feat(core): harden sessions settlement and credit activity

routes/api/v1/admin/core.php

@@ -2,6 +2,7 @@
 
 use Illuminate\Support\Facades\Route;
 use App\Http\Controllers\Api\V1\Admin\Auth\MeController;
+use App\Http\Controllers\Api\V1\Admin\Auth\LogoutController;
 use App\Http\Controllers\Api\V1\Admin\Audit\AuditLogIndexController;
 use App\Http\Controllers\Api\V1\Admin\Dashboard\AdminDashboardAnalyticsController;
 use App\Http\Controllers\Api\V1\Admin\Dashboard\AdminDashboardController;
@@ -30,6 +31,10 @@ Route::get('auth/me', MeController::class)
     ->middleware('admin.api-resource')
     ->name('api.v1.admin.auth.me');
 
+Route::post('auth/logout', LogoutController::class)
+    ->middleware('admin.api-resource')
+    ->name('api.v1.admin.auth.logout');
+
 // 审计日志
 Route::middleware('admin.api-resource')
     ->get('audit-logs', AuditLogIndexController::class)

routes/api/v1/player.php

@@ -51,7 +51,7 @@ Route::middleware('lottery.player')->group(function (): void {
                 ->where('ticket_no', 'TK[0-9]+')
                 ->name('items.show');
             Route::get('draws/{draw_no}/my-match', TicketDrawMyMatchController::class)
-                ->where('draw_no', '[0-9]{8}-[0-9]{3}')
+                ->where('draw_no', '[0-9]{8}-[0-9]{3,}')
                 ->name('draws.my-match');
         });
 

routes/api/v1/public.php

@@ -4,14 +4,14 @@ use Illuminate\Support\Facades\Route;
 use App\Http\Controllers\Api\V1\HealthController;
 use App\Http\Controllers\Api\V1\Draw\DrawCurrentController;
 use App\Http\Controllers\Api\V1\Draw\DrawResultShowController;
+use App\Http\Controllers\Api\V1\Setting\SettingIndexController;
 use App\Http\Controllers\Api\V1\Draw\DrawResultsIndexController;
 use App\Http\Controllers\Api\V1\Currency\CurrencyIndexController;
 use App\Http\Controllers\Api\V1\Jackpot\JackpotSummaryController;
+use App\Http\Controllers\Api\V1\Player\PlayerAuthLoginController;
+use App\Http\Controllers\Api\V1\Player\PlayerAuthCaptchaController;
 use App\Http\Controllers\Api\V1\Play\PlayEffectiveCatalogController;
 use App\Http\Controllers\Api\V1\Player\PingController as PlayerPingController;
-use App\Http\Controllers\Api\V1\Player\PlayerAuthCaptchaController;
-use App\Http\Controllers\Api\V1\Player\PlayerAuthLoginController;
-use App\Http\Controllers\Api\V1\Setting\SettingIndexController;
 use App\Http\Controllers\Api\V1\Integration\IntegrationRuntimeOriginsController;
 
 /**
@@ -28,7 +28,7 @@ Route::get('currencies', CurrencyIndexController::class)->name('api.v1.currencie
 Route::get('draw/current', DrawCurrentController::class)->name('api.v1.draw.current');
 Route::get('draw/results', DrawResultsIndexController::class)->name('api.v1.draw.results');
 Route::get('draw/results/{draw_no}', DrawResultShowController::class)
-    ->where('draw_no', '[0-9]{8}-[0-9]{3}')
+    ->where('draw_no', '[0-9]{8}-[0-9]{3,}')
     ->name('api.v1.draw.results.show');
 
 // 奖池水位（公开）