fix: 后端代码格式化

2026-03-02 18:10:47 +08:00 · 2025-09-18 14:42:25 +08:00
parent 70f7442f0c
commit 72b2b82e02
325 changed files with 15341 additions and 12370 deletions
--- a/backend/src/main/java/com/openisle/config/ActivityInitializer.java
+++ b/backend/src/main/java/com/openisle/config/ActivityInitializer.java
@@ -3,37 +3,40 @@ package com.openisle.config;
 import com.openisle.model.Activity;
 import com.openisle.model.ActivityType;
 import com.openisle.repository.ActivityRepository;
+import java.time.LocalDate;
+import java.time.LocalDateTime;
 import lombok.RequiredArgsConstructor;
 import org.springframework.boot.CommandLineRunner;
 import org.springframework.stereotype.Component;
-import java.time.LocalDate;
-import java.time.LocalDateTime;

@Component
@RequiredArgsConstructor
 public class ActivityInitializer implements CommandLineRunner {
-    private final ActivityRepository activityRepository;

-    @Override
-    public void run(String... args) {
-        if (activityRepository.findByType(ActivityType.MILK_TEA) == null) {
-            Activity a = new Activity();
-            a.setTitle("🎡建站送奶茶活动");
-            a.setType(ActivityType.MILK_TEA);
-            a.setIcon("https://icons.veryicon.com/png/o/food--drinks/delicious-food-1/coffee-36.png");
-            a.setContent("为了有利于建站推广以及激励发布内容，我们推出了建站送奶茶的活动，前50名达到level 1的用户，可以联系站长获取奶茶/咖啡一杯");
-            activityRepository.save(a);
-        }
+  private final ActivityRepository activityRepository;

-        if (activityRepository.findByType(ActivityType.INVITE_POINTS) == null) {
-            Activity a = new Activity();
-            a.setTitle("🎁邀请码送积分活动");
-            a.setType(ActivityType.INVITE_POINTS);
-            a.setIcon("https://img.icons8.com/color/96/gift.png");
-            a.setContent("使用邀请码注册或邀请好友即可获得积分奖励，快来参与吧！");
-            a.setStartTime(LocalDateTime.now());
-            a.setEndTime(LocalDate.of(LocalDate.now().getYear(), 10, 1).atStartOfDay());
-            activityRepository.save(a);
-        }
+  @Override
+  public void run(String... args) {
+    if (activityRepository.findByType(ActivityType.MILK_TEA) == null) {
+      Activity a = new Activity();
+      a.setTitle("🎡建站送奶茶活动");
+      a.setType(ActivityType.MILK_TEA);
+      a.setIcon("https://icons.veryicon.com/png/o/food--drinks/delicious-food-1/coffee-36.png");
+      a.setContent(
+        "为了有利于建站推广以及激励发布内容，我们推出了建站送奶茶的活动，前50名达到level 1的用户，可以联系站长获取奶茶/咖啡一杯"
+      );
+      activityRepository.save(a);
    }
+
+    if (activityRepository.findByType(ActivityType.INVITE_POINTS) == null) {
+      Activity a = new Activity();
+      a.setTitle("🎁邀请码送积分活动");
+      a.setType(ActivityType.INVITE_POINTS);
+      a.setIcon("https://img.icons8.com/color/96/gift.png");
+      a.setContent("使用邀请码注册或邀请好友即可获得积分奖励，快来参与吧！");
+      a.setStartTime(LocalDateTime.now());
+      a.setEndTime(LocalDate.of(LocalDate.now().getYear(), 10, 1).atStartOfDay());
+      activityRepository.save(a);
+    }
+  }
 }
--- a/backend/src/main/java/com/openisle/config/AsyncConfig.java
+++ b/backend/src/main/java/com/openisle/config/AsyncConfig.java
@@ -1,23 +1,23 @@
 package com.openisle.config;

+import java.util.concurrent.Executor;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.scheduling.annotation.EnableAsync;
 import org.springframework.scheduling.concurrent.ThreadPoolTaskExecutor;

-import java.util.concurrent.Executor;
-
@Configuration
@EnableAsync
 public class AsyncConfig {
-    @Bean(name = "notificationExecutor")
-    public Executor notificationExecutor() {
-        ThreadPoolTaskExecutor executor = new ThreadPoolTaskExecutor();
-        executor.setCorePoolSize(2);
-        executor.setMaxPoolSize(10);
-        executor.setQueueCapacity(100);
-        executor.setThreadNamePrefix("notification-");
-        executor.initialize();
-        return executor;
-    }
+
+  @Bean(name = "notificationExecutor")
+  public Executor notificationExecutor() {
+    ThreadPoolTaskExecutor executor = new ThreadPoolTaskExecutor();
+    executor.setCorePoolSize(2);
+    executor.setMaxPoolSize(10);
+    executor.setQueueCapacity(100);
+    executor.setThreadNamePrefix("notification-");
+    executor.initialize();
+    return executor;
+  }
 }
--- a/backend/src/main/java/com/openisle/config/CachingConfig.java
+++ b/backend/src/main/java/com/openisle/config/CachingConfig.java
@@ -7,6 +7,9 @@ import com.fasterxml.jackson.databind.ObjectMapper;
 import com.fasterxml.jackson.databind.jsontype.impl.LaissezFaireSubTypeValidator;
 import com.fasterxml.jackson.datatype.hibernate6.Hibernate6Module;
 import com.fasterxml.jackson.datatype.jsr310.JavaTimeModule;
+import java.time.Duration;
+import java.util.HashMap;
+import java.util.Map;
 import org.springframework.cache.CacheManager;
 import org.springframework.cache.annotation.EnableCaching;
 import org.springframework.context.annotation.Bean;
@@ -21,10 +24,6 @@ import org.springframework.data.redis.serializer.RedisSerializationContext;
 import org.springframework.data.redis.serializer.RedisSerializer;
 import org.springframework.data.redis.serializer.StringRedisSerializer;

-import java.time.Duration;
-import java.util.HashMap;
-import java.util.Map;
-
 /**
 * Redis 缓存配置类
 * @author smallclover
@@ -34,96 +33,107 @@ import java.util.Map;
@EnableCaching
 public class CachingConfig {

-    // 标签缓存名
-    public static final String TAG_CACHE_NAME="openisle_tags";
-    // 分类缓存名
-    public static final String CATEGORY_CACHE_NAME="openisle_categories";
-    // 在线人数缓存名
-    public static final String ONLINE_CACHE_NAME="openisle_online";
-    // 注册验证码
-    public static final String VERIFY_CACHE_NAME="openisle_verify";
-    // 发帖频率限制
-    public static final String LIMIT_CACHE_NAME="openisle_limit";
-    // 用户访问统计
-    public static final String VISIT_CACHE_NAME="openisle_visit";
-    // 文章缓存
-    public static final String POST_CACHE_NAME="openisle_posts";
+  // 标签缓存名
+  public static final String TAG_CACHE_NAME = "openisle_tags";
+  // 分类缓存名
+  public static final String CATEGORY_CACHE_NAME = "openisle_categories";
+  // 在线人数缓存名
+  public static final String ONLINE_CACHE_NAME = "openisle_online";
+  // 注册验证码
+  public static final String VERIFY_CACHE_NAME = "openisle_verify";
+  // 发帖频率限制
+  public static final String LIMIT_CACHE_NAME = "openisle_limit";
+  // 用户访问统计
+  public static final String VISIT_CACHE_NAME = "openisle_visit";
+  // 文章缓存
+  public static final String POST_CACHE_NAME = "openisle_posts";

-    /**
-     * 自定义Redis的序列化器
-     * @return
-     */
-    @Bean()
-    @Primary
-    public RedisSerializer<Object> redisSerializer() {
-        // 注册 JavaTimeModule 來支持 Java 8 的日期和时间 API,否则回报一下错误，同时还要引入jsr310
+  /**
+   * 自定义Redis的序列化器
+   * @return
+   */
+  @Bean
+  @Primary
+  public RedisSerializer<Object> redisSerializer() {
+    // 注册 JavaTimeModule 來支持 Java 8 的日期和时间 API,否则回报一下错误，同时还要引入jsr310

