lkddi
0ea6ea206c
安全:服务端校验钓鱼等待时间,防止前端篡改 wait_time
cast() 将 {token, cast_at, wait_time} 以 JSON 存入 Redis;
reel() 在验 token 后额外校验:
elapsed = now() - cast_at >= wait_time - 1(含1秒容差)
未满足则返回422「鱼还没上钩,别急!」
即使用户通过 DevTools 将 wait_time 改为 0,
服务端仍按实际 wait_time 拒绝过早的收竿请求。
2026-03-01 16:33:32 +08:00
..
2026-03-01 15:15:03 +08:00
2026-02-27 10:02:33 +08:00
2026-03-01 12:17:16 +08:00
2026-03-01 14:00:38 +08:00
2026-02-28 23:44:38 +08:00
2026-02-28 23:44:38 +08:00
2026-02-27 10:54:41 +08:00
2026-03-01 00:48:51 +08:00
2026-02-26 12:02:00 +08:00
2026-03-01 10:51:48 +08:00
2026-02-28 23:44:38 +08:00
2026-03-01 16:33:32 +08:00
2026-03-01 13:38:30 +08:00
2026-02-27 02:02:38 +08:00
2026-02-28 13:50:51 +08:00
2026-03-01 15:31:07 +08:00
2026-02-26 14:57:24 +08:00
2026-03-01 16:19:45 +08:00
2026-03-01 16:04:32 +08:00
2026-03-01 15:09:33 +08:00