xcbyy 87cb6a6374 fix(miniapp): 提现/财务接口不再用 1001 演示身份，修复 403 ...

- getUserProfile/getUserWithdrawals/getUserFinanceRecords 去掉 userId=1001 默认值，改由 normalizeUserId 解析登录身份

- withdraw.vue / withdraw-records.vue / workspace.vue 调用改为 normalizeUserId()，不再硬编码 1001

- normalizeUserId 将 1001 视为演示占位符：登录态下传 0 由 token 识别，未登录才兜底 1001

- request.js 遇 403 身份校验失败时清理错配登录态并提示重新登录（其它 403 权限拒绝不受影响）

- 登录态闸门补齐用例（108 套件/714 用例全绿）

2026-10-21 11:38:26 +08:00

..

activity-create-validation.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

activity-detail-privacy.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

activity-identity.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

activity-join-payment.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

activity-list-content.spec.ts

feat: 完善对象存储上传与真实条码二维码引擎，彻底剥离保底Mock数据

2026-10-09 17:18:14 +08:00

activity.spec.ts

feat: 完善对象存储上传与真实条码二维码引擎，彻底剥离保底Mock数据

2026-10-09 17:18:14 +08:00

adjust-price-integrity.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

admin-credential-hardening.spec.ts

security: 危险兜底默认关闭(secure by default)——修复 NODE_ENV 未设导致的身份伪造/沙箱支付/隐私泄露

2026-10-20 16:35:04 +08:00

admin-demo-data-cleanup.spec.ts

feat(admin): 方案A—消息铃铛接真实待办聚合 + 清理空壳接口与空卡片

2026-10-20 15:52:04 +08:00

admin-features.spec.ts

feat: security hardening, wechat pay v3 platform cert integration, companion certification revocation, and audit closed-loop

2026-10-16 17:38:17 +08:00

admin-observability.spec.ts

feat: security hardening, wechat pay v3 platform cert integration, companion certification revocation, and audit closed-loop

2026-10-16 17:38:17 +08:00

admin-todo-bell.spec.ts

feat(admin): 方案A—消息铃铛接真实待办聚合 + 清理空壳接口与空卡片

2026-10-20 15:52:04 +08:00

admin-token-revocation.spec.ts

security: 后台登录态可吊销(令牌版本号) + 清理未使用的 prisma 依赖(依赖漏洞 46→0)

2026-10-19 14:08:58 +08:00

admin-transfer-config.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

admin-write-authz.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

auth-role.spec.ts

feat(core): 按照严格TDD模式完成活动项目(4位核销码)、订单状态机、财务分销与双身份切换核心领域服务及30项单元测试

2026-09-16 15:30:23 +08:00

auth-secret-guard.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

backfill-ownership.spec.ts

feat(data): 新增历史数据归属订正脚本（默认 dry-run，--apply 写库）

2026-10-19 08:58:24 +08:00

banner-manage.spec.ts

feat(banner): support dynamic banner management in admin and sync with miniprogram

2026-10-10 08:51:34 +08:00

barcode-qrcode.spec.ts

feat: 完善对象存储上传与真实条码二维码引擎，彻底剥离保底Mock数据

2026-10-09 17:18:14 +08:00

buyer-cancel-order.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

claim-status-gate.spec.ts

fix(order): 抢单收紧为仅「待接单」可抢，抢单池同步过滤

2026-10-19 08:54:28 +08:00

client-features.spec.ts

feat: security hardening, wechat pay v3 platform cert integration, companion certification revocation, and audit closed-loop

2026-10-16 17:38:17 +08:00

code2session-hardening.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

companion-apply-ownership.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

companion-category.spec.ts

feat(companion): 全面确立以陪吃·陪喝·陪唱为主的核心架构，重构首屏推荐阵容与歌声试听

2026-09-16 20:16:56 +08:00

companion-detail-privacy.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

companion-order.spec.ts

feat(order): complete 7.1 order full lifecycle state transitions, 15m/30m/48h auto-timeouts, expert reject/apply-complete, and partial refund arbitration