-        // org.springframework.data.redis.serializer.SerializationException: Could not write JSON: Java 8 date/time type `java.time.LocalDateTime` not supported by default:
-        // add Module "com.fasterxml.jackson.datatype:jackson-datatype-jsr310" to enable handling
-        // (through reference chain: java.util.ArrayList[0]->com.openisle.dto.TagDto["createdAt"])
-        // 设置可见性，允许序列化所有元素
-        ObjectMapper objectMapper = new ObjectMapper();
-        objectMapper.registerModule(new JavaTimeModule());
-        // Hibernate6Module 可以自动处理懒加载代理对象。
-        // Tag对象的creator是FetchType.LAZY
-        objectMapper.registerModule(new Hibernate6Module()
-                .disable(Hibernate6Module.Feature.USE_TRANSIENT_ANNOTATION)
-                // 将 Hibernate 特有的集合类型转换为标准 Java 集合类型
-                // 避免序列化时出现 org.hibernate.collection.spi.PersistentSet 这样的类型信息
-                .configure(Hibernate6Module.Feature.REPLACE_PERSISTENT_COLLECTIONS, true));
-        // service的时候带上类型信息
-        // 启用类型信息，避免 LinkedHashMap 问题
-        objectMapper.activateDefaultTyping(
-                LaissezFaireSubTypeValidator.instance,
-                ObjectMapper.DefaultTyping.NON_FINAL,
-                JsonTypeInfo.As.PROPERTY
-        );
-        objectMapper.setVisibility(PropertyAccessor.ALL, JsonAutoDetect.Visibility.ANY);
-        return new GenericJackson2JsonRedisSerializer(objectMapper);
-    }
+    // org.springframework.data.redis.serializer.SerializationException: Could not write JSON: Java 8 date/time type `java.time.LocalDateTime` not supported by default:
+    // add Module "com.fasterxml.jackson.datatype:jackson-datatype-jsr310" to enable handling
+    // (through reference chain: java.util.ArrayList[0]->com.openisle.dto.TagDto["createdAt"])
+    // 设置可见性，允许序列化所有元素
+    ObjectMapper objectMapper = new ObjectMapper();
+    objectMapper.registerModule(new JavaTimeModule());
+    // Hibernate6Module 可以自动处理懒加载代理对象。
+    // Tag对象的creator是FetchType.LAZY
+    objectMapper.registerModule(
+      new Hibernate6Module()
+        .disable(Hibernate6Module.Feature.USE_TRANSIENT_ANNOTATION)
+        // 将 Hibernate 特有的集合类型转换为标准 Java 集合类型
+        // 避免序列化时出现 org.hibernate.collection.spi.PersistentSet 这样的类型信息
+        .configure(Hibernate6Module.Feature.REPLACE_PERSISTENT_COLLECTIONS, true)
+    );
+    // service的时候带上类型信息
+    // 启用类型信息，避免 LinkedHashMap 问题
+    objectMapper.activateDefaultTyping(
+      LaissezFaireSubTypeValidator.instance,
+      ObjectMapper.DefaultTyping.NON_FINAL,
+      JsonTypeInfo.As.PROPERTY
+    );
+    objectMapper.setVisibility(PropertyAccessor.ALL, JsonAutoDetect.Visibility.ANY);
+    return new GenericJackson2JsonRedisSerializer(objectMapper);
+  }

-    /**
-     * 配置 Spring Cache 使用 RedisCacheManager
-     */
-    @Bean
-    public CacheManager cacheManager(RedisConnectionFactory connectionFactory, RedisSerializer<Object> redisSerializer) {
+  /**
+   * 配置 Spring Cache 使用 RedisCacheManager
+   */
+  @Bean
+  public CacheManager cacheManager(
+    RedisConnectionFactory connectionFactory,
+    RedisSerializer<Object> redisSerializer
+  ) {
+    RedisCacheConfiguration config = RedisCacheConfiguration.defaultCacheConfig()
+      .entryTtl(Duration.ZERO) // 默认缓存不过期
+      .serializeKeysWith(
+        RedisSerializationContext.SerializationPair.fromSerializer(new StringRedisSerializer())
+      )
+      .serializeValuesWith(
+        RedisSerializationContext.SerializationPair.fromSerializer(redisSerializer)
+      )
+      .disableCachingNullValues(); // 禁止缓存 null 值

-        RedisCacheConfiguration config = RedisCacheConfiguration.defaultCacheConfig()
-                .entryTtl(Duration.ZERO) // 默认缓存不过期
-                .serializeKeysWith(RedisSerializationContext.SerializationPair.fromSerializer(new StringRedisSerializer()))
-                .serializeValuesWith(RedisSerializationContext.SerializationPair.fromSerializer(redisSerializer))
-                .disableCachingNullValues(); // 禁止缓存 null 值
+    // 个别缓存单独设置 TTL 时间
+    Map<String, RedisCacheConfiguration> cacheConfigs = new HashMap<>();
+    RedisCacheConfiguration oneHourConfig = config.entryTtl(Duration.ofHours(1));
+    RedisCacheConfiguration tenMinutesConfig = config.entryTtl(Duration.ofMinutes(10));
+    cacheConfigs.put(TAG_CACHE_NAME, oneHourConfig);
+    cacheConfigs.put(CATEGORY_CACHE_NAME, oneHourConfig);
+    cacheConfigs.put(POST_CACHE_NAME, tenMinutesConfig);

-        // 个别缓存单独设置 TTL 时间
-        Map<String, RedisCacheConfiguration> cacheConfigs = new HashMap<>();
-        RedisCacheConfiguration oneHourConfig = config.entryTtl(Duration.ofHours(1));
-        RedisCacheConfiguration tenMinutesConfig = config.entryTtl(Duration.ofMinutes(10));
-        cacheConfigs.put(TAG_CACHE_NAME, oneHourConfig);
-        cacheConfigs.put(CATEGORY_CACHE_NAME, oneHourConfig);
-        cacheConfigs.put(POST_CACHE_NAME, tenMinutesConfig);
+    return RedisCacheManager.builder(connectionFactory)
+      .cacheDefaults(config)
+      .withInitialCacheConfigurations(cacheConfigs)
+      .build();
+  }

-        return RedisCacheManager.builder(connectionFactory)
-                .cacheDefaults(config)
-                .withInitialCacheConfigurations(cacheConfigs)
-                .build();
-    }
+  /**
+   * 配置 RedisTemplate，支持直接操作 Redis
+   */
+  @Bean
+  public RedisTemplate<String, Object> redisTemplate(
+    RedisConnectionFactory connectionFactory,
+    RedisSerializer<Object> redisSerializer
+  ) {
+    RedisTemplate<String, Object> template = new RedisTemplate<>();
+    template.setConnectionFactory(connectionFactory);

-    /**
-     * 配置 RedisTemplate，支持直接操作 Redis
-     */
-    @Bean
-    public RedisTemplate<String, Object> redisTemplate(RedisConnectionFactory connectionFactory,  RedisSerializer<Object> redisSerializer) {
-        RedisTemplate<String, Object> template = new RedisTemplate<>();
-        template.setConnectionFactory(connectionFactory);
+    // key 和 hashKey 使用 String 序列化
+    template.setKeySerializer(new StringRedisSerializer());
+    template.setHashKeySerializer(new StringRedisSerializer());

-        // key 和 hashKey 使用 String 序列化
-        template.setKeySerializer(new StringRedisSerializer());
-        template.setHashKeySerializer(new StringRedisSerializer());
+    // value 和 hashValue 使用 JSON 序列化
+    template.setValueSerializer(redisSerializer);
+    template.setHashValueSerializer(redisSerializer);

-        // value 和 hashValue 使用 JSON 序列化
-        template.setValueSerializer(redisSerializer);
-        template.setHashValueSerializer(redisSerializer);
-
-        return template;
-    }
+    return template;
+  }
 }
--- a/backend/src/main/java/com/openisle/config/ChannelInitializer.java
+++ b/backend/src/main/java/com/openisle/config/ChannelInitializer.java
@@ -9,24 +9,29 @@ import org.springframework.stereotype.Component;
@Component
@RequiredArgsConstructor
 public class ChannelInitializer implements CommandLineRunner {
-    private final MessageConversationRepository conversationRepository;

-    @Override
-    public void run(String... args) {
-        if (conversationRepository.countByChannelTrue() == 0) {
-            MessageConversation chat = new MessageConversation();
-            chat.setChannel(true);
-            chat.setName("吹水群");
-            chat.setDescription("吹水聊天");
-            chat.setAvatar("https://openisle-1307107697.cos.accelerate.myqcloud.com/dynamic_assert/32647273e2334d14adfd4a6ce9db0643.jpeg");
-            conversationRepository.save(chat);
+  private final MessageConversationRepository conversationRepository;

-            MessageConversation tech = new MessageConversation();
-            tech.setChannel(true);
-            tech.setName("技术讨论群");
-            tech.setDescription("讨论技术相关话题");
-            tech.setAvatar("https://openisle-1307107697.cos.accelerate.myqcloud.com/dynamic_assert/5edde9a5864e471caa32491dbcdaa8b2.png");
-            conversationRepository.save(tech);
-        }
+  @Override
+  public void run(String... args) {
+    if (conversationRepository.countByChannelTrue() == 0) {
+      MessageConversation chat = new MessageConversation();
+      chat.setChannel(true);
+      chat.setName("吹水群");
+      chat.setDescription("吹水聊天");
+      chat.setAvatar(
+        "https://openisle-1307107697.cos.accelerate.myqcloud.com/dynamic_assert/32647273e2334d14adfd4a6ce9db0643.jpeg"
+      );
+      conversationRepository.save(chat);
+
+      MessageConversation tech = new MessageConversation();
+      tech.setChannel(true);
+      tech.setName("技术讨论群");
+      tech.setDescription("讨论技术相关话题");
+      tech.setAvatar(
+        "https://openisle-1307107697.cos.accelerate.myqcloud.com/dynamic_assert/5edde9a5864e471caa32491dbcdaa8b2.png"
+      );
+      conversationRepository.save(tech);
    }
+  }
 }
--- a/backend/src/main/java/com/openisle/config/CustomAccessDeniedHandler.java
+++ b/backend/src/main/java/com/openisle/config/CustomAccessDeniedHandler.java
@@ -3,23 +3,25 @@ package com.openisle.config;
 import jakarta.servlet.ServletException;
 import jakarta.servlet.http.HttpServletRequest;
 import jakarta.servlet.http.HttpServletResponse;
+import java.io.IOException;
 import org.springframework.security.access.AccessDeniedException;
 import org.springframework.security.web.access.AccessDeniedHandler;
 import org.springframework.stereotype.Component;

