mirror of
https://github.com/iflytek/skillhub.git
synced 2026-09-24 00:55:35 +00:00
75c7f9a880
Adds the DingTalk credentials to every path that actually delivers configuration: compose.release.yml (which has no env_file, so variables must be listed explicitly), the Helm secret template and values, the k8s deployment and its secret example. validate-release-config.sh gains DingTalk in its provider loop, so a half-configured pair is rejected the same way. Documents the three-stage strategy contract in the authentication design: a table mapping each deviation -- authorize parameters, token exchange, userinfo loading -- to its interface and current implementations, plus the rule that a provider must never make account decisions itself. Deployment notes and both FAQs now cover DingTalk, including the shared trap with Feishu: their emails are admin-recorded and never confirmed, so emailVerified is always false and an EMAIL_DOMAIN access policy would reject every login through either provider. Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| build-builtin-skills-test.sh | ||
| dev-process-test.sh | ||
| dev-web-host-test.sh | ||
| k8s-postgres-storage-test.sh | ||
| nginx-forwarded-proto-test.sh | ||
| publish-cli-test.sh | ||
| runtime-secret-test.sh | ||
| scanner-llm-base-url-test.sh | ||
| server-image-compat-test.sh | ||
| smoke-test-admin-mode-test.sh | ||
| test_zero_slop.py | ||
| validate-release-config-test.sh | ||
| web-base-path-nginx-smoke-test.sh | ||
| web-base-path-routing-test.sh | ||
| workflow-security-test.sh | ||