mirror of
https://github.com/PlayEdu/PlayEdu
synced 2025-12-29 22:49:48 +08:00
!13 LDAP优化增强
* cursorrules * fixed: ldap同步的部门记录name记录错误 * 主题色一致 * changelog * admin接入ldap同步数据统计 * ldap同步数据记录接口合并 * fixed: 已同步被禁用用户的DN更新 * 已经同步的LDAP用户被禁止可以继续更新 * 优化代码 * 新增LDAP同步的详细记录 * 新增LDAP禁止用户的数据量统计 * 优化LDAP拉取数据的重复使用 * 优化LDAP同步 * ldap同步记录 * cursor rules
This commit is contained in:
33
.cursor/rules/06-security-model.mdc
Normal file
33
.cursor/rules/06-security-model.mdc
Normal file
@@ -0,0 +1,33 @@
|
||||
---
|
||||
description:
|
||||
globs:
|
||||
alwaysApply: false
|
||||
---
|
||||
# PlayEdu Security Model
|
||||
|
||||
This guide outlines the security model of the PlayEdu application.
|
||||
|
||||
## Authentication
|
||||
- [BackendAuthInterceptor](mdc:playedu-api/playedu-api/src/main/java/xyz/playedu/api/interceptor/BackendAuthInterceptor.java) - Backend authentication interceptor
|
||||
- [FrontendAuthInterceptor](mdc:playedu-api/playedu-api/src/main/java/xyz/playedu/api/interceptor/FrontendAuthInterceptor.java) - Frontend authentication interceptor
|
||||
- JWT-based authentication for both frontend and backend users
|
||||
|
||||
## Authorization
|
||||
- Role-based access control for backend users
|
||||
- Department-based content access for frontend users
|
||||
- Course permission enforcement
|
||||
|
||||
## Security Configuration
|
||||
- CORS configuration to prevent cross-site request forgery
|
||||
- Password encryption using BCrypt
|
||||
- Input validation and sanitization
|
||||
|
||||
## Resource Security
|
||||
- Private video storage and delivery
|
||||
- URL-based token authentication for media access
|
||||
- Anti-leech protection for media files
|
||||
|
||||
## Sensitive Data Protection
|
||||
- PII (Personally Identifiable Information) protection
|
||||
- Logging sanitization for sensitive data
|
||||
- Database encryption for critical fields
|
||||
Reference in New Issue
Block a user