-import java.io.IOException;
-
 /**
 * Returns 401 Unauthorized when an authenticated user lacks required privileges.
 */
@Component
 public class CustomAccessDeniedHandler implements AccessDeniedHandler {
-    @Override
-    public void handle(HttpServletRequest request,
-                       HttpServletResponse response,
-                       AccessDeniedException accessDeniedException) throws IOException, ServletException {
-        response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
-        response.setContentType("application/json");
-        response.getWriter().write("{\"error\": \"Unauthorized\"}");
-    }
+
+  @Override
+  public void handle(
+    HttpServletRequest request,
+    HttpServletResponse response,
+    AccessDeniedException accessDeniedException
+  ) throws IOException, ServletException {
+    response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
+    response.setContentType("application/json");
+    response.getWriter().write("{\"error\": \"Unauthorized\"}");
+  }
 }
--- a/backend/src/main/java/com/openisle/config/OpenApiConfig.java
+++ b/backend/src/main/java/com/openisle/config/OpenApiConfig.java
@@ -6,7 +6,6 @@ import io.swagger.v3.oas.models.info.Info;
 import io.swagger.v3.oas.models.security.SecurityRequirement;
 import io.swagger.v3.oas.models.security.SecurityScheme;
 import io.swagger.v3.oas.models.servers.Server;
-
 import java.util.List;
 import java.util.stream.Collectors;
 import lombok.RequiredArgsConstructor;
@@ -18,43 +17,42 @@ import org.springframework.context.annotation.Configuration;
@RequiredArgsConstructor
 public class OpenApiConfig {

-    private final SpringDocProperties springDocProperties;
+  private final SpringDocProperties springDocProperties;

-    @Value("${springdoc.info.title}")
-    private String title;
+  @Value("${springdoc.info.title}")
+  private String title;

-    @Value("${springdoc.info.description}")
-    private String description;
+  @Value("${springdoc.info.description}")
+  private String description;

-    @Value("${springdoc.info.version}")
-    private String version;
+  @Value("${springdoc.info.version}")
+  private String version;

-    @Value("${springdoc.info.scheme}")
-    private String scheme;
+  @Value("${springdoc.info.scheme}")
+  private String scheme;

-    @Value("${springdoc.info.header}")
-    private String header;
+  @Value("${springdoc.info.header}")
+  private String header;

-    @Bean
-    public OpenAPI openAPI() {
-        SecurityScheme securityScheme = new SecurityScheme()
-                        .type(SecurityScheme.Type.HTTP)
-                        .scheme(scheme.toLowerCase())
-                        .bearerFormat("JWT")
-                        .in(SecurityScheme.In.HEADER)
-                        .name(header);
+  @Bean
+  public OpenAPI openAPI() {
+    SecurityScheme securityScheme = new SecurityScheme()
+      .type(SecurityScheme.Type.HTTP)
+      .scheme(scheme.toLowerCase())
+      .bearerFormat("JWT")
+      .in(SecurityScheme.In.HEADER)
+      .name(header);

-        List<Server> servers = springDocProperties.getServers().stream()
-                .map(s -> new Server().url(s.getUrl()).description(s.getDescription()))
-                .collect(Collectors.toList());
+    List<Server> servers = springDocProperties
+      .getServers()
+      .stream()
+      .map(s -> new Server().url(s.getUrl()).description(s.getDescription()))
+      .collect(Collectors.toList());

-        return new OpenAPI()
-                .servers(servers)
-                .info(new Info()
-                        .title(title)
-                        .description(description)
-                        .version(version))
-                .components(new Components().addSecuritySchemes("JWT", securityScheme))
-                .addSecurityItem(new SecurityRequirement().addList("JWT"));
-    }
+    return new OpenAPI()
+      .servers(servers)
+      .info(new Info().title(title).description(description).version(version))
+      .components(new Components().addSecuritySchemes("JWT", securityScheme))
+      .addSecurityItem(new SecurityRequirement().addList("JWT"));
+  }
 }
--- a/backend/src/main/java/com/openisle/config/PointGoodInitializer.java
+++ b/backend/src/main/java/com/openisle/config/PointGoodInitializer.java
@@ -10,22 +10,27 @@ import org.springframework.stereotype.Component;
@Component
@RequiredArgsConstructor
 public class PointGoodInitializer implements CommandLineRunner {
-    private final PointGoodRepository pointGoodRepository;

-    @Override
-    public void run(String... args) {
-        if (pointGoodRepository.count() == 0) {
-            PointGood g1 = new PointGood();
-            g1.setName("GPT Plus 1 个月");
-            g1.setCost(20000);
-            g1.setImage("https://openisle-1307107697.cos.ap-guangzhou.myqcloud.com/assert/icons/chatgpt.png");
-            pointGoodRepository.save(g1);
+  private final PointGoodRepository pointGoodRepository;

-            PointGood g2 = new PointGood();
-            g2.setName("奶茶");
-            g2.setCost(5000);
-            g2.setImage("https://openisle-1307107697.cos.ap-guangzhou.myqcloud.com/assert/icons/coffee.png");
-            pointGoodRepository.save(g2);
-        }
+  @Override
+  public void run(String... args) {
+    if (pointGoodRepository.count() == 0) {
+      PointGood g1 = new PointGood();
+      g1.setName("GPT Plus 1 个月");
+      g1.setCost(20000);
+      g1.setImage(
+        "https://openisle-1307107697.cos.ap-guangzhou.myqcloud.com/assert/icons/chatgpt.png"
+      );
+      pointGoodRepository.save(g1);
+
+      PointGood g2 = new PointGood();
+      g2.setName("奶茶");
+      g2.setCost(5000);
+      g2.setImage(
+        "https://openisle-1307107697.cos.ap-guangzhou.myqcloud.com/assert/icons/coffee.png"
+      );
+      pointGoodRepository.save(g2);
    }
+  }
 }
--- a/backend/src/main/java/com/openisle/config/RabbitMQConfig.java
+++ b/backend/src/main/java/com/openisle/config/RabbitMQConfig.java
@@ -1,5 +1,9 @@
 package com.openisle.config;

+import com.fasterxml.jackson.databind.ObjectMapper;
+import jakarta.annotation.PostConstruct;
+import java.util.ArrayList;
+import java.util.List;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.amqp.core.Binding;
@@ -7,199 +11,209 @@ import org.springframework.amqp.core.BindingBuilder;
 import org.springframework.amqp.core.Queue;
 import org.springframework.amqp.core.TopicExchange;
 import org.springframework.amqp.rabbit.connection.ConnectionFactory;
+import org.springframework.amqp.rabbit.core.RabbitAdmin;
 import org.springframework.amqp.rabbit.core.RabbitTemplate;
 import org.springframework.amqp.support.converter.Jackson2JsonMessageConverter;
 import org.springframework.beans.factory.annotation.Qualifier;
 import org.springframework.beans.factory.annotation.Value;
+import org.springframework.boot.CommandLineRunner;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
-import com.fasterxml.jackson.databind.ObjectMapper;
-import org.springframework.amqp.rabbit.core.RabbitAdmin;
-import org.springframework.boot.CommandLineRunner;
 import org.springframework.context.annotation.DependsOn;

-import jakarta.annotation.PostConstruct;
-import java.util.ArrayList;
-import java.util.List;
-
@Configuration
@RequiredArgsConstructor
@Slf4j
 public class RabbitMQConfig {

-    public static final String EXCHANGE_NAME = "openisle-exchange";
-    // 保持向后兼容的常量
-    public static final String QUEUE_NAME = "notifications-queue";
-    public static final String ROUTING_KEY = "notifications.routingkey";
-    
-    // 硬编码为16以匹配ShardingStrategy中的十六进制分片逻辑
-    private final int queueCount = 16;
-    
-    @Value("${rabbitmq.queue.durable}")
-    private boolean queueDurable;
+  public static final String EXCHANGE_NAME = "openisle-exchange";
+  // 保持向后兼容的常量
+  public static final String QUEUE_NAME = "notifications-queue";
+  public static final String ROUTING_KEY = "notifications.routingkey";

