TradeMate Dev fa3050a17c fix: remove CSRF requirement from login/register endpoints ...

Anonymous users have no CSRF cookie, so require_csrf_token always
raises 403 on first visit. This broke all first-time logins and
registrations. CSRF protection is unnecessary here since there's
no authenticated session to forge requests against.

2026-05-30 21:39:02 +08:00

..

alembic

refactor: replace direct WeChat/Alipay with unified pay-api gateway

2026-05-29 18:36:50 +08:00

app

fix: remove CSRF requirement from login/register endpoints

2026-05-30 21:39:02 +08:00

certs

feat: WeChat Pay integration, translation quota management, login UX fixes

2026-05-20 18:30:12 +08:00

tests

refactor: replace direct WeChat/Alipay with unified pay-api gateway

2026-05-29 18:36:50 +08:00

.env.example

refactor: replace direct WeChat/Alipay with unified pay-api gateway

2026-05-29 18:36:50 +08:00

alembic.ini

fix: make alembic use env var DATABASE_URL instead of hardcoded dev db

2026-05-14 10:24:50 +08:00

Dockerfile

feat: 修复 H5 底部导航覆盖 + 更新项目进度文档

2026-05-12 20:24:42 +08:00

pytest.ini

refactor: replace direct WeChat/Alipay with unified pay-api gateway

2026-05-29 18:36:50 +08:00

requirements.txt

docs: update project docs and clean up redundant files

2026-05-29 11:15:33 +08:00