From 924c3033a9a97f6698b0f59fa55dfaf43bf23e84 Mon Sep 17 00:00:00 2001 From: weichen Date: Wed, 30 Sep 2026 11:14:49 +0000 Subject: [PATCH] Record the admin-issued accounts decision and R2 delivery Why: the user replaced the stage-2 email self-registration sketch with admin-issued accounts (2026-09-30): no self registration, admin sets initial passwords, first login after creation or reset forces a change. Evidence: R2 landed on feature/auth-admin-accounts (migration v10, auth/session APIs, CLI user subcommands, login page + forced change gate + admin user management); store/e2e tests and a full headless journey on the real binary are green (see that task's PR). Impact: proposal status line only; section 5.1 sketch superseded. --- docs/proposals/2026-09-30-ui-redesign-and-auth.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/proposals/2026-09-30-ui-redesign-and-auth.md b/docs/proposals/2026-09-30-ui-redesign-and-auth.md index 77ecc68..39ed80e 100644 --- a/docs/proposals/2026-09-30-ui-redesign-and-auth.md +++ b/docs/proposals/2026-09-30-ui-redesign-and-auth.md @@ -1,6 +1,6 @@ # 界面重构与多用户认证 —— 设计提案（2026-09-30） -状态：**accepted（方向）**——2026-09-30 用户裁定采用**方案 A 任务中心**；认证阶段 2 范围在 R2 启动时再确认。R1（左栏重构）已实施：Dev 仓 `feature/task-sidebar-r1`（Core 契约 +pinned/archived、Backend 迁移 v8 与 `GET /api/conversations`+`/api/me`、Frontend TaskSidebar 重构；验证证据见该任务 PR）。owner：weichen。 +状态：**accepted（方向 + R2 范围）**——2026-09-30 用户裁定采用**方案 A 任务中心**；同日裁定认证阶段 2 改为**管理员发放制**：无自助注册，账号仅管理员（或 CLI 引导）创建并设定初始密码，创建后与重置后的首次登录均强制改密（§5.1 邮箱+自助注册方案作废）。R1 已实施：Dev 仓 `feature/task-sidebar-r1`（Core +pinned/archived、Backend 迁移 v9 与任务列表 API、Frontend TaskSidebar）。R2 已实施：Dev 仓 `feature/auth-admin-accounts`（Backend 迁移 v10 auth_accounts：users 密码/must_change/is_admin + sessions 表；`/api/auth/login|logout|password`、`/api/admin/users*`；argon2id；登录失败退避；中间件接受 Bearer 密钥或会话 cookie 且豁免静态与登录入口；CLI `user create|reset-password|list`；Frontend 登录页双 tab、强制改密门、用户管理弹层。验证：store/e2e 测试 + 无头全流程走查）。owner：weichen。 前置：[界面交互底座](2026-09-30-ui-inbox-command-workspace.md)（D25–D33）、[双档存储、多租户与规模化](2026-09-30-dual-tier-storage-and-multitenancy.md)（D17–D24）。 配套 demo：`ui-redesign-demos/`（index.html 为入口，本地浏览器直接打开）。