- 删除 SimCFApi / WMAILHUB_SIM_CF / isRealOAuth / POST /api/oauth/cloudflare/sim/approve - 删除前端 OAuthSim 模拟授权页与 /oauth/sim/authorize 路由;账号页「添加账号」整页跳 Cloudflare - 迁移 0005 删除 cf_sim_resources 表 - 未配置 CF_OAUTH_CLIENT_ID/SECRET 时 start/callback 一律 503(不再降级出假账号假资源) - 修 OAuth 回调端点:跨站重定向不携带 SameSite=Strict 会话 cookie,改为由一次性 state 承担 CSRF 防护 - 测试改用 tests/cf-mock.ts 在 fetch 层拦截 Cloudflare API,断言真实 HTTP 调用(72/72 通过) - 本地 dev 无账号时只拉起 Console 并提示人工授权,不再自动造账号
47 lines
1.5 KiB
JSON
47 lines
1.5 KiB
JSON
// WmailHub Console —— Cloudflare Workers 部署配置(生产)
|
|
// 本地开发不需要 wrangler:直接 `bun run dev`。首次部署前:
|
|
// 1. `bunx wrangler d1 create wmailhub` -> 填 database_id(已完成)
|
|
// 2. `bunx wrangler r2 bucket create wmailhub` (已完成)
|
|
// 3. `bunx wrangler d1 execute wmailhub --remote --file=./migrations/0001_init.sql` 起逐个执行 0001~0004
|
|
// 4. `bunx wrangler secret put SESSION_SECRET` (>=32 位随机串)
|
|
// 5. 配置 CF_OAUTH_CLIENT_ID/SECRET/REDIRECT_URI vars(真实 OAuth 硬前提,缺失时接入接口返回 503)
|
|
{
|
|
"$schema": "../node_modules/wrangler/config-schema.json",
|
|
"name": "wmailhub-console",
|
|
"main": "src/worker.ts",
|
|
"compatibility_date": "2026-09-01",
|
|
"assets": {
|
|
"directory": "./public",
|
|
"binding": "ASSETS",
|
|
"not_found_handling": "single-page-application"
|
|
},
|
|
"routes": [
|
|
// 自定义域名:wmailhub.adx9.com(CF 自动创建 DNS 记录并签发证书)
|
|
{
|
|
"pattern": "wmailhub.adx9.com",
|
|
"custom_domain": true
|
|
}
|
|
],
|
|
"d1_databases": [
|
|
{
|
|
"binding": "DB",
|
|
"database_name": "wmailhub",
|
|
"database_id": "cfc47e65-c71e-470f-96db-5bc23e3e31a4"
|
|
}
|
|
],
|
|
"r2_buckets": [
|
|
{
|
|
"binding": "R2",
|
|
"bucket_name": "wmailhub"
|
|
}
|
|
],
|
|
"triggers": {
|
|
// TTL 清理每 15 分钟(docs/09 建议);Webhook 重试每 1 分钟
|
|
"crons": ["*/1 * * * *"]
|
|
},
|
|
"vars": {
|
|
// Console 对外地址;OAuth redirect 需在 Cloudflare Dashboard 登记同一域名
|
|
"PUBLIC_BASE_URL": "https://wmailhub.adx9.com"
|
|
}
|
|
}
|