Guoguo 731122064b fix: 5 critical payment issues from code review ...

1. Move notify route before authMiddleware (WeChat callback has no JWT)
2. Add await to verifyNotifySignature call (was fire-and-forget)
3. Remove dangerous verify fallback — all signature failures now throw
4. Payment sync polls 3x before giving up, never redirects to success
   page unless confirmed paid
5. Production guard enforces all WX_MCH_* env vars on startup

2026-05-18 03:16:44 -07:00

..

auto-scan

feat: production readiness — feature gaps + config hardening

2026-05-15 09:07:41 -07:00

bind-success

fix: improve UX and fix admin console display issues

2026-04-28 18:32:26 -07:00

ble-connect

fix: BLE connection leak on page unload and retry timer cleanup

2026-05-12 06:28:36 -07:00

contact

fix: subscription extend instead of overwrite, improve placeholder pages

2026-04-29 08:35:58 -07:00

help

fix: subscription extend instead of overwrite, improve placeholder pages

2026-04-29 08:35:58 -07:00

history

feat: production readiness — feature gaps + config hardening

2026-05-15 09:07:41 -07:00

index

feat: production readiness — feature gaps + config hardening

2026-05-15 09:07:41 -07:00

login

chore: remove debug code and restore phone authorization as required

2026-05-07 05:54:37 -07:00

profile

feat: production readiness — feature gaps + config hardening

2026-05-15 09:07:41 -07:00

register

fix: avatar picker uses chooseMedia, COS domain to tx.vsai.net.cn

2026-05-07 06:23:42 -07:00

scan

fix: improve UX and fix admin console display issues

2026-04-28 18:32:26 -07:00

subscribe-plans

fix: 5 critical payment issues from code review

2026-05-18 03:16:44 -07:00

subscribe-prompt

fix: resolve subscription UX issues and add placeholder pages

2026-04-29 07:00:36 -07:00

subscribe-success

fix: address critical security and data integrity issues from cross-audit

2026-05-05 02:33:25 -07:00

treating

fix: audit fixes — treatment sync, avatar upload, code consistency

2026-05-07 06:36:28 -07:00

treatment-done

fix: audit fixes — treatment sync, avatar upload, code consistency

2026-05-07 06:36:28 -07:00

treatment-setup

fix: resolve critical audit issues across all modules

2026-04-28 18:46:03 -07:00

wear-check

fix: wear-check reconnect scans and connects directly

2026-05-12 06:37:51 -07:00