a620906209/CFDivePlatform
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
77 Commits 1 Branch 0 Tags
b2e20767d88e6e839524af92b63f81c9b9cbfcf9
Commit Graph

77 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
a620906209 b2e20767d8 Merge pull request 'security(auth): P1 Token Refresh + sessionStorage' (#22) from security/auth-p1-token-refresh into master
Deploy Production / deploy (push) Successful in 30s
Details 
Reviewed-on: #22
 2026-06-01 20:34:52 +00:00
a620906209 d9f0fe11c6 security(auth): P1 Token Refresh + sessionStorage 
- 新增三個 refresh 端點（member/provider/admin），revoke 舊 token 發行新 7 天 token
- axios.js / coachAxios.js：401 interceptor 改為 refresh-then-retry，含 isRefreshing queue 防並發、isRedirecting flag 防雙重 redirect
- auth.js / coachAuth.js / AuthCallbackView.vue：localStorage 全改為 sessionStorage
- echo.js / notificationAxios.js：同步改為 sessionStorage
- notifications.js：401 時停止 polling（stopPolling），不印 error log
- 新增 TokenRefreshTest.php（11 tests / 24 assertions）：refresh 成功/失效/跨角色 403

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-02 04:33:35 +08:00
a620906209 a94c2462b8 Merge pull request 'security(auth): P0 認證安全強化' (#21) from security/auth-p0-hardening into master
Deploy Production / deploy (push) Successful in 36s
Details 
Reviewed-on: #21
 2026-06-01 17:58:24 +00:00
a620906209 cb9c9a9385 security(auth): P0 認證安全強化 
- Token 過期時間設為 7 天（sanctum.php expiration）
- prune-expired 每日排程清除過期 token 記錄
- Google OAuth redirect 改用 URL fragment（#token=）避免 token 出現在 server log
- SocialAuthController env() 改 config() 修正 config:cache 下 redirect 失效問題
- 登入端點加 rate limiting：member/provider throttle:5,1，admin throttle:3,1
- axios/coachAxios 加 401 response interceptor，token 過期自動登出
- 修正 migration SQLite 相容性（MODIFY COLUMN），Feature tests 從 7 通過恢復至 41
- 新增 AuthRateLimitTest（5 tests）驗證各角色頻率限制行為

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-02 01:54:40 +08:00
a620906209 5b13a014be Merge pull request 'docs: 更新 README 反映最新功能與技術棧' (#20) from docs/update-readme into master
Deploy Production / deploy (push) Successful in 14s
Details 
Reviewed-on: #20
 2026-05-28 19:18:17 +00:00
a620906209 8d1ea49abc docs: 更新 README 反映最新功能與技術棧 
新增：即時訊息、Reverb WebSocket、Sentry、/health、CI/CD、本地開發說明。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-29 03:17:44 +08:00
a620906209 9be50d493b Merge pull request 'fix: 改用 BusyBox 相容的 flock 語法' (#19) from fix/sentry-composer into master
Deploy Production / deploy (push) Successful in 21s
Details 
Reviewed-on: #19
 2026-05-28 19:04:47 +00:00
a620906209 0a6bfd9df8 fix: 改用 BusyBox 相容的 flock 語法 
BusyBox flock 不支援 -w，移除 timeout 參數。
等待行為不變，預設會阻塞直到取得鎖。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-29 03:04:12 +08:00
a620906209 127101adb3 Merge pull request 'fix: 修正 CI 並發 fetch 導致 git ref 衝突' (#18) from fix/sentry-composer into master
Deploy Production / deploy (push) Failing after 1s
Details 
Reviewed-on: #18
 2026-05-28 19:03:13 +00:00
a620906209 0160d72467 fix: 修正 CI 並發 fetch 導致 git ref 衝突 
git pull 改為 flock + fetch + reset --hard：
- flock 防止兩次 CI 同時更新 ref 產生 race condition
- reset --hard 比 pull 更適合 CI 環境，不做 merge