2026-10-14 15:52:56 +08:00

companion-profile-honesty.spec.ts

fix(companion): 去除合成虚拟大神的假评分/价格/服务（改为诚实档案）

2026-10-19 09:19:15 +08:00

companions-directory-privacy.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

content-check-auth.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

content-security.spec.ts

feat(coupon): 优惠券中心（领取）+ 我的券 + 下单核销/回退

2026-10-19 15:05:56 +08:00

cors-security-headers.spec.ts

security: CORS 收敛为白名单 + 基础安全响应头 + 隐藏技术栈

2026-10-19 09:31:44 +08:00

dashboard-reality.spec.ts

feat(ui): 余下两页接入主题 + 清理后台模板 demo（1+2）

2026-10-20 15:01:50 +08:00

deploy-selfcheck.spec.ts

chore(ops): /api/health 增加 build 与 features 能力清单，便于部署自检

2026-10-19 15:16:32 +08:00

detail-bottom-bar.spec.ts

fix(ui): 优化大神详情页底部操作栏布局（不再挤压换行）

2026-10-19 16:00:37 +08:00

distribution-no-fake.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

expert-service-crud.spec.ts

feat(expert): 大神服务包自助维护（新增/编辑/删除/上下架）+ 去掉演示服务包

2026-10-19 14:46:05 +08:00

expert-stats-scope.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

faq-config-repair.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

favorites-status-code.spec.ts

fix(api): 收藏状态接口不再把 401 吞成 500

2026-10-21 10:52:13 +08:00

finance.spec.ts

feat(core): 按照严格TDD模式完成活动项目(4位核销码)、订单状态机、财务分销与双身份切换核心领域服务及30项单元测试

2026-09-16 15:30:23 +08:00

funds-identity.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

help-faq-page.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

identity-binding-hardening.spec.ts

feat: security hardening, wechat pay v3 platform cert integration, companion certification revocation, and audit closed-loop

2026-10-16 17:38:17 +08:00

identity-hardening.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

list-pagination-index.spec.ts

perf(db): 高频查询补索引 + 大列表加合理上限（避免全表下发）

2026-10-19 09:28:02 +08:00

login-hardening.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

login-identity-consistency.spec.ts

fix(miniapp): 提现/财务接口不再用 1001 演示身份，修复 403

2026-10-21 11:38:26 +08:00

marketing.spec.ts

feat(marketing): implement recharge tiers and coupon management across admin, server, and uniapp

2026-10-10 09:22:46 +08:00

mini-program-expert-grab.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

mini-program-identity-and-referral.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

mini-program-no-fake-success.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

miniapp-imports.spec.ts

fix(miniapp): 导出 normalizeUserId 修复入驻页编译失败

2026-10-21 11:32:03 +08:00

nav-category.spec.ts

feat(nav-category): support dynamic home grid categories in admin and uniapp

2026-10-10 09:08:18 +08:00

no-emoji.spec.ts

fix(theme): 修复浅色主题下大神昵称白底白字及标签对比度过低问题，消除黑底黑字与样式失效缺陷

2026-09-16 20:39:02 +08:00

notification-center.spec.ts

feat(notify): 新增站内消息通知中心（订阅消息兜底）+ 清理后台伪造数据

2026-10-19 14:31:11 +08:00

null-service-guard.spec.ts

fix(order): 修复大神无服务包时下单页崩溃（Cannot read properties of null reading 'title'）

2026-10-19 15:51:23 +08:00

order-activity-integrity.spec.ts

fix(order): 抢单收紧为仅「待接单」可抢，抢单池同步过滤

2026-10-19 08:54:28 +08:00

order-amount-integrity.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

order-lifecycle-hardening.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

order-progress-gates.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

order-state-machine.spec.ts

feat(core): 按照严格TDD模式完成活动项目(4位核销码)、订单状态机、财务分销与双身份切换核心领域服务及30项单元测试

2026-09-16 15:30:23 +08:00

order-timeout-scheduler.spec.ts

feat(order): 订单超时自动流转改为后台定时任务

2026-10-19 09:22:52 +08:00

orders-pool-filter.spec.ts

fix(order): 抢单收紧为仅「待接单」可抢，抢单池同步过滤

2026-10-19 08:54:28 +08:00

ownership-hardening.spec.ts

feat: security hardening, wechat pay v3 platform cert integration, companion certification revocation, and audit closed-loop

2026-10-16 17:38:17 +08:00

payment-amount-integrity.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

phone-login-identity.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

platform-config.spec.ts

feat(auth): compact agreement layout to single-line and support flexible backend configuration for user agreement and privacy policy