-    @PostConstruct
-    public void init() {
-        log.info("RabbitMQ配置初始化: 队列数量={}, 持久化={}", queueCount, queueDurable);
+  // 硬编码为16以匹配ShardingStrategy中的十六进制分片逻辑
+  private final int queueCount = 16;
+
+  @Value("${rabbitmq.queue.durable}")
+  private boolean queueDurable;
+
+  @PostConstruct
+  public void init() {
+    log.info("RabbitMQ配置初始化: 队列数量={}, 持久化={}", queueCount, queueDurable);
+  }
+
+  @Bean
+  public TopicExchange exchange() {
+    return new TopicExchange(EXCHANGE_NAME);
+  }
+
+  /**
+   * 创建所有分片队列, 使用十六进制后缀 (0-f)
+   */
+  @Bean
+  public List<Queue> shardedQueues() {
+    log.info("开始创建分片队列 Bean...");
+
+    List<Queue> queues = new ArrayList<>();
+    for (int i = 0; i < queueCount; i++) {
+      String shardKey = Integer.toHexString(i);
+      String queueName = "notifications-queue-" + shardKey;
+      Queue queue = new Queue(queueName, queueDurable);
+      queues.add(queue);
    }

-    @Bean
-    public TopicExchange exchange() {
-        return new TopicExchange(EXCHANGE_NAME);
+    log.info("分片队列 Bean 创建完成，总数: {}", queues.size());
+    return queues;
+  }
+
+  /**
+   * 创建所有分片绑定, 使用十六进制路由键 (notifications.shard.0 - notifications.shard.f)
+   */
+  @Bean
+  public List<Binding> shardedBindings(
+    TopicExchange exchange,
+    @Qualifier("shardedQueues") List<Queue> shardedQueues
+  ) {
+    log.info("开始创建分片绑定 Bean...");
+    List<Binding> bindings = new ArrayList<>();
+    if (shardedQueues != null) {
+      for (Queue queue : shardedQueues) {
+        String queueName = queue.getName();
+        String shardKey = queueName.substring("notifications-queue-".length());
+        String routingKey = "notifications.shard." + shardKey;
+        Binding binding = BindingBuilder.bind(queue).to(exchange).with(routingKey);
+        bindings.add(binding);
+      }
    }

-    /**
-     * 创建所有分片队列, 使用十六进制后缀 (0-f)
-     */
-    @Bean
-    public List<Queue> shardedQueues() {
-        log.info("开始创建分片队列 Bean...");
-        
-        List<Queue> queues = new ArrayList<>();
-        for (int i = 0; i < queueCount; i++) {
-            String shardKey = Integer.toHexString(i);
-            String queueName = "notifications-queue-" + shardKey;
-            Queue queue = new Queue(queueName, queueDurable);
-            queues.add(queue);
-        }
-        
-        log.info("分片队列 Bean 创建完成，总数: {}", queues.size());
-        return queues;
-    }
+    log.info("分片绑定 Bean 创建完成，总数: {}", bindings.size());
+    return bindings;
+  }

-    /**
-     * 创建所有分片绑定, 使用十六进制路由键 (notifications.shard.0 - notifications.shard.f)
-     */
-    @Bean
-    public List<Binding> shardedBindings(TopicExchange exchange, @Qualifier("shardedQueues") List<Queue> shardedQueues) {
-        log.info("开始创建分片绑定 Bean...");
-        List<Binding> bindings = new ArrayList<>();
-        if (shardedQueues != null) {
-            for (Queue queue : shardedQueues) {
-                String queueName = queue.getName();
-                String shardKey = queueName.substring("notifications-queue-".length());
-                String routingKey = "notifications.shard." + shardKey;
-                Binding binding = BindingBuilder.bind(queue).to(exchange).with(routingKey);
-                bindings.add(binding);
+  /**
+   * 保持向后兼容的单队列配置（可选）
+   */
+  @Bean
+  public Queue legacyQueue() {
+    return new Queue(QUEUE_NAME, queueDurable);
+  }
+
+  /**
+   * 保持向后兼容的单队列绑定（可选）
+   */
+  @Bean
+  public Binding legacyBinding(Queue legacyQueue, TopicExchange exchange) {
+    return BindingBuilder.bind(legacyQueue).to(exchange).with(ROUTING_KEY);
+  }
+
+  @Bean
+  public Jackson2JsonMessageConverter messageConverter() {
+    ObjectMapper objectMapper = new ObjectMapper();
+    objectMapper.registerModule(new com.fasterxml.jackson.datatype.jsr310.JavaTimeModule());
+    objectMapper.disable(
+      com.fasterxml.jackson.databind.SerializationFeature.WRITE_DATES_AS_TIMESTAMPS
+    );
+    return new Jackson2JsonMessageConverter(objectMapper);
+  }
+
+  @Bean
+  public RabbitAdmin rabbitAdmin(ConnectionFactory connectionFactory) {
+    return new RabbitAdmin(connectionFactory);
+  }
+
+  @Bean
+  public RabbitTemplate rabbitTemplate(ConnectionFactory connectionFactory) {
+    RabbitTemplate template = new RabbitTemplate(connectionFactory);
+    template.setMessageConverter(messageConverter());
+    return template;
+  }
+
+  /**
+   * 使用 CommandLineRunner 确保在应用完全启动后声明队列到 RabbitMQ
+   * 这样可以确保 RabbitAdmin 和所有 Bean 都已正确初始化
+   */
+  @Bean
+  @DependsOn({ "rabbitAdmin", "shardedQueues", "exchange" })
+  public CommandLineRunner queueDeclarationRunner(
+    RabbitAdmin rabbitAdmin,
+    @Qualifier("shardedQueues") List<Queue> shardedQueues,
+    TopicExchange exchange,
+    Queue legacyQueue,
+    @Qualifier("shardedBindings") List<Binding> shardedBindings,
+    Binding legacyBinding
+  ) {
+    return args -> {
+      log.info("=== 开始主动声明 RabbitMQ 组件 ===");
+
+      try {
+        // 声明交换
+        rabbitAdmin.declareExchange(exchange);
+
+        // 声明分片队列 - 检查存在性
+        log.info("开始检查并声明 {} 个分片队列...", shardedQueues.size());
+        int successCount = 0;
+        int skippedCount = 0;
+
+        for (Queue queue : shardedQueues) {
+          String queueName = queue.getName();
+          try {
+            // 使用 declareQueue 的返回值判断队列是否已存在
+            // 如果队列已存在且配置匹配，declareQueue 会返回现有队列信息
+            // 如果不匹配或不存在，会创建新队列
+            rabbitAdmin.declareQueue(queue);
+            successCount++;
+          } catch (org.springframework.amqp.AmqpIOException e) {
+            if (
+              e.getMessage().contains("PRECONDITION_FAILED") && e.getMessage().contains("durable")
+            ) {
+              skippedCount++;
            }
+          } catch (Exception e) {
+            log.error("队列声明失败: {}, 错误: {}", queueName, e.getMessage());
+          }
        }
-        
-        log.info("分片绑定 Bean 创建完成，总数: {}", bindings.size());
-        return bindings;
-    }
+        log.info(
+          "分片队列处理完成: 成功 {}, 跳过 {}, 总数 {}",
+          successCount,
+          skippedCount,
+          shardedQueues.size()
+        );

-    /**
-     * 保持向后兼容的单队列配置（可选）
-     */
-    @Bean
-    public Queue legacyQueue() {
-        return new Queue(QUEUE_NAME, queueDurable);
-    }
+        // 声明分片绑定
+        log.info("开始声明 {} 个分片绑定...", shardedBindings.size());
+        int bindingSuccessCount = 0;
+        for (Binding binding : shardedBindings) {
+          try {
+            rabbitAdmin.declareBinding(binding);
+            bindingSuccessCount++;
+          } catch (Exception e) {
+            log.error("绑定声明失败: {}", e.getMessage());
+          }
+        }
+        log.info("分片绑定声明完成: 成功 {}/{}", bindingSuccessCount, shardedBindings.size());

-    /**
-     * 保持向后兼容的单队列绑定（可选）
-     */
-    @Bean
-    public Binding legacyBinding(Queue legacyQueue, TopicExchange exchange) {
-        return BindingBuilder.bind(legacyQueue).to(exchange).with(ROUTING_KEY);
-    }
+        // 声明遗留队列和绑定 - 检查存在性
+        try {
+          rabbitAdmin.declareQueue(legacyQueue);
+          rabbitAdmin.declareBinding(legacyBinding);
+          log.info("遗留队列和绑定就绪: {} (已存在或新创建)", QUEUE_NAME);
+        } catch (org.springframework.amqp.AmqpIOException e) {
+          if (
+            e.getMessage().contains("PRECONDITION_FAILED") && e.getMessage().contains("durable")
+          ) {
+            log.warn("遗留队列已存在但 durable 设置不匹配: {}, 保持现有队列", QUEUE_NAME);
+          } else {
+            log.error("遗留队列声明失败: {}, 错误: {}", QUEUE_NAME, e.getMessage());
+          }
+        } catch (Exception e) {
+          log.error("遗留队列声明失败: {}, 错误: {}", QUEUE_NAME, e.getMessage());
+        }

