fix: Wave 0 独立 AI 评审闭环(有条件通过→闭环, 273 绿)——P2-1 python-jose>=3.5.0(防 CVE-2024-33663/33664) P2-2 audit 降级+OPTIONS 测试 P2-3 JWT 通道 chat 3 例 P2-4 debug 兜底双闸门(dev+无 RS256 公钥) P2-5 留痕失败降级显式化(401/403 拒绝语义不漂移, _safe_unauth_audit 保护 repo 构造); P3 顺手: 401 归 platform/值域外 400 补留痕/Bearer 大小写不敏感/jti 加 uuid/CLI permissions+exp 上限/dev 默认密钥 warning/LLM 单例加锁/chat 主角色优先序+message strip+guard 日志脱敏/必填 claims 参数化+none 算法固化; P3 登记项(会话枚举/seq_no 锁/trace_id 口径/文档同步)归 M4 文档
This commit is contained in:
+1
-1
@@ -17,7 +17,7 @@ langchain-openai>=1.6.0
|
||||
httpx>=0.28.0
|
||||
|
||||
# Auth (dev / gateway)
|
||||
python-jose[cryptography]>=3.3.0
|
||||
python-jose[cryptography]>=3.5.0
|
||||
|
||||
# Utils
|
||||
python-multipart>=0.0.18
|
||||
|
||||
Reference in New Issue
Block a user