Pre 2.5.2 #807

wklken · 2022-11-21T08:11:40Z

规划功能:

合并二进制出包build文件到github仓库(support-files等从原内部adapters仓库迁出) => feat(src/build): merge build files from another repo #806
修复xss问题 => fix: 修复 xss 攻击漏洞 #796 #800
enable faulthandler in wsgi.py => feat(wsgi/faulthandler): enable faulthandler in wsgi.py #805
修复expired_after_days配置导致的异常定时任务异常 #757 => fix(profile/create): fail when got no settings of expired_after_days #809
修复审计-登陆日志导出ugettext_lazy 导出失败 => fix(audit/export): export fail when got ugettext_lazy #814
修复职位展示问题 v2.5.1 页面展示没有显示职务 #820 => fix: 修复职务显示问题 #820 #822
通过excel导入用户组织支持全量更新 #728 => feat: 本地目录导入excel支持选择更新 #728 #813
【安全】密码试错次数超过设置，自动锁定账户对admin无效 #810 => feat: 登录密码试错锁定机制取消对admin用户豁免 #810 #827
【安全】用户修改密码以及重置密码时密码需加密传输 #808 => feature: 页面操作密码重置，rsa加密 #818
【安全】admin账户重置密码需要先输入原密码进行校验 #811 => feat: check old password for admin #811 #840
需支持忘记密码可选择短信、微信方式。 #631 => feature: 忘记密码支持手机号验证，进行密码重置 # issue631 #837

fix #773

feat(src/build): merge build files from another repo

fix #757

* feat(wsgi/faulthandler): enable faulthandler in wsgi.py fix #770 * feat(remove): config.json for bk-user-sdk

fix(profile/create): fail when got no settings of expired_after_days

fix #812

fix(audit/export): export fail when got ugettext_lazy

fix: 用户信息转译

* feat: 本地目录导入excel支持选择更新 #728

fix:lint check #issue728

feat: 登录密码试错锁定机制取消对admin用户豁免 #810

fix: mypy check #728

* feature: 页面操作密码重置，rsa加密

ci(github_action): enable check for pre_*

* refactor: mypy check failed

* feat: 导出增加<全名> #618

* feat: check old password for admin #811

* fix: slz 转义display_name

Co-authored-by: huacao <[email protected]>

* feature: 忘记密码支持手机号验证进行重置

fix(src/build): support binary version redis

fix(poetry.lock): update

wklken · 2022-12-21T06:28:13Z

例如使用短信重置密码, 页面基本功能应该都测不通才对, 新增两个接口都没有在saas做代理, 会校验登录态, 调接口就报错

https://github.com/TencentBlueKing/bk-user/blob/pre_2.5.2/src/api/bkuser_core/api/web/password/urls.py#L22
https://github.com/TencentBlueKing/bk-user/blob/pre_2.5.2/src/saas/bkuser_shell/proxy/urls.py#L27

需要确认, 所有功能都发布到环境做过测试

fix： Saas层补充代理接口,增加相关接口的免登陆白名单

docs(changelog): update to 2.5.2

* fix: 前端国际化补充

…878) * fix(audit/login): fix #876 login audit log login_time not local time

wklken added 2 commits November 21, 2022 15:37

feat(src/build): merge build files from another repo

54456c2

fix #773

Merge pull request #806 from wklken/ft_merge_build_files

c426319

feat(src/build): merge build files from another repo

wklken requested a review from nannan00 November 21, 2022 08:11

fix: 修复 xss 攻击漏洞 #796

fcdc18c

wklken mentioned this pull request Nov 21, 2022

存在高危漏洞：存储型XSS #796

Closed

wklken and others added 25 commits November 21, 2022 16:47

fix(profile/create): fail when got no settings of expired_after_days

cb57bff

fix #757

feat(wsgi/faulthandler): enable faulthandler in wsgi.py (#805)

1b8a27b

* feat(wsgi/faulthandler): enable faulthandler in wsgi.py fix #770 * feat(remove): config.json for bk-user-sdk

Merge pull request #809 from wklken/fix_profile_celery_task

57f49a3

fix(profile/create): fail when got no settings of expired_after_days

fix(audit/export): export fail when got ugettext_lazy

d1b2905

fix #812

Merge pull request #814 from wklken/fix_audit_login_log

cc41f04

fix(audit/export): export fail when got ugettext_lazy

fix: xss 写入时转换数据

12b07d6

fix: 用户信息转译

edb7de2

Merge pull request #817 from yuri0528/yutyi/bug-xss-2

110006d

fix: 用户信息转译

fix: 修复职务显示问题 #820

003ae19

feat: 本地目录导入excel支持选择更新 #728 (#813)

