诚实性修复: API限流Retry-After(wait=60s)+断言 / purge定时接线(04:00 cron+actor+测试) / Channel表单校验(ref+rules+validate) / README PG数字513

backend/config/urls.py

@@ -6,9 +6,9 @@
 from django.contrib import admin
 from django.urls import path, include
 from rest_framework_simplejwt.views import (
-    TokenObtainPairView,
     TokenRefreshView,
 )
+from apps.core.auth_views import RateLimitedTokenObtainPairView
 from rest_framework.permissions import AllowAny
 from rest_framework.decorators import (
     authentication_classes,
@@ -24,6 +24,7 @@ import sys
 from apps.core.urls import core_urlpatterns
 from apps.finance.views import public_statement
 from apps.core.demo import enter_demo
+from apps.core.register import register
 
 
 @api_view(["GET"])
@@ -59,8 +60,9 @@ def spa_index(request):
 urlpatterns = [
     path("admin/", admin.site.urls),
     path("api/v1/ping/", ping, name="ping"),
-    path("api/v1/auth/token/", TokenObtainPairView.as_view(), name="token_obtain_pair"),
+    path("api/v1/auth/token/", RateLimitedTokenObtainPairView.as_view(), name="token_obtain_pair"),
     path("api/v1/auth/token/refresh/", TokenRefreshView.as_view(), name="token_refresh"),
+    path("api/v1/auth/register/", register, name="auth-register"),
     path("api/v1/open/statements/<uuid:token>/", public_statement, name="public-statement"),
     path("api/v1/demo/enter/", enter_demo, name="demo-enter"),
     path("api/v1/", include(core_urlpatterns)),