备份：大改造前的完整版本 - 修复合同细节/付款节点/文件上传/施工管理/项目保存等BUG

backend/app.js

@@ -27,8 +27,8 @@ const corsOptions = {
   allowedHeaders: ['Content-Type', 'Authorization']
 };
 app.use(cors(corsOptions));
-app.use(express.json());
-app.use(express.urlencoded({ extended: true }));
+app.use(express.json({ limit: '50mb' }));
+app.use(express.urlencoded({ extended: true, limit: '50mb' }));
 
 // 静态文件服务 - 前端应用
 app.use(express.static(path.join(__dirname, '../frontend/dist')));
@@ -62,7 +62,7 @@ app.use('/api/health', require('./routes/health'));
 app.use('/api/logistics-companies', require('./routes/logistics-companies'));
 app.use('/api/logistics', require('./routes/logistics'));
 app.use('/api/payment-execution', require('./routes/payment-execution'));
-app.use('/api/verifications', require('./routes/verifications-new'));
+app.use('/api/verifications-new', require('./routes/verifications-new'));
 app.use('/api/returns', require('./routes/returns'));
 app.use('/api/project-materials', require('./routes/project-materials'));
 
@@ -70,13 +70,14 @@ app.get('*', (req, res) => {
   res.sendFile(path.join(__dirname, '../frontend/dist/index.html'));
 });
 
-// 错误处理中间件
+// 错误处理中间件 - 生产环境隐藏内部错误详情
 app.use((err, req, res, next) => {
-  console.error(err.stack);
-  res.status(500).json({
+  console.error('[ERROR]', err.message || err);
+  const isDev = process.env.NODE_ENV === 'development';
+  res.status(err.status || 500).json({
     success: false,
-    message: '服务器内部错误',
-    error: process.env.NODE_ENV === 'development' ? err.message : undefined
+    message: isDev ? (err.message || '服务器内部错误') : '服务器内部错误',
+    ...(isDev && { stack: err.stack })
   });
 });
 
@@ -103,10 +104,6 @@ app.listen(PORT, () => {
     - 报销管理: /api/reimbursements
     - 财务统计: /api/finance-stats
 
-    👤 测试账号:
-    - 用户名: admin
-    - 密码: X123c321@
-
     ✅ 所有API已就绪
     ✅ 前端应用已集成
     ✅ 数据库已连接