2026-10-12 09:20:40 +08:00

protocol-page.spec.ts

feat(mini): 平台规范与服务协议页面化（页内切换，替代弹窗）

2026-10-17 18:04:33 +08:00

public-config-privacy.spec.ts

security: 修复公开配置接口泄露密钥（map_location_config/security_words）

2026-10-19 13:39:04 +08:00

ratelimit-5xx.spec.ts

security: 新增全局限流 + 5xx 错误脱敏 + 兜底错误处理

2026-10-19 13:50:51 +08:00

rbac-permission.spec.ts

feat: security hardening, wechat pay v3 platform cert integration, companion certification revocation, and audit closed-loop

2026-10-16 17:38:17 +08:00

read-access-contract.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

read-scope.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

recharge-bonus-authority.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

request-and-checkin-lookup.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

review-comment.spec.ts

feat: 完善对象存储上传与真实条码二维码引擎，彻底剥离保底Mock数据

2026-10-09 17:18:14 +08:00

review-post-identity.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

runtime-mode-selfcheck.spec.ts

security: /api/health 暴露运行模式与沙箱支付开关（便于发现生产跑成 development）

2026-10-20 16:04:09 +08:00

safety-places.spec.ts

feat(safety): support full CRUD for approved commercial places and dynamic sync to uniapp

2026-10-10 09:52:42 +08:00

search-companions.spec.ts

feat(search): 大神关键词搜索走服务端（昵称/品类/段位/标签）

2026-10-19 15:10:11 +08:00

secure-default-auth.spec.ts

security: 危险兜底默认关闭(secure by default)——修复 NODE_ENV 未设导致的身份伪造/沙箱支付/隐私泄露

2026-10-20 16:35:04 +08:00

security-hardening.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

settings-file-location.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

settlement-credit-user.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

settlement-gate.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

skeleton.spec.ts

feat: 完善对象存储上传与真实条码二维码引擎，彻底剥离保底Mock数据

2026-10-09 17:18:14 +08:00

startup-selfcheck.spec.ts

security: 危险兜底默认关闭(secure by default)——修复 NODE_ENV 未设导致的身份伪造/沙箱支付/隐私泄露

2026-10-20 16:35:04 +08:00

subscribe-authorization.spec.ts

feat(mini): 下单/提现/报名前补订阅消息授权（提升微信服务通知到达率）

2026-10-19 09:01:36 +08:00

subscribe-message.spec.ts

fix(subscribe): 订阅消息未下发原因可见 + 小程序真实授权

2026-10-19 10:02:57 +08:00

subscription-message-diagnose.spec.ts

fix(subscribe): 修复小程序授权"未获得提醒授权"——避免授权弹窗与公告弹窗重叠

2026-10-19 11:36:12 +08:00

theme-and-admin-cleanup.spec.ts

feat(ui): 余下两页接入主题 + 清理后台模板 demo（1+2）

2026-10-20 15:01:50 +08:00

theme-consistency.spec.ts

fix(ui): 下单页背景/卡片/文字跟随全局主题（修复暖色主题下仍是深色底）

2026-10-20 14:00:27 +08:00

theme.spec.ts

feat: 完善对象存储上传与真实条码二维码引擎，彻底剥离保底Mock数据

2026-10-09 17:18:14 +08:00

upload-auth.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

upload.spec.ts

security: 新增全局限流 + 5xx 错误脱敏 + 兜底错误处理

2026-10-19 13:50:51 +08:00

user-coupon.spec.ts

feat(coupon): 优惠券中心（领取）+ 我的券 + 下单核销/回退

2026-10-19 15:05:56 +08:00

user-detail-scope.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

user-read-privacy.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

verify-pool-hardening.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

voice-intro-consistency.spec.ts

feat(voice): 录音时实时读秒，60 秒自动停止

2026-10-21 11:20:22 +08:00

voice-intro.spec.ts

feat(voice): 大神语音介绍真实落地（录制/上传/试听）

2026-10-20 18:25:11 +08:00

wallet-records-scope.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00

wechat-appid-config-hardening.spec.ts

fix(config): 占位凭证清理改为一次性(标记位保护)，避免误清管理员填写的真实 AppID

2026-10-19 11:00:23 +08:00

wechat-pay-v3.spec.ts

feat: security hardening, wechat pay v3 platform cert integration, companion certification revocation, and audit closed-loop

2026-10-16 17:38:17 +08:00

wechat-refund.spec.ts

feat(pay): 接入微信支付V3原路退款（按支付渠道分流 + 幂等 + 退款回调）

2026-10-19 08:47:08 +08:00

withdrawal-transfer.spec.ts

feat(security): 三端闭环加固 + 微信提现打款/订阅消息落地

2026-10-17 18:00:09 +08:00