37 lines
1.4 KiB
Markdown
37 lines
1.4 KiB
Markdown
|
# V1.2 Task 2 Completion Report
|
||
|
|
|
||
|
|
## Status
|
||
|
|
|
||
|
|
Completed
|
||
|
|
|
||
|
|
## Implemented
|
||
|
|
|
||
|
|
- Added `POST /api/v1/auth/register` for self-registration applications.
|
||
|
|
- Added phone code send/verify endpoints with hashed Redis code storage, five-attempt limit, one-minute send cooldown, five-minute expiry, and one-time verification transaction.
|
||
|
|
- Added `SmsVerificationProvider` abstraction.
|
||
|
|
- Test/demo profiles use an in-memory mock provider; non-test profiles fail closed when SMS is not configured.
|
||
|
|
- Replaced direct phone binding with a verified transaction requirement.
|
||
|
|
- Added V065 registration application migration and H2 schema.
|
||
|
|
- Added miniapp registration page and login entry.
|
||
|
|
- Duplicate phone registration is rejected without overwriting the existing user.
|
||
|
|
|
||
|
|
## Automated Tests
|
||
|
|
|
||
|
|
```text
|
||
|
|
mvn -B -f backend/pom.xml test "-Dtest=PhoneVerificationGuardTest,UserRegistrationServiceTest,V12MigrationContractTest,MigrationValidationTest,EntityMigrationParityTest"
|
||
|
|
25 tests passed, 0 failures, 0 errors
|
||
|
|
|
||
|
|
npm --prefix miniapp run type-check
|
||
|
|
passed
|
||
|
|
```
|
||
|
|
|
||
|
|
## Not Verified
|
||
|
|
|
||
|
|
- Real SMS provider integration is not connected.
|
||
|
|
- Clean PostgreSQL V001-V065 migration and live Redis behavior were not run in this step.
|
||
|
|
- Historical WeChat account association UI and ambiguous-account manual queue remain deferred to the account lifecycle/onboarding stage.
|
||
|
|
|
||
|
|
## Next Phase
|
||
|
|
|
||
|
|
Task 3: operator-created profiles, CSV preview/commit, review linkage, and account issuance.
|