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-29 03:00:57 +08:00
a620906209 cfd0455597 Merge pull request 'fix: 補上 sentry/sentry-laravel 的 composer 異動' (#17) from fix/sentry-composer into master
Deploy Production / deploy (push) Failing after 1s
Details 
Reviewed-on: #17
 2026-05-28 18:38:45 +00:00
a620906209 8974a22584 fix: 補上 sentry/sentry-laravel 的 composer 異動 
前次 Sentry 整合 commit 漏掉 composer.json / composer.lock。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-29 02:38:06 +08:00
a620906209 9bde1ae344 Merge pull request 'feat: 整合 Sentry 錯誤監控' (#16) from feature/health-endpoint into master
Deploy Production / deploy (push) Successful in 16s
Details 
Reviewed-on: #16
 2026-05-28 18:32:11 +00:00
a620906209 3ad5972a5a feat: 整合 Sentry 錯誤監控 
安裝 sentry/sentry-laravel，掛載例外捕捉至 bootstrap/app.php。
.env 透過 SENTRY_LARAVEL_DSN 設定，空值時自動停用。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-29 02:29:00 +08:00
a620906209 b770aab42a Merge pull request 'refactor: 精簡 /health 回應欄位' (#15) from feature/health-endpoint into master
Deploy Production / deploy (push) Successful in 16s
Details 
Reviewed-on: #15
 2026-05-28 18:05:29 +00:00
a620906209 8d41f473e4 refactor: 精簡 /health 回應欄位 
移除 php_version、laravel、environment、memory_mb，
保留 status、timestamp、checks 三欄。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-29 02:04:24 +08:00
a620906209 5463fd70b1 Merge pull request 'chore:新增 swagger-api-docs-completion change 規劃' (#14) from feature/health-endpoint into master
Deploy Production / deploy (push) Successful in 25s
Details 
Reviewed-on: #14
 2026-05-28 17:58:55 +00:00
a620906209 54dd4bb7a6 feat: 新增 /health 端點供 UptimeRobot 監控 
檢查 DB 連線、Redis ping、Cache 讀寫，任一失敗回傳 503。
回應包含 timestamp、environment、PHP/Laravel 版本、記憶體用量。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-29 01:57:04 +08:00
a620906209 71b35533f4 Merge branch 'master' of https://github.com/a620906209/CFDivePlatform 2026-05-29 01:20:12 +08:00
a620906209 eff2dd273c Merge pull request 'docs(openspec): archive realtime-booking-chat，同步主 specs' (#13) from feature/realtime-booking-chat into master
Deploy Production / deploy (push) Successful in 20s
Details 
Reviewed-on: #13
 2026-05-28 17:18:49 +00:00
a620906209 4a5559a79e chore(openspec): 移除已 archive 的 change 原路徑 
補上 mv 後未 stage 的刪除紀錄，保持 working tree 乾淨。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-29 01:17:41 +08:00
a620906209 83e0e599a0 docs(openspec): archive realtime-booking-chat，同步主 specs 
- archive openspec/changes/realtime-booking-chat → archive/2026-05-29-realtime-booking-chat
- 新增 openspec/specs/booking-chat/spec.md（即時訊息完整規格）
- 新增 openspec/specs/user-presence/spec.md（Presence Channel 規格）
- 更新 openspec/specs/booking-lifecycle/spec.md（補訊息頻道語義與封存 Scenario）

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-29 01:14:52 +08:00
a620906209 6fcf57a2d2 Merge pull request 'fix: 修正聊天室雙向即時同步失效問題' (#12) from feature/realtime-booking-chat into master
Deploy Production / deploy (push) Successful in 15s
Details 
Reviewed-on: #12
 2026-05-28 15:12:20 +00:00
a620906209 5ba598c78f fix: 修正聊天室雙向即時同步失效問題 
- echo.js：還原 disconnect()/connect()，確保 Reverb 重連後重新授權 presence channel
- BookingChat.vue：移除 handleNotificationFallback（會覆蓋樂觀更新訊息導致重複）
- BookingChat.vue：改用 state_change 事件偵測重連（'reconnected' 並非合法 Pusher.js 事件）
- BookingChat.vue：移除未使用的 useAuthStore / useCoachAuthStore / currentUserId 依賴

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-28 18:29:53 +08:00
a620906209 3809ac7ed0 Merge pull request 'fix: 避免 entrypoint 覆寫 .env 的 DB 憑證' (#11) from feature/realtime-booking-chat into master
Deploy Production / deploy (push) Successful in 44s
Details 
Reviewed-on: #11
 2026-05-28 10:18:27 +00:00
a620906209 6b3a0816f5 fix: 聊天室樂觀更新 + private channel fallback 
問題：presence channel 在另一方加入的瞬間可能短暫抖動，
導致雙方都收不到 MessageSent event，訊息消失需重整。