-    @Bean
-    public Jackson2JsonMessageConverter messageConverter() {
-        ObjectMapper objectMapper = new ObjectMapper();
-        objectMapper.registerModule(new com.fasterxml.jackson.datatype.jsr310.JavaTimeModule());
-        objectMapper.disable(com.fasterxml.jackson.databind.SerializationFeature.WRITE_DATES_AS_TIMESTAMPS);
-        return new Jackson2JsonMessageConverter(objectMapper);
-    }
-
-    @Bean
-    public RabbitAdmin rabbitAdmin(ConnectionFactory connectionFactory) {
-        return new RabbitAdmin(connectionFactory);
-    }
-
-    @Bean
-    public RabbitTemplate rabbitTemplate(ConnectionFactory connectionFactory) {
-        RabbitTemplate template = new RabbitTemplate(connectionFactory);
-        template.setMessageConverter(messageConverter());
-        return template;
-    }
-
-    /**
-     * 使用 CommandLineRunner 确保在应用完全启动后声明队列到 RabbitMQ
-     * 这样可以确保 RabbitAdmin 和所有 Bean 都已正确初始化
-     */
-    @Bean
-    @DependsOn({"rabbitAdmin", "shardedQueues", "exchange"})
-    public CommandLineRunner queueDeclarationRunner(RabbitAdmin rabbitAdmin,
-                                                   @Qualifier("shardedQueues") List<Queue> shardedQueues,
-                                                   TopicExchange exchange,
-                                                   Queue legacyQueue,
-                                                   @Qualifier("shardedBindings") List<Binding> shardedBindings,
-                                                   Binding legacyBinding) {
-        return args -> {
-            log.info("=== 开始主动声明 RabbitMQ 组件 ===");
-            
-            try {
-                // 声明交换
-                rabbitAdmin.declareExchange(exchange);
-                
-                // 声明分片队列 - 检查存在性
-                log.info("开始检查并声明 {} 个分片队列...", shardedQueues.size());
-                int successCount = 0;
-                int skippedCount = 0;
-                
-                for (Queue queue : shardedQueues) {
-                    String queueName = queue.getName();
-                    try {
-                        // 使用 declareQueue 的返回值判断队列是否已存在
-                        // 如果队列已存在且配置匹配，declareQueue 会返回现有队列信息
-                        // 如果不匹配或不存在，会创建新队列
-                        rabbitAdmin.declareQueue(queue);
-                        successCount++;
-                    } catch (org.springframework.amqp.AmqpIOException e) {
-                        if (e.getMessage().contains("PRECONDITION_FAILED") && e.getMessage().contains("durable")) {
-                            skippedCount++;
-                        }
-                    } catch (Exception e) {
-                        log.error("队列声明失败: {}, 错误: {}", queueName, e.getMessage());
-                    }
-                }
-                log.info("分片队列处理完成: 成功 {}, 跳过 {}, 总数 {}", successCount, skippedCount, shardedQueues.size());
-                
-                // 声明分片绑定
-                log.info("开始声明 {} 个分片绑定...", shardedBindings.size());
-                int bindingSuccessCount = 0;
-                for (Binding binding : shardedBindings) {
-                    try {
-                        rabbitAdmin.declareBinding(binding);
-                        bindingSuccessCount++;
-                    } catch (Exception e) {
-                        log.error("绑定声明失败: {}", e.getMessage());
-                    }
-                }
-                log.info("分片绑定声明完成: 成功 {}/{}", bindingSuccessCount, shardedBindings.size());
-                
-                // 声明遗留队列和绑定 - 检查存在性
-                try {
-                    rabbitAdmin.declareQueue(legacyQueue);
-                    rabbitAdmin.declareBinding(legacyBinding);
-                    log.info("遗留队列和绑定就绪: {} (已存在或新创建)", QUEUE_NAME);
-                } catch (org.springframework.amqp.AmqpIOException e) {
-                    if (e.getMessage().contains("PRECONDITION_FAILED") && e.getMessage().contains("durable")) {
-                        log.warn("遗留队列已存在但 durable 设置不匹配: {}, 保持现有队列", QUEUE_NAME);
-                    } else {
-                        log.error("遗留队列声明失败: {}, 错误: {}", QUEUE_NAME, e.getMessage());
-                    }
-                } catch (Exception e) {
-                    log.error("遗留队列声明失败: {}, 错误: {}", QUEUE_NAME, e.getMessage());
-                }
-                
-                log.info("=== RabbitMQ 组件声明完成 ===");
-                log.info("请检查 RabbitMQ 管理界面确认队列已正确创建");
-                
-            } catch (Exception e) {
-                log.error("RabbitMQ 组件声明过程中发生严重错误", e);
-            }
-        };
-    }
-}
+        log.info("=== RabbitMQ 组件声明完成 ===");
+        log.info("请检查 RabbitMQ 管理界面确认队列已正确创建");
+      } catch (Exception e) {
+        log.error("RabbitMQ 组件声明过程中发生严重错误", e);
+      }
+    };
+  }
+}
--- a/backend/src/main/java/com/openisle/config/RedisConnectionLogger.java
+++ b/backend/src/main/java/com/openisle/config/RedisConnectionLogger.java
@@ -13,23 +13,23 @@ import org.springframework.stereotype.Component;
@Slf4j
 public class RedisConnectionLogger implements InitializingBean {

-    private final RedisConnectionFactory connectionFactory;
+  private final RedisConnectionFactory connectionFactory;

-    public RedisConnectionLogger(RedisConnectionFactory connectionFactory) {
-        this.connectionFactory = connectionFactory;
-    }
+  public RedisConnectionLogger(RedisConnectionFactory connectionFactory) {
+    this.connectionFactory = connectionFactory;
+  }

-    @Override
-    public void afterPropertiesSet() {
-        try (var connection = connectionFactory.getConnection()) {
-            connection.ping();
-            if (connectionFactory instanceof LettuceConnectionFactory lettuce) {
-                log.info("Redis connection established at {}:{}", lettuce.getHostName(), lettuce.getPort());
-            } else {
-                log.info("Redis connection established");
-            }
-        } catch (Exception e) {
-            log.error("Failed to connect to Redis", e);
-        }
+  @Override
+  public void afterPropertiesSet() {
+    try (var connection = connectionFactory.getConnection()) {
+      connection.ping();
+      if (connectionFactory instanceof LettuceConnectionFactory lettuce) {
+        log.info("Redis connection established at {}:{}", lettuce.getHostName(), lettuce.getPort());
+      } else {
+        log.info("Redis connection established");
+      }
+    } catch (Exception e) {
+      log.error("Failed to connect to Redis", e);
    }
+  }
 }
--- a/backend/src/main/java/com/openisle/config/SchedulerConfig.java
+++ b/backend/src/main/java/com/openisle/config/SchedulerConfig.java
@@ -2,19 +2,20 @@ package com.openisle.config;

 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
+import org.springframework.scheduling.TaskScheduler;
 import org.springframework.scheduling.annotation.EnableScheduling;
 import org.springframework.scheduling.concurrent.ThreadPoolTaskScheduler;
-import org.springframework.scheduling.TaskScheduler;

@Configuration
@EnableScheduling
 public class SchedulerConfig {
-    @Bean
-    public TaskScheduler taskScheduler() {
-        ThreadPoolTaskScheduler scheduler = new ThreadPoolTaskScheduler();
-        scheduler.setPoolSize(2);
-        scheduler.setThreadNamePrefix("lottery-");
-        scheduler.initialize();
-        return scheduler;
-    }
+
+  @Bean
+  public TaskScheduler taskScheduler() {
+    ThreadPoolTaskScheduler scheduler = new ThreadPoolTaskScheduler();
+    scheduler.setPoolSize(2);
+    scheduler.setThreadNamePrefix("lottery-");
+    scheduler.initialize();
+    return scheduler;
+  }
 }
--- a/backend/src/main/java/com/openisle/config/SecurityConfig.java
+++ b/backend/src/main/java/com/openisle/config/SecurityConfig.java
@@ -1,9 +1,17 @@
 package com.openisle.config;

+import com.openisle.repository.UserRepository;
 import com.openisle.service.JwtService;
 import com.openisle.service.UserVisitService;
-import com.openisle.repository.UserRepository;
+import jakarta.servlet.FilterChain;
+import jakarta.servlet.ServletException;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import java.io.IOException;
+import java.time.LocalDate;
+import java.util.List;
 import lombok.RequiredArgsConstructor;
+import org.springframework.beans.factory.annotation.Value;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.data.redis.core.RedisTemplate;
@@ -22,202 +30,268 @@ import org.springframework.security.crypto.password.PasswordEncoder;
 import org.springframework.security.web.SecurityFilterChain;
 import org.springframework.security.web.access.AccessDeniedHandler;
 import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
-import org.springframework.web.filter.OncePerRequestFilter;
 import org.springframework.web.cors.CorsConfiguration;
 import org.springframework.web.cors.CorsConfigurationSource;
 import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
-import org.springframework.beans.factory.annotation.Value;
-
-import java.time.LocalDate;
-import java.util.List;
-
-import jakarta.servlet.FilterChain;
-import jakarta.servlet.ServletException;
-import jakarta.servlet.http.HttpServletRequest;
-import jakarta.servlet.http.HttpServletResponse;
-import java.io.IOException;
+import org.springframework.web.filter.OncePerRequestFilter;

