|
|
622b0558b9
|
fix(rbac): fix high-concurrency race conditions in login and cache
1. Login lockout race condition:
- Replace SELECT-then-UPDATE with atomic database operations
- Lockout check now in SQL WHERE clause (DATE_SUB comparison)
- Fail count increment: UPDATE ... SET count = count + 1 (atomic)
- Applied to checkUserPassword, basic_auth, up_login.dspy, phone_login.dspy
2. Cache threading.Lock -> asyncio.Lock:
- LRUCache now uses lazy-init asyncio.Lock
- Prevents blocking the event loop in async environment
- UserPermissions._rp_lock also uses asyncio.Lock
- Double-check pattern in load_roleperms prevents duplicate DB loads
3. Use database NOW() instead of Python curDateString for concurrent updates
|
2026-04-26 10:58:13 +08:00 |
|
|
|
3fdd4efeff
|
feat(rbac): add login tracking, lockout, secure cache
- Add created_at, last_login, login_fail_count, last_login_fail fields
- 3 failed logins locks account for 5 minutes
- LRU+TTL cache for UserPermissions, thread-safe
- All login methods update last_login
- Migration SQL for existing databases
|
2026-04-26 10:49:01 +08:00 |
|
|
|
a8a5199c25
|
bugfix
|
2026-04-23 12:51:51 +08:00 |
|
|
|
704f7f3700
|
bugfix
|
2026-04-15 15:37:08 +08:00 |
|
|
|
188ce21b83
|
bugfix
|
2026-04-01 18:20:46 +08:00 |
|
|
|
593f60a7a0
|
bugfix
|
2026-04-01 18:19:16 +08:00 |
|
|
|
3098c3dd7e
|
bugfix
|
2026-04-01 18:05:51 +08:00 |
|
|
|
303c70e5ca
|
bugfix
|
2026-02-24 19:42:52 +08:00 |
|
|
|
4d07f61842
|
bugfix
|
2026-01-28 16:30:14 +08:00 |
|
|
|
82ca04a760
|
bugfix
|
2026-01-28 16:26:50 +08:00 |
|
yumoqing
|
dac9cd1b5c
|
bugfix
|
2026-01-14 10:36:40 +08:00 |
|
yumoqing
|
a1ed3f6620
|
bugfix
|
2026-01-14 10:32:36 +08:00 |
|
yumoqing
|
a7a0f49bc7
|
bugfix
|
2026-01-14 09:50:00 +08:00 |
|
yumoqing
|
7e34dcd666
|
bugfix
|
2026-01-14 09:42:57 +08:00 |
|
yumoqing
|
a300f56411
|
bugfix
|
2026-01-14 09:41:56 +08:00 |
|
yumoqing
|
2b3357d380
|
Merge branch 'main' of git.opencomputing.cn:yumoqing/rbac
|
2026-01-14 09:28:59 +08:00 |
|
yumoqing
|
f3c57839c0
|
bugfix
|
2026-01-14 09:28:53 +08:00 |
|
|
|
ab9fdce885
|
bugfix
|
2026-01-07 15:20:48 +08:00 |
|
|
|
b6ad4af8a8
|
bugfix
|
2025-12-26 10:51:53 +08:00 |
|
|
|
f734989d28
|
bugfix
|
2025-12-25 16:05:57 +08:00 |
|
|
|
66e8ffda22
|
bugfix
|
2025-12-16 13:19:36 +08:00 |
|
|
|
e5d85a696c
|
bugfix
|
2025-08-07 15:22:35 +08:00 |
|
|
|
da195760af
|
bugfix
|
2025-08-07 15:18:32 +08:00 |
|
|
|
5870ed6a9d
|
bugfix
|
2025-07-28 16:44:09 +08:00 |
|
|
|
aa03d6959e
|
bugfix
|
2025-07-28 16:42:35 +08:00 |
|
|
|
d95b12a903
|
bugfix
|
2025-07-28 16:39:51 +08:00 |
|
|
|
e8037bb16f
|
bugfix
|
2025-07-28 15:41:07 +08:00 |
|
|
|
85e9bb9466
|
bugfix
|
2025-07-20 19:06:17 +08:00 |
|
|
|
4d2e026461
|
bugfix
|
2025-07-20 19:04:50 +08:00 |
|
|
|
b46426abe0
|
first commit
|
2025-07-16 14:19:12 +08:00 |
|