三項修正：
1. sendText 樂觀更新：訊息送出後立即顯示暫存訊息，
   不依賴 WebSocket event 才出現。
2. MessageSent handler deduplication：自己的訊息收到
   event 時，替換暫存訊息而非重複 push。
3. Private channel fallback：receiver 的 private channel
   收到 notification.created 時，補拉一次訊息歷史，
   確保 presence channel 失效時仍能同步。使用
   stopListening 避免干擾 notifications store 的訂閱。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-28 17:59:10 +08:00
a620906209 1ba4ca893a fix: 修正即時聊天室 presence channel 間歇性失效 
三個根本原因：
1. updateEchoToken() 呼叫 disconnect/connect 會中斷已訂閱的
   presence channel，改為只更新 auth header（不重連）。
   同時將 setAuth() 的呼叫順序改為先 updateEchoToken() 再
   startRealtime()，確保訂閱時使用最新 token。
2. BookingPresenceChannel::join() 未對 schedule null 做防守，
   載入後若 schedule 不存在會 500，導致 auth 靜默失敗。
3. WebSocket 重連後 presence channel 不會自動恢復，
   在 BookingChat 加入 reconnected 事件處理，重連後重訂閱。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-28 17:46:15 +08:00
a620906209 6286399a3b fix: 修正 VITE_API_URL 預設值 typo（spack → space） 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-28 17:28:17 +08:00
a620906209 f80319109c fix: entrypoint 先啟動 php-fpm，init 任務移至背景 
將 wait_for_mysql、migration、cache:clear 等耗時操作移至背景
subshell 執行，php-fpm 不再等待它們完成才啟動。
解決每次 docker restart 後 php-fpm 尚未就緒時 Nginx 回傳
502（無 CORS headers），前端看到 CORS error 的問題。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-28 17:23:59 +08:00
a620906209 4cf83375f3 fix: 避免 entrypoint 覆寫 .env 的 DB 憑證 
僅保留 DB_HOST 強制設為 db（Docker service name），
移除對 DB_USERNAME / DB_DATABASE / DB_PASSWORD 的覆寫。
原本透過 container 環境變數回寫 .env 的機制會在密碼含
特殊字元時因 shell 展開截斷，導致 DB_PASSWORD 被清空。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-28 17:07:29 +08:00
a620906209 91589a6f0e Merge pull request 'feat: 即時預約聊天室（realtime booking chat）' (#10) from feature/realtime-booking-chat into master
Deploy Production / deploy (push) Successful in 55s
Details 
Reviewed-on: #10
 2026-05-28 07:56:10 +00:00
a620906209 ab24f210a6 feat: 即時預約聊天室（realtime booking chat） 
## 新增功能
- 會員與教練在 confirmed 預約期間可互傳文字與圖片訊息
- Presence Channel 顯示對方在線狀態（即時加入/離線）
- 已讀回執：對方讀取訊息後即時更新
- 預約完成（completed）後訊息封存唯讀
- 圖片上傳使用 intervention/image 處理（移除 EXIF、限制尺寸、強制重新編碼）

## 通知系統
- 收到新訊息時 Bell Icon 即時更新（NotificationCreated via private channel）
- 預約列表卡片顯示未讀角標（GET /api/bookings/messages/unread-counts 批次查詢）
- 瀏覽器分頁在背景時推送 Web Notification

## 基礎建設
- 引入 Laravel Reverb 作為自架 WebSocket 伺服器
- docker-compose 新增 reverb service（連接 proxy_net，供 NPM 代理）
- 前端安裝 laravel-echo + pusher-js，初始化 Echo plugin
- Dockerfile 補 GD JPEG/WebP/FreeType 支援

## 清理
- 移除 test_broadcast.php 與 resources/js/echo.js（Blade 殘留）
- 移除 /ping、/testpost 測試路由
- channels.php 改用 class-based 授權語法，移除 debug log
- BookingChat.vue otherType 提取為 computed 消除重複
- docker-entrypoint.sh 健康檢查改用 env var 取代硬編碼密碼

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-28 03:59:14 +08:00
a620906209 cc010b5c83 fix: use self-hosted runner for deploy workflow
Deploy Production / deploy (push) Successful in 19s
Details
2026-05-25 16:31:20 +00:00
a620906209 c10d4ebfe6 rerun deploy with self-hosted runner
Deploy Production / deploy (push) Has been cancelled
Details
2026-05-25 16:29:10 +00:00
a620906209 153aee5f94 Merge pull request 'fix: 修正 Gitea Actions runner 標籤不符問題' (#9) from chore/openspec-gitignore-setup into master
Deploy Production / deploy (push) Has been cancelled
Details 
Reviewed-on: #9
 2026-05-25 15:40:19 +00:00
a620906209 f996a0053b fix: 修正 Gitea Actions runner 標籤不符問題 
將 runs-on 從 self-hosted 改為 ubuntu-latest，
與 act_runner 實際註冊的標籤一致。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-25 23:34:51 +08:00
a620906209 e7776fa930 Merge pull request 'chore: 重新命名 CLAUDE.MD 為小寫、細化 .gitignore 並加入 OpenSpec 設定' (#8) from chore/openspec-gitignore-setup into master
Deploy Production / deploy (push) Has been cancelled
Details 
Reviewed-on: #8
 2026-05-25 15:23:52 +00:00
a620906209 972829419b chore: 重新命名 CLAUDE.MD 為小寫、細化 .gitignore 並加入 OpenSpec 設定 
- CLAUDE.MD → CLAUDE.md（修正 Windows 大小寫問題）
- .gitignore 改為僅排除 .claude/settings.local.json 與 .claude/worktrees/
- 新增 .claude/skills/openspec-*/SKILL.md（四個 OpenSpec skill 定義）
- 新增 .claude/commands/opsx/*.md（四個 opsx command 定義）