@Configuration
@RequiredArgsConstructor
 public class SecurityConfig {
-    private final JwtService jwtService;
-    private final UserRepository userRepository;
-    private final AccessDeniedHandler customAccessDeniedHandler;
-    private final UserVisitService userVisitService;
-    @Value("${app.website-url}")
-    private String websiteUrl;

-    private final RedisTemplate redisTemplate;
+  private final JwtService jwtService;
+  private final UserRepository userRepository;
+  private final AccessDeniedHandler customAccessDeniedHandler;
+  private final UserVisitService userVisitService;

-    @Bean
-    public PasswordEncoder passwordEncoder() {
-        return new BCryptPasswordEncoder();
-    }
+  @Value("${app.website-url}")
+  private String websiteUrl;

-    @Bean
-    public UserDetailsService userDetailsService() {
-        return username -> userRepository.findByUsername(username)
-                .<UserDetails>map(user -> org.springframework.security.core.userdetails.User
-                        .withUsername(user.getUsername())
-                        .password(user.getPassword())
-                        .authorities(user.getRole().name())
-                        .build())
-                .orElseThrow(() -> new UsernameNotFoundException("User not found"));
-    }
+  private final RedisTemplate redisTemplate;

-    @Bean
-    public AuthenticationManager authenticationManager(HttpSecurity http, PasswordEncoder passwordEncoder, UserDetailsService userDetailsService) throws Exception {
-        return http.getSharedObject(AuthenticationManagerBuilder.class)
-                .userDetailsService(userDetailsService)
-                .passwordEncoder(passwordEncoder)
-                .and()
-                .build();
-    }
+  @Bean
+  public PasswordEncoder passwordEncoder() {
+    return new BCryptPasswordEncoder();
+  }

-    @Bean
-    public CorsConfigurationSource corsConfigurationSource() {
-        CorsConfiguration cfg = new CorsConfiguration();
-        cfg.setAllowedOrigins(List.of(
-                "http://127.0.0.1:8080",
-                "http://127.0.0.1:8081",
-                "http://127.0.0.1:8082",
-                "http://127.0.0.1:3000",
-                "http://127.0.0.1:3001",
-                "http://127.0.0.1",
-                "http://localhost:8080",
-                "http://localhost:8081",
-                "http://localhost:8082",
-                "http://localhost:3000",
-                "http://localhost:3001",
-                "http://localhost",
-                "http://30.211.97.238:3000",
-                "http://30.211.97.238",
-                "http://192.168.7.98",
-                "http://192.168.7.98:3000",
-                "https://petstore.swagger.io",
-                // 允许自建OpenAPI地址
-                "https://docs.open-isle.com",
-                "https://www.docs.open-isle.com",
-                websiteUrl,
-                websiteUrl.replace("://www.", "://")
-        ));
-        cfg.setAllowedMethods(List.of("GET","POST","PUT","DELETE","OPTIONS"));
-        cfg.setAllowedHeaders(List.of("*"));
-        cfg.setAllowCredentials(true);
-        UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
-        source.registerCorsConfiguration("/api/**", cfg);
-        return source;
-    }
+  @Bean
+  public UserDetailsService userDetailsService() {
+    return username ->
+      userRepository
+        .findByUsername(username)
+        .<UserDetails>map(user ->
+          org.springframework.security.core.userdetails.User.withUsername(user.getUsername())
+            .password(user.getPassword())
+            .authorities(user.getRole().name())
+            .build()
+        )
+        .orElseThrow(() -> new UsernameNotFoundException("User not found"));
+  }

-    @Bean
-    public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
-        http.csrf(csrf -> csrf.disable())
-                .cors(Customizer.withDefaults())
-                .headers(h -> h.frameOptions(f -> f.sameOrigin()))
-                .sessionManagement(sm -> sm.sessionCreationPolicy(SessionCreationPolicy.STATELESS))
-            .exceptionHandling(eh -> eh.accessDeniedHandler(customAccessDeniedHandler))
-            .authorizeHttpRequests(auth -> auth
-                    .requestMatchers(HttpMethod.OPTIONS, "/**").permitAll()
-                    .requestMatchers("/api/ws/**", "/api/sockjs/**").permitAll()
-                    .requestMatchers("/api/v3/api-docs/**").permitAll()
-                    .requestMatchers(HttpMethod.POST, "/api/auth/**").permitAll()
-                    .requestMatchers(HttpMethod.GET, "/api/posts/**").permitAll()
-                    .requestMatchers(HttpMethod.GET, "/api/comments/**").permitAll()
-                    .requestMatchers(HttpMethod.GET, "/api/categories/**").permitAll()
-                    .requestMatchers(HttpMethod.GET, "/api/tags/**").permitAll()
-                    .requestMatchers(HttpMethod.GET, "/api/config/**").permitAll()
-                    .requestMatchers(HttpMethod.POST,"/api/auth/google").permitAll()
-                    .requestMatchers(HttpMethod.POST,"/api/auth/reason").permitAll()
-                    .requestMatchers(HttpMethod.GET, "/api/search/**").permitAll()
-                    .requestMatchers(HttpMethod.GET, "/api/users/**").permitAll()
-                    .requestMatchers(HttpMethod.GET, "/api/medals/**").permitAll()
-                    .requestMatchers(HttpMethod.GET, "/api/push/public-key").permitAll()
-                    .requestMatchers(HttpMethod.GET, "/api/reaction-types").permitAll()
-                    .requestMatchers(HttpMethod.GET, "/api/activities/**").permitAll()
-                    .requestMatchers(HttpMethod.GET, "/api/sitemap.xml").permitAll()
-                    .requestMatchers(HttpMethod.GET, "/api/channels").permitAll()
-                    .requestMatchers(HttpMethod.GET, "/api/rss").permitAll()
-                    .requestMatchers(HttpMethod.GET, "/api/online/**").permitAll()
-                    .requestMatchers(HttpMethod.POST, "/api/online/**").permitAll()
-                    .requestMatchers(HttpMethod.GET, "/api/point-goods").permitAll()
-                    .requestMatchers(HttpMethod.POST, "/api/point-goods").permitAll()
-                    .requestMatchers(HttpMethod.POST, "/api/categories/**").hasAuthority("ADMIN")
-                    .requestMatchers(HttpMethod.POST, "/api/tags/**").authenticated()
-                    .requestMatchers(HttpMethod.DELETE, "/api/categories/**").hasAuthority("ADMIN")
-                    .requestMatchers(HttpMethod.DELETE, "/api/tags/**").hasAuthority("ADMIN")
-                    .requestMatchers(HttpMethod.GET, "/api/stats/**").hasAuthority("ADMIN")
-                    .requestMatchers("/api/admin/**").hasAuthority("ADMIN")
-                    .anyRequest().authenticated()
-            )
-            .addFilterBefore(jwtAuthenticationFilter(), UsernamePasswordAuthenticationFilter.class)
-            .addFilterAfter(userVisitFilter(), UsernamePasswordAuthenticationFilter.class);
-        return http.build();
-    }
+  @Bean
+  public AuthenticationManager authenticationManager(
+    HttpSecurity http,
+    PasswordEncoder passwordEncoder,
+    UserDetailsService userDetailsService
+  ) throws Exception {
+    return http
+      .getSharedObject(AuthenticationManagerBuilder.class)
+      .userDetailsService(userDetailsService)
+      .passwordEncoder(passwordEncoder)
+      .and()
+      .build();
+  }

-    @Bean
-    public OncePerRequestFilter jwtAuthenticationFilter() {
-        return new OncePerRequestFilter() {
-            @Override
-            protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException {
-                // 让预检请求直接通过
-                if ("OPTIONS".equalsIgnoreCase(request.getMethod())) {
-                    filterChain.doFilter(request, response);
-                    return;
-                }
-                String authHeader = request.getHeader("Authorization");
-                String uri = request.getRequestURI();
+  @Bean
+  public CorsConfigurationSource corsConfigurationSource() {
+    CorsConfiguration cfg = new CorsConfiguration();
+    cfg.setAllowedOrigins(
+      List.of(
+        "http://127.0.0.1:8080",
+        "http://127.0.0.1:8081",
+        "http://127.0.0.1:8082",
+        "http://127.0.0.1:3000",
+        "http://127.0.0.1:3001",
+        "http://127.0.0.1",
+        "http://localhost:8080",
+        "http://localhost:8081",
+        "http://localhost:8082",
+        "http://localhost:3000",
+        "http://localhost:3001",
+        "http://localhost",
+        "http://30.211.97.238:3000",
+        "http://30.211.97.238",
+        "http://192.168.7.98",
+        "http://192.168.7.98:3000",
+        "https://petstore.swagger.io",
+        // 允许自建OpenAPI地址
+        "https://docs.open-isle.com",
+        "https://www.docs.open-isle.com",
+        websiteUrl,
+        websiteUrl.replace("://www.", "://")
+      )
+    );
+    cfg.setAllowedMethods(List.of("GET", "POST", "PUT", "DELETE", "OPTIONS"));
+    cfg.setAllowedHeaders(List.of("*"));
+    cfg.setAllowCredentials(true);
+    UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
+    source.registerCorsConfiguration("/api/**", cfg);
+    return source;
+  }

