0.5: TUI dashboard, tab completion, systemd, Docker, process isolation

2026-06-10 19:08:16 +08:00

project_engine.py

Phase 1: ProjectEngine + PyEnvManager + project management WebUI

2026-06-10 20:41:24 +08:00

project_service.py

v0.3: SQLite persistence + ProjectService + dependency resolution

2026-06-10 18:59:25 +08:00

proxy_service.py

Phase 2: ProxyService reverse proxy (HTTP+WebSocket forwarding)

2026-06-10 20:47:17 +08:00

pyenv_manager.py

Phase 1: ProjectEngine + PyEnvManager + project management WebUI

2026-06-10 20:41:24 +08:00

sensu_db.py

v0.3: SQLite persistence + ProjectService + dependency resolution

2026-06-10 18:59:25 +08:00

shutdown_service.py

Initial commit: SenSu Alpha 0.2.0

2026-06-10 12:28:05 +08:00

sysmon_widget.py

Debug: fix headless mode, plugin compat, psutil optional, module imports

2026-06-10 19:26:41 +08:00

tui_service.py

fix: 系统监控改用 asyncio task 驱动，抗 Android 后台挂起

2026-06-13 12:50:06 +08:00