From 363c603bbba8afc39d7f5bea9bc18a608e47382c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 6 Jul 2026 02:09:01 +0000 Subject: [PATCH 1/7] chore(deps): bump ch.qos.logback:logback-core Bumps the maven group with 1 update in the / directory: [ch.qos.logback:logback-core](https://github.com/qos-ch/logback). Updates `ch.qos.logback:logback-core` from 1.5.32 to 1.5.33 - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](https://github.com/qos-ch/logback/compare/v_1.5.32...v_1.5.33) --- updated-dependencies: - dependency-name: ch.qos.logback:logback-core dependency-version: 1.5.33 dependency-type: direct:production dependency-group: maven ... Signed-off-by: dependabot[bot] --- core-database/pom.xml | 2 +- pom.xml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/core-database/pom.xml b/core-database/pom.xml index 0ae8493..c895694 100644 --- a/core-database/pom.xml +++ b/core-database/pom.xml @@ -65,7 +65,7 @@ org.postgresql postgresql - 42.7.11 + 42.7.12 diff --git a/pom.xml b/pom.xml index e41a5fd..e1ddccf 100644 --- a/pom.xml +++ b/pom.xml @@ -35,7 +35,7 @@ 10.2.5 2.18.6 - 1.5.32 + 1.5.33 4.13.2 From 8d419d32654717716f9c953ef32266dc68b5bc60 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 21 Jul 2026 07:29:38 +0000 Subject: [PATCH 2/7] build(deps): bump axios Bumps the npm_and_yarn group with 1 update in the /web-front directory: [axios](https://github.com/axios/axios). Updates `axios` from 1.16.1 to 1.18.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](https://github.com/axios/axios/compare/v1.16.1...v1.18.0) --- updated-dependencies: - dependency-name: axios dependency-version: 1.18.0 dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] --- web-front/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/web-front/package.json b/web-front/package.json index c12b74a..6ce7199 100644 --- a/web-front/package.json +++ b/web-front/package.json @@ -13,7 +13,7 @@ "@element-plus/icons-vue": "^2.3.1", "@monaco-editor/loader": "^1.4.0", "@vueuse/core": "^11.2.0", - "axios": "1.16.1", + "axios": "1.18.0", "clipboard": "^2.0.11", "core-js": "^3.8.3", "crypto-js": "^4.2.0", From b9ff408bddf6fe896aec224ea9e1da457783795d Mon Sep 17 00:00:00 2001 From: Tra Date: Fri, 24 Jul 2026 17:53:56 +0800 Subject: [PATCH 3/7] fix: UC subdirectory listing fails due to missing stoken parameter MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit When the frontend requests subdirectory contents for UC drive shares, the stoken query parameter is mishandled in two places, breaking directory browsing: 1. URLParamUtil.handleTruncatedUrl() does not exclude stoken from the URL construction loop. As a result, the stoken value gets appended to the share URL (e.g. https://drive.uc.cn/s/xxx?stoken=yyy). The extra query string breaks the UC URL regex match in PanDomainTemplate, causing the parser to fall back to the default IPanTool.parseFileList() which returns "Not implemented yet". 2. ParserApi.getFileList() does not accept stoken as a method parameter and does not forward it to ShareLinkInfo.otherParam. Even when the stoken is present in the request URL, UcTool.parseFileList() cannot find it and must re-authenticate against the UC API — which fails without proper auth cookies. The fix: - URLParamUtil: add stoken to the param exclusion list - ParserApi: add String stoken parameter and put it into otherParam Both first-level and nested directory listing work correctly after this fix. --- .../src/main/java/cn/qaiu/lz/common/util/URLParamUtil.java | 2 +- .../src/main/java/cn/qaiu/lz/web/controller/ParserApi.java | 5 ++++- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/web-service/src/main/java/cn/qaiu/lz/common/util/URLParamUtil.java b/web-service/src/main/java/cn/qaiu/lz/common/util/URLParamUtil.java index a640eb3..1d8a997 100644 --- a/web-service/src/main/java/cn/qaiu/lz/common/util/URLParamUtil.java +++ b/web-service/src/main/java/cn/qaiu/lz/common/util/URLParamUtil.java @@ -70,7 +70,7 @@ public class URLParamUtil { for (String paramName : params.names()) { // 忽略 "url", "pwd", "dirId", "uuid", "auth" 参数（这些参数单独处理，不应拼接到分享URL中） if (!paramName.equals("url") && !paramName.equals("pwd") && !paramName.equals("dirId") - && !paramName.equals("uuid") && !paramName.equals("auth")) { + && !paramName.equals("uuid") && !paramName.equals("auth") && !paramName.equals("stoken")) { if (firstParam) { urlBuilder.append("?"); firstParam = false; diff --git a/web-service/src/main/java/cn/qaiu/lz/web/controller/ParserApi.java b/web-service/src/main/java/cn/qaiu/lz/web/controller/ParserApi.java index 6e16346..9e71e41 100644 --- a/web-service/src/main/java/cn/qaiu/lz/web/controller/ParserApi.java +++ b/web-service/src/main/java/cn/qaiu/lz/web/controller/ParserApi.java @@ -161,7 +161,7 @@ public class ParserApi { @RouteMapping("/getFileList") public Future> getFileList(HttpServerRequest request, String pwd, String dirId, String uuid, - String auth) { + String stoken, String auth) { String url = URLParamUtil.parserParams(request); ParserCreate parserCreate; try { @@ -176,6 +176,9 @@ public class ParserApi { if (StringUtils.isNotBlank(dirId)) { parserCreate.getShareLinkInfo().getOtherParam().put("dirId", dirId); } + if (StringUtils.isNotBlank(stoken)) { + parserCreate.getShareLinkInfo().getOtherParam().put("stoken", stoken); + } if (StringUtils.isNotBlank(uuid)) { parserCreate.getShareLinkInfo().getOtherParam().put("uuid", uuid); } From 0fb53d5159f3c9a65f90cf01e920fb87af910d6e Mon Sep 17 00:00:00 2001 From: Rune <93461506+newbie000652@users.noreply.github.com> Date: Fri, 24 Jul 2026 19:54:22 +0800 Subject: [PATCH 4/7] Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --- .../src/main/java/cn/qaiu/lz/common/util/URLParamUtil.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/web-service/src/main/java/cn/qaiu/lz/common/util/URLParamUtil.java b/web-service/src/main/java/cn/qaiu/lz/common/util/URLParamUtil.java index 1d8a997..80b1d94 100644 --- a/web-service/src/main/java/cn/qaiu/lz/common/util/URLParamUtil.java +++ b/web-service/src/main/java/cn/qaiu/lz/common/util/URLParamUtil.java @@ -68,7 +68,7 @@ public class URLParamUtil { boolean firstParam = !decodedUrl.contains("?"); for (String paramName : params.names()) { - // 忽略 "url", "pwd", "dirId", "uuid", "auth" 参数（这些参数单独处理，不应拼接到分享URL中） + // 忽略 "url", "pwd", "dirId", "uuid", "auth", "stoken" 参数（这些参数单独处理，不应拼接到分享URL中） if (!paramName.equals("url") && !paramName.equals("pwd") && !paramName.equals("dirId") && !paramName.equals("uuid") && !paramName.equals("auth") && !paramName.equals("stoken")) { if (firstParam) { From bdd253383d78fb404701c0bf506833a8c9a8ad86 Mon Sep 17 00:00:00 2001 From: Tra Date: Fri, 24 Jul 2026 20:30:53 +0800 Subject: [PATCH 5/7] docs: add stoken parameter to /v2/getFileList OpenAPI spec --- web-service/doc/openapi.json | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/web-service/doc/openapi.json b/web-service/doc/openapi.json index d86f1fc..25324f5 100644 --- a/web-service/doc/openapi.json +++ b/web-service/doc/openapi.json @@ -386,6 +386,16 @@ "type": "string", "example": "uuid123" } + }, + { + "name": "stoken", + "in": "query", + "required": false, + "description": "分享 token，用于子目录解析时复用认证状态", + "schema": { + "type": "string", + "example": "OASBe5qM0pg2VvvyLM..." + } } ], "responses": { From f358140974abeefa4b66e3868449e8db42c2327f Mon Sep 17 00:00:00 2001 From: qaiu Date: Sat, 25 Jul 2026 11:14:19 +0800 Subject: [PATCH 6/7] Update README.md --- README.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index a18f003..14b40fb 100644 --- a/README.md +++ b/README.md @@ -531,7 +531,13 @@ Core模块集成Vert.x实现类似spring的注解式路由API ## Star History -[![Star History Chart](https://api.star-history.com/svg?repos=qaiu/netdisk-fast-download&type=Date)](https://star-history.com/#qaiu/netdisk-fast-download&Date) + + + + + Star History Chart + + ## **免责声明** - 用户在使用本项目时，应自行承担风险，并确保其行为符合当地法律法规。开发者不对用户因使用本项目而导致的任何后果负责。 From 0f34672e3365d9e89f4f4995fe737132f6d42626 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 26 Jul 2026 00:46:44 +0000 Subject: [PATCH 7/7] chore(deps): bump the maven group across 1 directory with 2 updates Bumps the maven group with 2 updates in the / directory: [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) and [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson). Updates `ch.qos.logback:logback-core` from 1.5.33 to 1.5.34 - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](https://github.com/qos-ch/logback/compare/v_1.5.33...v_1.5.34) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.6 to 2.18.9 - [Commits](https://github.com/FasterXML/jackson/commits) --- updated-dependencies: - dependency-name: ch.qos.logback:logback-core dependency-version: 1.5.34 dependency-type: direct:production dependency-group: maven - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.18.9 dependency-type: direct:production dependency-group: maven ... Signed-off-by: dependabot[bot] --- core-database/pom.xml | 2 +- pom.xml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/core-database/pom.xml b/core-database/pom.xml index c895694..62369aa 100644 --- a/core-database/pom.xml +++ b/core-database/pom.xml @@ -65,7 +65,7 @@ org.postgresql postgresql - 42.7.12 + 42.7.13 diff --git a/pom.xml b/pom.xml index 14d262a..eb5abc4 100644 --- a/pom.xml +++ b/pom.xml @@ -33,9 +33,9 @@ 3.18.0 2.0.0 10.2.5 - 2.18.6 + 2.18.9 - 1.5.33 + 1.5.34 4.13.2