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-25 23:22:39 +08:00
a620906209 ecfb268d61 Merge pull request 'ci: 新增 Gitea Actions 自動部署 workflow' (#7) from chore/remove-unused-workflows into master
Deploy Production / deploy (push) Has been cancelled
Details 
Reviewed-on: #7
 2026-05-25 09:43:03 +00:00
a620906209 d4821e527b chore: 刪除未使用的 GitHub Actions 範本 workflow
pull requests / uneditable (pull_request_target) Failing after 1s
Details 
這些 Laravel 框架預設 workflow 被 Gitea runner 誤接，
導致大量殭屍容器佔用伺服器資源，目前專案也未實作測試

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-25 17:42:18 +08:00
a620906209 75462c2619 ci: 新增 Gitea Actions 自動部署 workflow 
push master 時自動執行：git pull、composer install、migrate、
config cache、重啟 queue worker；前端有變動才重建 image

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-25 17:03:01 +08:00
a620906209 12bd854dce Merge pull request 'chore:調整DB對內port' (#6) from developer into master
Tests / PHP 8.2 (push) Failing after 1s
Details
Tests / PHP 8.3 (push) Failing after 1s
Details 
Reviewed-on: #6
 2026-05-25 08:50:41 +00:00
a620906209 d6fdfb07f0 chore:調整DB對內port
Tests / PHP 8.2 (pull_request) Failing after 1s
Details
Tests / PHP 8.3 (pull_request) Failing after 1s
Details
pull requests / uneditable (pull_request_target) Failing after 1s
Details
2026-05-25 16:49:12 +08:00
a620906209 250c50fc74 Merge pull request 'chore: 清除廢棄的 DB 表與 Model' (#5) from chore/db-cleanup into master
Tests / PHP 8.2 (push) Failing after 2s
Details
Tests / PHP 8.3 (push) Failing after 1s
Details 
Reviewed-on: #5
 2026-05-25 08:37:55 +00:00
a620906209 ff2484a48f chore: 清除廢棄的 DB 表與 Model
pull requests / uneditable (pull_request_target) Failing after 1s
Details
Tests / PHP 8.2 (pull_request) Has been cancelled
Details
Tests / PHP 8.3 (pull_request) Has been cancelled
Details 
- 新增 migration 刪除 coach_profiles、coach_member、plans、subscriptions 四張廢棄表
- 刪除對應的空殼 Model：CoachProfile、Plan、Subscription

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-25 16:34:04 +08:00
a620906209 856c342757 Merge pull request 'feat: 新增 DemoSeeder — 台灣潛水平台展示資料' (#4) from feat/demo-seeder into master
Tests / PHP 8.2 (push) Failing after 2s
Details
Tests / PHP 8.3 (push) Failing after 3s
Details 
Reviewed-on: #4
 2026-05-24 20:39:31 +00:00
a620906209 56dbca2e11 feat: 新增 DemoSeeder — 台灣潛水平台展示資料
Tests / PHP 8.2 (pull_request) Failing after 3s
Details
Tests / PHP 8.3 (pull_request) Failing after 2s
Details
pull requests / uneditable (pull_request_target) Failing after 1s
Details 
包含 4 教練（墾丁/綠島/小琉球/北海岸）、8 會員、12 課程、
24 時段、24 預約（已完成+待確認）、10 則評價與通知。
首次執行後自動跳過（冪等保護）。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-25 04:37:39 +08:00
a620906209 0814a3196f Merge pull request #2 from a620906209/feature/swagger-api-docs 
Feature/swagger api docs
 2026-05-25 02:35:37 +08:00
a620906209 0db38ee30d Merge pull request #1 from a620906209/docs/claude-md 
docs:新增 CLAUDE.MD 技術與開發規範文件
 2026-05-25 02:34:48 +08:00
a620906209 8c54808cd8 Merge pull request 'docs:新增 CLAUDE.MD 技術與開發規範文件' (#2) from docs/claude-md into master
Tests / PHP 8.2 (push) Failing after 2s
Details
Tests / PHP 8.3 (push) Failing after 2s
Details 
Reviewed-on: #2
 2026-05-24 18:27:41 +00:00