voson
|
cab234cfcb
|
feat(secrets-mcp): 增强 MCP 请求日志与 encryption_key 参数支持
Secrets MCP — Build & Release / 检查 / 构建 / 发版 (push) Successful in 3m28s
Secrets MCP — Build & Release / 部署 secrets-mcp (push) Successful in 1m36s
logging.rs:
- 每条 MCP POST 日志新增 auth_key（Bearer token 前12字符掩码）、
enc_key（X-Encryption-Key 前4后4字符指纹，如 146b…5516(64) 或 absent）、
user_id、tool_args（白名单非敏感参数摘要）字段
- 新增辅助函数 mask_bearer / mask_enc_key / extract_tool_args / summarize_value
tools.rs:
- extract_enc_key 成功路径增加 debug 级指纹日志（raw_len/trimmed_len/prefix/suffix）
- 新增 extract_enc_key_or_arg / require_user_and_key_or_arg：优先使用参数传入的密钥，
fallback 到 X-Encryption-Key 头，绕过 Cursor Chat MCP 头透传异常
- GetSecretInput / AddInput / UpdateInput / ExportInput / EnvMapInput 各增加可选
encryption_key 字段，对应工具实现改用 require_user_and_key_or_arg
|
2026-04-06 11:03:01 +08:00 |
|
voson
|
63cb3a8216
|
release(secrets-mcp): 0.5.6
Secrets MCP — Build & Release / 检查 / 构建 / 发版 (push) Successful in 5m8s
Secrets MCP — Build & Release / 部署 secrets-mcp (push) Successful in 1m36s
修复 OAuth 解绑时非法聚合 FOR UPDATE，Web OAuth 审计 IP 与 TRUST_PROXY 对齐并校验 IP，账号绑定写入 oauth_state 失败时回滚 bind 标记。回滚条目时恢复 folder/type，导入冲突检查在 DB 失败时传播错误，MCP delete/history 要求已登录用户，全局请求体 10MiB 限制。CI 部署支持 DEPLOY_KNOWN_HOSTS，默认 accept-new；文档与 deploy 示例补充连接池、限流、TRUST_PROXY。移除含明文凭据的 sync-test-to-prod 脚本。
|
2026-04-05 15:29:03 +08:00 |
|
voson
|
1e597559a2
|
feat(core): FK for user_id columns; MCP search requires user
Secrets MCP — Build & Release / 检查 / 构建 / 发版 (push) Successful in 3m10s
Secrets MCP — Build & Release / 部署 secrets-mcp (push) Successful in 5s
- Add fk_entries_user_id, fk_entries_history_user_id, fk_audit_log_user_id (ON DELETE SET NULL)
- Add scripts/cleanup-orphan-user-ids.sql for pre-deploy orphan user_id cleanup
- Remove deprecated SERVER_MASTER_KEY / per-user key wrap helpers from secrets-core
- secrets-mcp: require authenticated user for secrets_search; improve body-read failure response
- Bump secrets-mcp to 0.2.1
Made-with: Cursor
|
2026-03-22 15:40:02 +08:00 |
|
voson
|
0b57605103
|
feat(secrets-mcp): MCP 请求日志、探测 404 与资源元数据
Secrets MCP — Build & Release / 检查 / 构建 / 发版 (push) Successful in 3m10s
Secrets MCP — Build & Release / 部署 secrets-mcp (push) Successful in 5s
- 新增 logging 中间件：记录 client_ip、ua、JSON-RPC、tool 等
- tools 各入口/出口结构化日志
- 探测型 404（/.well-known、GET /mcp）降为 debug
- /.well-known/oauth-protected-resource 最小元数据
- secrets-mcp 0.1.11
Made-with: Cursor
|
2026-03-21 17:57:10 +08:00 |
|