-                boolean publicGet = "GET".equalsIgnoreCase(request.getMethod()) &&
-                        (uri.startsWith("/api/posts") || uri.startsWith("/api/comments") ||
-                         uri.startsWith("/api/categories") || uri.startsWith("/api/tags") ||
-                        uri.startsWith("/api/search") || uri.startsWith("/api/users") ||
-                         uri.startsWith("/api/reaction-types") || uri.startsWith("/api/config") ||
-                         uri.startsWith("/api/activities") || uri.startsWith("/api/push/public-key") ||
-                                uri.startsWith("/api/point-goods") || uri.startsWith("/api/channels") ||
-                         uri.startsWith("/api/sitemap.xml") || uri.startsWith("/api/medals") ||
-                         uri.startsWith("/api/rss"));
+  @Bean
+  public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
+    http
+      .csrf(csrf -> csrf.disable())
+      .cors(Customizer.withDefaults())
+      .headers(h -> h.frameOptions(f -> f.sameOrigin()))
+      .sessionManagement(sm -> sm.sessionCreationPolicy(SessionCreationPolicy.STATELESS))
+      .exceptionHandling(eh -> eh.accessDeniedHandler(customAccessDeniedHandler))
+      .authorizeHttpRequests(auth ->
+        auth
+          .requestMatchers(HttpMethod.OPTIONS, "/**")
+          .permitAll()
+          .requestMatchers("/api/ws/**", "/api/sockjs/**")
+          .permitAll()
+          .requestMatchers("/api/v3/api-docs/**")
+          .permitAll()
+          .requestMatchers(HttpMethod.POST, "/api/auth/**")
+          .permitAll()
+          .requestMatchers(HttpMethod.GET, "/api/posts/**")
+          .permitAll()
+          .requestMatchers(HttpMethod.GET, "/api/comments/**")
+          .permitAll()
+          .requestMatchers(HttpMethod.GET, "/api/categories/**")
+          .permitAll()
+          .requestMatchers(HttpMethod.GET, "/api/tags/**")
+          .permitAll()
+          .requestMatchers(HttpMethod.GET, "/api/config/**")
+          .permitAll()
+          .requestMatchers(HttpMethod.POST, "/api/auth/google")
+          .permitAll()
+          .requestMatchers(HttpMethod.POST, "/api/auth/reason")
+          .permitAll()
+          .requestMatchers(HttpMethod.GET, "/api/search/**")
+          .permitAll()
+          .requestMatchers(HttpMethod.GET, "/api/users/**")
+          .permitAll()
+          .requestMatchers(HttpMethod.GET, "/api/medals/**")
+          .permitAll()
+          .requestMatchers(HttpMethod.GET, "/api/push/public-key")
+          .permitAll()
+          .requestMatchers(HttpMethod.GET, "/api/reaction-types")
+          .permitAll()
+          .requestMatchers(HttpMethod.GET, "/api/activities/**")
+          .permitAll()
+          .requestMatchers(HttpMethod.GET, "/api/sitemap.xml")
+          .permitAll()
+          .requestMatchers(HttpMethod.GET, "/api/channels")
+          .permitAll()
+          .requestMatchers(HttpMethod.GET, "/api/rss")
+          .permitAll()
+          .requestMatchers(HttpMethod.GET, "/api/online/**")
+          .permitAll()
+          .requestMatchers(HttpMethod.POST, "/api/online/**")
+          .permitAll()
+          .requestMatchers(HttpMethod.GET, "/api/point-goods")
+          .permitAll()
+          .requestMatchers(HttpMethod.POST, "/api/point-goods")
+          .permitAll()
+          .requestMatchers(HttpMethod.POST, "/api/categories/**")
+          .hasAuthority("ADMIN")
+          .requestMatchers(HttpMethod.POST, "/api/tags/**")
+          .authenticated()
+          .requestMatchers(HttpMethod.DELETE, "/api/categories/**")
+          .hasAuthority("ADMIN")
+          .requestMatchers(HttpMethod.DELETE, "/api/tags/**")
+          .hasAuthority("ADMIN")
+          .requestMatchers(HttpMethod.GET, "/api/stats/**")
+          .hasAuthority("ADMIN")
+          .requestMatchers("/api/admin/**")
+          .hasAuthority("ADMIN")
+          .anyRequest()
+          .authenticated()
+      )
+      .addFilterBefore(jwtAuthenticationFilter(), UsernamePasswordAuthenticationFilter.class)
+      .addFilterAfter(userVisitFilter(), UsernamePasswordAuthenticationFilter.class);
+    return http.build();
+  }

-                if (authHeader != null && authHeader.startsWith("Bearer ")) {
-                    String token = authHeader.substring(7);
-                    try {
-                        String username = jwtService.validateAndGetSubject(token);
-                        UserDetails userDetails = userDetailsService().loadUserByUsername(username);
-                        UsernamePasswordAuthenticationToken authToken = new UsernamePasswordAuthenticationToken(
-                                userDetails, null, userDetails.getAuthorities());
-                        org.springframework.security.core.context.SecurityContextHolder.getContext().setAuthentication(authToken);
-                    } catch (Exception e) {
-                        response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
-                        response.setContentType("application/json");
-                        response.getWriter().write("{\"error\": \"Invalid or expired token\"}");
-                        return;
-                    }
-                } else if (!uri.startsWith("/api/auth") && !publicGet
-                        && !uri.startsWith("/api/ws") && !uri.startsWith("/api/sockjs")
-                        && !uri.startsWith("/api/v3/api-docs")
-                        && !uri.startsWith("/api/online")) {
-                    response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
-                    response.setContentType("application/json");
-                    response.getWriter().write("{\"error\": \"Missing token\"}");
-                    return;
-                }
+  @Bean
+  public OncePerRequestFilter jwtAuthenticationFilter() {
+    return new OncePerRequestFilter() {
+      @Override
+      protected void doFilterInternal(
+        HttpServletRequest request,
+        HttpServletResponse response,
+        FilterChain filterChain
+      ) throws ServletException, IOException {
+        // 让预检请求直接通过
+        if ("OPTIONS".equalsIgnoreCase(request.getMethod())) {
+          filterChain.doFilter(request, response);
+          return;
+        }
+        String authHeader = request.getHeader("Authorization");
+        String uri = request.getRequestURI();

-                filterChain.doFilter(request, response);
-            }
-        };
-    }
+        boolean publicGet =
+          "GET".equalsIgnoreCase(request.getMethod()) &&
+          (uri.startsWith("/api/posts") ||
+            uri.startsWith("/api/comments") ||
+            uri.startsWith("/api/categories") ||
+            uri.startsWith("/api/tags") ||
+            uri.startsWith("/api/search") ||
+            uri.startsWith("/api/users") ||
+            uri.startsWith("/api/reaction-types") ||
+            uri.startsWith("/api/config") ||
+            uri.startsWith("/api/activities") ||
+            uri.startsWith("/api/push/public-key") ||
+            uri.startsWith("/api/point-goods") ||
+            uri.startsWith("/api/channels") ||
+            uri.startsWith("/api/sitemap.xml") ||
+            uri.startsWith("/api/medals") ||
+            uri.startsWith("/api/rss"));

-    @Bean
-    public OncePerRequestFilter userVisitFilter() {
-        return new OncePerRequestFilter() {
-            @Override
-            protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException {
-                var auth = org.springframework.security.core.context.SecurityContextHolder.getContext().getAuthentication();
-                if (auth != null && auth.isAuthenticated() && !(auth instanceof org.springframework.security.authentication.AnonymousAuthenticationToken)) {
-                    String key = CachingConfig.VISIT_CACHE_NAME+":"+ LocalDate.now();
-                    redisTemplate.opsForSet().add(key, auth.getName());
-                }
-                filterChain.doFilter(request, response);
-            }
-        };
-    }
+        if (authHeader != null && authHeader.startsWith("Bearer ")) {
+          String token = authHeader.substring(7);
+          try {
+            String username = jwtService.validateAndGetSubject(token);
+            UserDetails userDetails = userDetailsService().loadUserByUsername(username);
+            UsernamePasswordAuthenticationToken authToken = new UsernamePasswordAuthenticationToken(
+              userDetails,
+              null,
+              userDetails.getAuthorities()
+            );
+            org.springframework.security.core.context.SecurityContextHolder.getContext().setAuthentication(
+              authToken
+            );
+          } catch (Exception e) {
+            response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
+            response.setContentType("application/json");
+            response.getWriter().write("{\"error\": \"Invalid or expired token\"}");
+            return;
+          }
+        } else if (
+          !uri.startsWith("/api/auth") &&
+          !publicGet &&
+          !uri.startsWith("/api/ws") &&
+          !uri.startsWith("/api/sockjs") &&
+          !uri.startsWith("/api/v3/api-docs") &&
+          !uri.startsWith("/api/online")
+        ) {
+          response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
+          response.setContentType("application/json");
+          response.getWriter().write("{\"error\": \"Missing token\"}");
+          return;
+        }
+
+        filterChain.doFilter(request, response);
+      }
+    };
+  }
+
+  @Bean
+  public OncePerRequestFilter userVisitFilter() {
+    return new OncePerRequestFilter() {
+      @Override
+      protected void doFilterInternal(
+        HttpServletRequest request,
+        HttpServletResponse response,
+        FilterChain filterChain
+      ) throws ServletException, IOException {
+        var auth =
+          org.springframework.security.core.context.SecurityContextHolder.getContext().getAuthentication();
+        if (
+          auth != null &&
+          auth.isAuthenticated() &&
+          !(auth instanceof
+              org.springframework.security.authentication.AnonymousAuthenticationToken)
+        ) {
+          String key = CachingConfig.VISIT_CACHE_NAME + ":" + LocalDate.now();
+          redisTemplate.opsForSet().add(key, auth.getName());
+        }
+        filterChain.doFilter(request, response);
+      }
+    };
+  }
 }
--- a/backend/src/main/java/com/openisle/config/ShardInfo.java
+++ b/backend/src/main/java/com/openisle/config/ShardInfo.java
@@ -8,7 +8,8 @@ import lombok.NoArgsConstructor;
@AllArgsConstructor
@NoArgsConstructor
 public class ShardInfo {
-    private int shardIndex;
-    private String queueName;
-    private String routingKey;
-}
+
+  private int shardIndex;
+  private String queueName;
+  private String routingKey;
+}
--- a/backend/src/main/java/com/openisle/config/ShardingStrategy.java
+++ b/backend/src/main/java/com/openisle/config/ShardingStrategy.java
@@ -1,84 +1,87 @@
 package com.openisle.config;

