Skip to content

feat(tui): 添加 M0A.5b TUI 登录(重提 #84) - #4

Closed
wangjk9527 wants to merge 2 commits into
cursor/m0a5a-formal-auth-foundation-f252from
cursor/m0a5b-tui-login-f252
Closed

feat(tui): 添加 M0A.5b TUI 登录(重提 #84)#4
wangjk9527 wants to merge 2 commits into
cursor/m0a5a-formal-auth-foundation-f252from
cursor/m0a5b-tui-login-f252

Conversation

@wangjk9527

Copy link
Copy Markdown
Owner

Summary

基于 main reset 后重提原 #84:为 TUI 增加正式账号登录、Session 持久化、交互注册引导、账号切换与 /logout

叠在:

  1. cursor/native-one-click-deployment-v2-f252(DataLink 外置一键部署)
  2. cursor/m0a5a-formal-auth-foundation-f252(M0A.5a,重提 feat(auth): add formal password authentication foundation (M0A.5a) datagallery-lab/datafoundry#83
  • REST、AG-UI 与启动 preflight(含 run-defaults)共用 AuthenticatedTransport;身份探测走 GET /api/v1/me
  • 删除离线 Demo 模式;文档同步去掉残留 Demo 表述
  • 增加 Web/TUI 会话共享 smoke(smoke:tui-auth-sharing
  • 复审加固:redirect:manual 安全跳转、AbortController 覆盖 body 读取、session 锁与 CSRF 重试等

Depends on M0A.5a 分支(以及其下的 deploy v2)。请先合部署与 5a,再审/合本 PR。

Test plan

  • npm --workspace @datafoundry/tui test(96 pass)
  • npm run typecheck
  • npm run test:auth-foundation(24 pass)
  • npm run smoke:auth
  • npm run smoke:tui-auth-sharing
  • npm run test:deploy(叠层后仍 87 pass)
  • CI green

Notes

  • 向主仓开 PR 时 head:wangjk9527:cursor/m0a5b-tui-login-f252
  • base:先用 cursor/m0a5a-formal-auth-foundation-f252;底层合入 main 后再改 base / rebase
Open in Web Open in Cursor 

@wangjk9527
wangjk9527 force-pushed the cursor/m0a5a-formal-auth-foundation-f252 branch from 851d690 to 5442fab Compare July 26, 2026 08:10
@wangjk9527
wangjk9527 force-pushed the cursor/m0a5b-tui-login-f252 branch from 1ba3c88 to 62167a5 Compare July 26, 2026 08:11
@wangjk9527
wangjk9527 force-pushed the cursor/m0a5a-formal-auth-foundation-f252 branch from 5442fab to 4fdb3a7 Compare July 27, 2026 06:44
wangjk9527 and others added 2 commits July 27, 2026 14:45
接入正式认证登录/会话恢复,并按复审加固:
- 认证请求 redirect:manual,逐跳拒绝 HTTPS→HTTP 与跨 origin
- AbortController 覆盖完整 body 读取;session 隔离/重置与保存同锁,锁支持过期回收
- CSRF 403 若 jar token 已更新则直接重试;session-invalid 去重先于清理副作用

基于 main reset 后重提原 datagallery-lab#84,rebase 到 DataLink 外置 deploy + M0A.5a 栈上;
同步清理 TUI 指南中残留的离线 Demo 模式表述。

Co-authored-by: wing <wangjk9527@users.noreply.github.com>
Max-Age=0/过期 Expires 的 Set-Cookie 现在会删除 jar 条目;session-invalid
清理失败仍通知 auth-required;logout/auth-required 后强制交互登录,避免
磁盘残留会话被静默恢复。
@wangjk9527
wangjk9527 force-pushed the cursor/m0a5b-tui-login-f252 branch from 62167a5 to 323d32b Compare July 27, 2026 06:45
@wangjk9527

Copy link
Copy Markdown
Owner Author

避免 fork 同仓 PR 重复跑 CI;主仓 PR 为准。

@wangjk9527 wangjk9527 closed this Jul 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant