zhizhi/server/nginx
copilot-swe-agent[bot] 1492ba0009
fix: remove clickable links from emails, add public auth page with verification code input
- email-hub.js: Remove all <a href> links from bandwidth-auth and V3 subscription emails
  - Emails now contain only verification code + plain text URL guidance
  - Guide users to manually type guanghulab.online/auth in Chrome browser
  - Remove authPageUrl parameter from sendBandwidthAuthEmail()
  - Remove bwAuthUrl from generateSubscriptionV3Email()
  - Simplify CLI bandwidth-auth and batch sendBandwidthAuthAllEmail()

- subscription-server-v3.js: Add public bandwidth-auth-open endpoint
  - GET /bandwidth-auth-open: Public auth page with email + code input + consent checkbox + "我同意授权" button
  - POST /bandwidth-auth-open: Validate email + code, register contributor, save operation snapshot
  - Add saveAuthSnapshot() function for user operation audit trail
  - Update existing token-based auth page button text to "我同意授权"
  - Add snapshot saving to existing token-based auth POST handler
  - Remove authPageUrl from /bandwidth-send-code/{token} endpoint

- zhuyuan-sovereign.conf: Add /auth short path proxy in preview domain
  - guanghulab.online/auth → V3 subscription service /bandwidth-auth-open
  - Users type short URL instead of full API path

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/1de8212f-1deb-462f-8d19-03f82a7ec9fe

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
2026-04-06 10:57:22 +00:00
..
zhuyuan-sovereign.conf fix: remove clickable links from emails, add public auth page with verification code input 2026-04-06 10:57:22 +00:00