2 Commits

Author	SHA1	Message	Date
long-agent	8665c97d0d	fix(security): X-Forwarded-For IP 伪造防护 ... - isTrustedProxy: 空可信代理列表时默认不信任（安全优先） - realIP: 修正 XFF 遍历逻辑，从右到左跳过可信代理，返回第一个不可信的客户端 IP - GetClientIP: 优先读取 IPFilterMiddleware 已验证的 client_ip，避免直接信任转发头	2026-05-08 10:35:20 +08:00
long-agent	dcc1f186f8	feat: backend core - auth, user, role, permission, device, webhook, monitoring, cache, repository, service, middleware, API handlers	2026-04-02 11:19:50 +08:00