TradeMate Dev c04fa2c19f T-005: Security hardening - CORS, Rate Limit, CSRF ...

- CORS: Restrict allowed origins to specific frontend URLs, limit methods and headers
- Rate Limit: Add fine-grained endpoint-specific rate limits for sensitive operations
  - Login: 5 requests/minute
  - Register: 3 requests/hour
  - Password change: 3 requests/5 minutes
  - Payment: 20 requests/minute
  - Admin: 30 requests/minute
- CSRF: Add CSRF protection middleware with double-submit cookie pattern
  - New app/core/csrf.py module with CSRFMiddleware
  - Require CSRF tokens on sensitive endpoints (auth, payment, profile)
  - Skip webhook endpoints for CSRF validation
- Fix pydantic-settings import in config.py

2026-05-29 10:26:23 +08:00

admin-frontend

Add landing page, referral system, usage quotas, search API management, and yearly pricing

2026-05-26 11:40:13 +08:00

backend

T-005: Security hardening - CORS, Rate Limit, CSRF

2026-05-29 10:26:23 +08:00

deploy

feat: add OpencodeGo AI provider (deepseek-v4-flash) as primary, existing providers as fallback

2026-05-15 19:59:25 +08:00

docs

docs: add production deployment guide with baota panel compatibility

2026-05-14 10:50:20 +08:00

nginx

Initial commit: TradeMate 外贸小助手 MVP

2026-05-08 18:17:12 +08:00

opencode-search-mcp

Add landing page, referral system, usage quotas, search API management, and yearly pricing

2026-05-26 11:40:13 +08:00

scripts

Initial commit: TradeMate 外贸小助手 MVP

2026-05-08 18:17:12 +08:00

systemd

Initial commit: TradeMate 外贸小助手 MVP

2026-05-08 18:17:12 +08:00

tests

fix: route ordering customer/{id}/health before /{id}; CustomerHealthService for health-overview; keywords/competitor Header decorator; onboarding product_info dict; marketing template fallback; frontend style-switching tabs

2026-05-15 09:17:26 +08:00

uni-app

Add landing page, referral system, usage quotas, search API management, and yearly pricing

2026-05-26 11:40:13 +08:00

user-frontend

Add user-friendly loading feedback for all AI/long-running operations

2026-05-27 16:22:07 +08:00

.gitignore

Add admin-frontend and user-frontend standalone projects, certification/invoice/discovery features, fix auth header and theme consistency

2026-05-22 18:35:30 +08:00

AGENTS.md

Add admin-frontend and user-frontend standalone projects, certification/invoice/discovery features, fix auth header and theme consistency

2026-05-22 18:35:30 +08:00

docker-compose.yml

Initial commit: TradeMate 外贸小助手 MVP

2026-05-08 18:17:12 +08:00

package-lock.json

Add admin-frontend and user-frontend standalone projects, certification/invoice/discovery features, fix auth header and theme consistency

2026-05-22 18:35:30 +08:00

package.json

Add admin-frontend and user-frontend standalone projects, certification/invoice/discovery features, fix auth header and theme consistency

2026-05-22 18:35:30 +08:00

PROGRESS.md

feat: 管理后台完整可用 + 注册登录记日志 + 提取信息结构化展示 + 微信配置就绪

2026-05-18 23:50:48 +08:00

S

Description

外贸智能助手 - TradeMate 项目

4.9 MiB

Languages

Vue 46%

Python 44.5%

JavaScript 5.8%

HTML 2.4%

CSS 0.5%

Other 0.7%