+import java.util.Map;
+import java.util.concurrent.ConcurrentHashMap;
+import java.util.concurrent.atomic.AtomicLong;
+import java.util.stream.Collectors;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.beans.factory.annotation.Value;
 import org.springframework.stereotype.Component;

-import java.util.concurrent.ConcurrentHashMap;
-import java.util.concurrent.atomic.AtomicLong;
-import java.util.Map;
-import java.util.stream.Collectors;
-
@Component
@Slf4j
 public class ShardingStrategy {
-    
-    // 固定为16以匹配RabbitMQConfig中的十六进制分片逻辑
-    private static final int QUEUE_COUNT = 16;
-    
-    // 分片分布统计
-    private final Map<Integer, AtomicLong> shardCounts = new ConcurrentHashMap<>();
-    
-    /**
-     * 根据用户名获取分片信息（基于哈希值首字符）
-     */
-    public ShardInfo getShardInfo(String username) {
-        if (username == null || username.isEmpty()) {
-            // 空用户名默认分到第0个分片
-            return getShardInfoByIndex(0);
-        }
-        
-        // 计算用户名的哈希值并转为十六进制字符串
-        String hash = Integer.toHexString(Math.abs(username.hashCode()));
-        
-        // 取哈希值的第一个字符 (0-9, a-f)
-        char firstChar = hash.charAt(0);
-        
-        // 十六进制字符映射到队列
-        int shard = getShardFromHexChar(firstChar);
-        recordShardUsage(shard);
-        
-        log.debug("Username '{}' -> hash '{}' -> firstChar '{}' -> shard {}", 
-                 username, hash, firstChar, shard);
-        
-        return getShardInfoByIndex(shard);
-    }
-    
-    /**
-     * 将十六进制字符映射到分片索引
-     */
-    private int getShardFromHexChar(char hexChar) {
-        int charValue;
-        if (hexChar >= '0' && hexChar <= '9') {
-            charValue = hexChar - '0'; // 0-9
-        } else if (hexChar >= 'a' && hexChar <= 'f') {
-            charValue = hexChar - 'a' + 10; // 10-15
-        } else {
-            // 异常情况，默认为0
-            charValue = 0;
-        }
-        
-        // 映射到队列数量范围内
-        return charValue % QUEUE_COUNT;
-    }
-    
-    /**
-     * 根据分片索引获取分片信息
-     */
-    private ShardInfo getShardInfoByIndex(int shard) {
-        String shardKey = Integer.toHexString(shard);
-        return new ShardInfo(
-            shard,
-            "notifications-queue-" + shardKey,
-            "notifications.shard." + shardKey
-        );
-    }
-    
-    /**
-     * 记录分片使用统计
-     */
-    private void recordShardUsage(int shard) {
-        shardCounts.computeIfAbsent(shard, k -> new AtomicLong(0)).incrementAndGet();
+
+  // 固定为16以匹配RabbitMQConfig中的十六进制分片逻辑
+  private static final int QUEUE_COUNT = 16;
+
+  // 分片分布统计
+  private final Map<Integer, AtomicLong> shardCounts = new ConcurrentHashMap<>();
+
+  /**
+   * 根据用户名获取分片信息（基于哈希值首字符）
+   */
+  public ShardInfo getShardInfo(String username) {
+    if (username == null || username.isEmpty()) {
+      // 空用户名默认分到第0个分片
+      return getShardInfoByIndex(0);
    }

-}
+    // 计算用户名的哈希值并转为十六进制字符串
+    String hash = Integer.toHexString(Math.abs(username.hashCode()));
+
+    // 取哈希值的第一个字符 (0-9, a-f)
+    char firstChar = hash.charAt(0);
+
+    // 十六进制字符映射到队列
+    int shard = getShardFromHexChar(firstChar);
+    recordShardUsage(shard);
+
+    log.debug(
+      "Username '{}' -> hash '{}' -> firstChar '{}' -> shard {}",
+      username,
+      hash,
+      firstChar,
+      shard
+    );
+
+    return getShardInfoByIndex(shard);
+  }
+
+  /**
+   * 将十六进制字符映射到分片索引
+   */
+  private int getShardFromHexChar(char hexChar) {
+    int charValue;
+    if (hexChar >= '0' && hexChar <= '9') {
+      charValue = hexChar - '0'; // 0-9
+    } else if (hexChar >= 'a' && hexChar <= 'f') {
+      charValue = hexChar - 'a' + 10; // 10-15
+    } else {
+      // 异常情况，默认为0
+      charValue = 0;
+    }
+
+    // 映射到队列数量范围内
+    return charValue % QUEUE_COUNT;
+  }
+
+  /**
+   * 根据分片索引获取分片信息
+   */
+  private ShardInfo getShardInfoByIndex(int shard) {
+    String shardKey = Integer.toHexString(shard);
+    return new ShardInfo(
+      shard,
+      "notifications-queue-" + shardKey,
+      "notifications.shard." + shardKey
+    );
+  }
+
+  /**
+   * 记录分片使用统计
+   */
+  private void recordShardUsage(int shard) {
+    shardCounts.computeIfAbsent(shard, k -> new AtomicLong(0)).incrementAndGet();
+  }
+}
--- a/backend/src/main/java/com/openisle/config/SpringDocProperties.java
+++ b/backend/src/main/java/com/openisle/config/SpringDocProperties.java
@@ -10,11 +10,13 @@ import org.springframework.stereotype.Component;
@Component
@ConfigurationProperties(prefix = "springdoc.api-docs")
 public class SpringDocProperties {
-    private List<ServerConfig> servers = new ArrayList<>();

-    @Data
-    public static class ServerConfig {
-        private String url;
-        private String description;
-    }
+  private List<ServerConfig> servers = new ArrayList<>();
+
+  @Data
+  public static class ServerConfig {
+
+    private String url;
+    private String description;
+  }
 }
--- a/backend/src/main/java/com/openisle/config/SystemUserInitializer.java
+++ b/backend/src/main/java/com/openisle/config/SystemUserInitializer.java
@@ -14,23 +14,27 @@ import org.springframework.stereotype.Component;
@Component
@RequiredArgsConstructor
 public class SystemUserInitializer implements CommandLineRunner {
-    private final UserRepository userRepository;
-    private final PasswordEncoder passwordEncoder;

-    @Override
-    public void run(String... args) {
-        userRepository.findByUsername("system").orElseGet(() -> {
-            User system = new User();
-            system.setUsername("system");
-            system.setEmail("system@openisle.local");
-            // todo(tim): raw password 采用环境变量
-            system.setPassword(passwordEncoder.encode("system"));
-            system.setRole(Role.USER);
-            system.setVerified(true);
-            system.setApproved(true);
-            system.setAvatar("https://openisle-1307107697.cos.ap-guangzhou.myqcloud.com/assert/image.png");
-            return userRepository.save(system);
-        });
-    }
+  private final UserRepository userRepository;
+  private final PasswordEncoder passwordEncoder;
+
+  @Override
+  public void run(String... args) {
+    userRepository
+      .findByUsername("system")
+      .orElseGet(() -> {
+        User system = new User();
+        system.setUsername("system");
+        system.setEmail("system@openisle.local");
+        // todo(tim): raw password 采用环境变量
+        system.setPassword(passwordEncoder.encode("system"));
+        system.setRole(Role.USER);
+        system.setVerified(true);
+        system.setApproved(true);
+        system.setAvatar(
+          "https://openisle-1307107697.cos.ap-guangzhou.myqcloud.com/assert/image.png"
+        );
+        return userRepository.save(system);
+      });
+  }
 }
-