Commit Graph
21 Commits
Author SHA1 Message Date
Austin 841c0c77cd feat: 实现登录失败锁定功能
新增了登录失败次数统计和临时锁定机制,包括:
1. 定义登录锁定数据结构和数据库表结构
2. 实现租户级别的锁定状态持久化接口
3. 添加登录速率限制安全策略配置
4. 在登录流程中加入锁定前置检查和失败计数逻辑
5. 提供管理员手动解锁的内部API接口
6. 新增中文本地化的锁定提示文案
2026-09-20 17:08:38 +08:00
Austin 753a04ed12 fix: broadcast offline presence as soon as the last session drops
Logout left contacts seeing the user online until the me topic idle timeout
fired presUsersOfInterest(off), and even that frame was silently dropped
for p2p routes by handlePresence's xoriginal check. MarkUserOffline now
returns the remaining session count and cleanUp notifies users of interest
immediately once it hits zero; p2p presence is delivered straight to the
contact's me topic, mirroring presSingleUserOffline. Zentao #22.
2026-09-18 17:42:18 +08:00
richjohnrambo 192bdede33 fix: route call accept across pods 2026-09-18 11:15:19 +08:00
richjohnrambo 50f8581667 fix: resolve im backend issue list regressions 2026-09-17 14:59:16 +08:00
Austin 4280b535c2 feat(session): 实现同平台抢登互踢功能,优化会话踢下线逻辑
新增同平台会话踢下线能力,将iOS/Android/mobile归为同一移动分组,web仅匹配web;扩展会话存储接口支持按平台、带原因踢除会话,同步更新集群广播逻辑与各调用点,统一传递踢下线原因参数
2026-09-16 10:23:27 +08:00
Austin dbb0a06db0 fix: 修复P2P主题别名订阅的兼容性问题
1. 订阅重复检查新增Original与RcptTo匹配判断,避免别名订阅误判已订阅
2. 重构订阅get查询处理逻辑,提取为独立函数
3. 针对P2P别名订阅场景返回200响应而非304,帮助客户端完成别名到标准主题名的重命名,避免发布失败
4. 优化群摘要接口的权限校验和异常处理逻辑
2026-09-15 18:53:49 +08:00
richjohnrambo 9ec5da5b02 fix: persist login sessions for workbench auth 2026-09-15 10:23:47 +08:00
richjohnrambo 4854e090ef fix: harden group lifecycle and registration writes 2026-09-14 12:04:10 +08:00
richjohnrambo a9afc6ff6a fix: align group management APIs 2026-09-13 16:03:55 +08:00
richjohnrambo 92a72d1bea feat: enforce tenant login IP whitelists 2026-09-09 09:40:37 +08:00
richjohnrambo 8116fb6fe8 feat: 完善用户治理与登录白名单 2026-09-08 10:55:26 +08:00
richjohnrambo 7e8fc8237b fix im p0 backend issues 2026-09-07 15:12:14 +08:00
richjohnrambo 6b20a633ce feat: 接入后台消息治理与登录审计 2026-09-07 11:53:24 +08:00
richjohnrambo 3173313ab9 Refresh presence on websocket pong 2026-09-04 10:49:33 +08:00
richjohnrambo c1bfa503cf feat: add client call feature switches 2026-09-03 21:05:33 +08:00
richjohnrambo f900a08a01 feat: add redis cache and fanout support 2026-08-25 20:54:03 +08:00
Your Name 76ca6147ec 修复{hi}握手拒绝未携带tenant字段的客户端
多租户改造给{hi}握手消息加了必填的tenant字段,但目前的im_webapp(以及
现有iOS/Android客户端)都是标准Tinode SDK,不知道要发这个新字段,导致
每次连接握手都被判定为malformed(400),前端表现为反复断线重连。

改为tenant为空时回退到默认租户"default"(对应迁移脚本里seed的那条记录),
不再直接拒绝;显式携带tenant code的客户端行为不受影响,仅长度校验保留。
2026-08-15 14:25:59 +08:00
richjohnrambo 5bd35f97a6 feat: add im home and message action flows 2026-08-12 10:36:41 +08:00
richjohnrambo d239e37f56 feat: add im auth verification flows 2026-08-12 00:20:27 +08:00
richjohnrambo c2076721fc 多租户更改 2026-08-11 15:59:57 +08:00
richjohnrambo 5aa7733515 chore: sync project files 2026-08-11 10:29:38 +08:00