7 Commits

Include renames

Author	SHA1	Message	Date
kate522	ff4ec1eb43	feat(captcha): 打通人机验证 11 个场景的前后端完整链路 ... - 统一验证入口 aksrt_require_captcha()，返回 true|WP_Error，启用场景配置缺失时 fail-closed 拒绝 - 前端公共 API 重构为 window.AKSRTCaptcha（verify/collect/reset/run），单飞锁防并发重复验证，一次性 proof 绑定浏览器 cookie+场景+服务商+主机名 - challenge/exchange REST 端点：challenge 原子占用防票据放大厂商调用，增加频率限制 - 新增 OAuth bind pass：服务端签发 5 分钟一次性令牌，绑定用户+服务商+浏览器，微信扫码延迟消费 - 覆盖场景：评论、登录、注册、绑定第三方、绑定手机、找回密码、修改密码、更改邮箱、资料下载、签到、前台投稿 - 移除 Service 层重复验证与 _auth_code_verified/_defer_login 等客户端可伪造标志，删除下载共享 pass 死代码 - 修复腾讯 TC3 签名 scope、Cloudflare action/cdata/hostname 严格校验、阿里云验签错误码映射 - 后台 Schema 保存对 secret 字段做掩码/保留合并；导入导出过滤 aksrt_captcha_config - 重建 public bundle 与 admin SPA；新增 captcha 运行时/安全/业务契约测试与 harness	2026-09-02 13:03:24 +08:00
kate522	d2e95acd75	进行了一些小优化	2026-09-01 18:43:21 +08:00
kate522	88eb29c645	优化了一些问题fix(captcha)	2026-08-29 17:03:05 +08:00
kate522	af52f9e94d	登录注册体系的源码级硬切换	2026-08-23 20:30:01 +08:00
kate522	ab70a5eae9	refactor(admin): consolidate duplicate configuration ... Remove duplicate comment, captcha, filing, and website-security configuration paths. Move front submission verification to the captcha scene matrix and retire obsolete admin routes and components.	2026-08-13 02:26:17 +08:00
kate522	59f5d5d98a	fix(ip-geo): harden full-chain IP geolocation reliability ... Capture real client IPs behind CDN, improve provider fallbacks and negative cache, fix admin credential dependsOn for polling mode, and map country labels to ISO codes for moderation GeoIP blocks.	2026-07-27 15:39:16 +08:00
kate522	aaf458af1c	refactor(autoload): migrate theme classes to Composer PSR-4 ... Move 288 types from global AKSRT_* + inc/classes manual requires into namespace AKSRT\{Domain} under src/AKSRT/, wire composer.json psr-4, and slim bootstrap to helpers/modules/hooks only. Split multi-class widget/gateway files, update admin contract audit paths, and document the layout in ADR/README.	2026-07-17 13:29:22 +08:00