xsl
65ba3cc7a5
fix(taobao): default cloud gateway signature to the md5 form
...
真实网关请求不带 sign_method(2026-11-01 用 nginx access.log 抓到的真实请求离线复算确认),
缺省签名形式是 MD5(secret + content + secret),也就是 sign_method=md5 的算法,
而不是 MD5(content + secret)。旧实现按「空方法」走了后者,必然 mismatch,
真机登录一直卡在 401「淘宝身份校验失败」。
- h5/lib/taobao-auth.js:缺省 method 归一为 md5
- h5/test/taobao-auth.js:把抓包参数固化成回归测试(含旧算法的反例与 verify 正反例)
2026-11-01 23:30:29 +08:00
xsl
4af825a5e4
feat(rednote): add isolated persistent browser H5 entry
2026-10-19 22:59:10 +08:00
xsl
9eec4369da
feat(taobao): add native mini program with shared backend
...
Preserve H5 flows while adding Taobao identity, native capture, reports and isolated local development. Fix canceled province selection and expired-session logout. Record passing local regressions, two pre-existing H5 assertion failures and pending platform validation.
2026-10-19 20:14:31 +08:00
xsl
bb6da17f54
fix(recommendation): use displayed skin age across reports and admin
2026-10-16 19:03:25 +08:00
xsl
9181069643
perf(report): load side wrinkle layers after report entry
2026-10-16 16:34:11 +08:00
xsl
5e07985b19
fix(camera): remove post-capture photo revalidation
2026-10-16 16:01:25 +08:00
xsl
9ff7a582af
feat(admin): track capture-to-report conversion funnel
2026-10-16 15:45:13 +08:00
xsl
757b96dfad
feat(report): add annotated wrinkle views and restore capture countdown
2026-10-15 19:45:21 +08:00
xsl
1fdbb575b0
feat(h5): allow guest access without login and retain history only for WeChat
2026-10-13 15:23:23 +08:00
xsl
92a3965b7d
feat(h5): apply fourth feedback and tighten local capture validation
2026-10-12 20:16:41 +08:00
xsl
d68f841f0e
fix(auth): harden WeChat login and explicit identity switching
2026-10-12 10:07:54 +08:00
xsl
0ec5e5dc32
fix(report): recommend by measured skin age and align admin results
2026-10-12 00:23:57 +08:00
xsl
ce8d0ff1f7
feat(h5): align October UI and add WeChat auth with saved reports
2026-10-11 17:28:11 +08:00