48a686f

* feat: 本地目录导入excel支持选择更新 #728

fix:lint check #issue728

1f5bec1

Merge pull request #826 from Canway-shiisa/pre_2.5.2-fix-lint

d63b6c4

fix:lint check #issue728

feat: 登录密码试错锁定机制取消对admin用户豁免 #810

4ba9f2f

Merge pull request #827 from Canway-shiisa/pre_2.5.2-issue810

f3fe95d

feat: 登录密码试错锁定机制取消对admin用户豁免 #810

fix: mypy check #728

481626e

Merge pull request #828 from Canway-shiisa/pre_2.5.2-fix-mypy

ba7b72c

fix: mypy check #728

feature: 页面操作密码重置，rsa加密 (#818)

bcb724b

* feature: 页面操作密码重置，rsa加密

ci(github_action): enable check for pre_*

324d10a

Merge pull request #829 from wklken/ft_github_action_trigger

f09160d

ci(github_action): enable check for pre_*

fix: 修复失效toml文件；mypy check failed (#830)

ccc1477

* refactor: mypy check failed

feat: 导出增加<全名> #618 (#835)

0287c71

* feat: 导出增加<全名> #618

fix: xss校验优化

ffaa738

feat: check old password for admin #811 (#840)

4246028

* feat: check old password for admin #811

fix: slz 转义display_name (#846)

4989e36

* fix: slz 转义display_name

feature: 支持密码重置可选择短信验证方式 #631 (#854)

42e889a

Co-authored-by: huacao <[email protected]>

caohua and others added 9 commits December 16, 2022 15:40

feature: 1、审计日志中新增人员全名列&导出列表优化 #618 2、通过excel导入用户组织支持全量更新 #728 (#855)

a11c21c

Co-authored-by: huacao <[email protected]>

feature: admin账户重置密码需要先输入原密码进行校验 #811 (#856)

92a6894

Co-authored-by: huacao <[email protected]>

feat: rsa 前端加密 #808

3f22a86

feature: 忘记密码支持手机号验证，进行密码重置 # issue631 (#837)

de6e9e4

* feature: 忘记密码支持手机号验证进行重置

feat：rsa 前端加密优化

496a561

fix(src/build): support binary version redis

4c372cc

Merge pull request #860 from wklken/fix_binary_redis

0cc6b6e

fix(src/build): support binary version redis

fix(poetry.lock): update

61e3ef4

Merge pull request #861 from wklken/fix_poetry_loc

9e2f277

fix(poetry.lock): update

neronkl and others added 14 commits December 21, 2022 15:54

fix： Saas层补充代理接口,增加相关接口的免登陆白名单

179c781

Merge pull request #862 from neronkl/fix_saas

5123191

fix： Saas层补充代理接口,增加相关接口的免登陆白名单

docs(changelog): update to 2.5.2

4ca8466

Merge pull request #866 from wklken/fix_2.5.2_version

d6d50e6

docs(changelog): update to 2.5.2

fix: 修复侧边栏展示空白问题 & 更改文件头

af8bc27

fix: 前端国际化补充 (#867)

2c1100a

* fix: 前端国际化补充

fix: 目录meta list接口rsa设置不返回 (#868)

32a1663

fix：修复点击忘记，需进行登录态校验 (#869)

f406adf

fix: 搜索前端展示空白/错乱 #875 (#877)

e2e1098

fix(audit/login): fix #876 login audit log login_time not local time (#…

46bcd4f

…878) * fix(audit/login): fix #876 login audit log login_time not local time

fix: 前端交互问题修复 #879 (#880)

091fc90

fix(poetry): update (#881)

c62aba6

refactor: 变更重置密码验证码短信文案 (#882)

00c15ae

fix(reset_password/sms): tempalte wrong (#883)

9e4686e

wklken merged commit 5903a0f into develop Jan 13, 2023

wklken deleted the pre_2.5.2 branch January 31, 2023 06:26

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Pre 2.5.2 #807

Pre 2.5.2 #807

wklken commented Nov 21, 2022 •

edited

Loading

wklken commented Dec 21, 2022

Pre 2.5.2 #807

Pre 2.5.2 #807

Conversation

wklken commented Nov 21, 2022 • edited Loading

wklken commented Dec 21, 2022

wklken commented Nov 21, 2022 •

edited

Loading