20 lines
640 B
Markdown
20 lines
640 B
Markdown
|
# DV-0001：认证与会话 – 验证（Verification）
|
|||
|
|
|
|||
|
|
## 自动化测试
|
|||
|
|
- 结构性证据为主（认证逻辑无独立单测文件）。
|
|||
|
|
|
|||
|
|
## 手工验收清单
|
|||
|
|
- [x] 登录返回 JWT；携带后可访问受保护接口
|
|||
|
|
- [x] 退出后同 token 返回 401
|
|||
|
|
- [x] 禁用用户登录后请求被拒
|
|||
|
|
- [x] 修改密码后旧密码失效
|
|||
|
|
- [ ] 敏感日志脱敏（TS-12 未完成）
|
|||
|
|
|
|||
|
|
## 结构性证据
|
|||
|
|
| VER | 证据 | 证明 |
|
|||
|
|
| --- | --- | --- |
|
|||
|
|
| VER-10 | backend/app/models/user.py | FR-1 数据层 |
|
|||
|
|
| VER-11 | backend/app/api/v1/auth.py | FR-1 API 层 |
|
|||
|
|
| VER-15 | backend/app/core/security.py + deps.py | NFR-1/2；揭示 NFR-9 |
|
|||
|
|
|