• feat(log): 前后端共用 request_id 与四时间点时钟校准

    hoteas released this 2026-07-27 07:46:38 +08:00 | 3 commits to master since this release

    • X-Request-Id 请求头带合法 UUID 则沿用为 request_id(严格格式白名单防注入),否则自生成 12 位 hex
    • 响应头新增 X-Server-Received-Ms / X-Server-Sent-Ms 供前端时钟校准
    • CORS Allow-Headers 增加 X-Request-Id,Expose-Headers 显式列出(credentials 下不认 *)

    Co-authored-by: Cursor cursoragent@cursor.com

    Downloads