CaIon 3f8a50cf88 feat(audit): complete token and quota operation records ...

Record successful and failed API token operations with safe target metadata. Capture quota adjustments in a transaction, synchronize committed cache differences, and correlate audit and top-up records.

Show operation targets, changes, quota balances, and failure details consistently across audit and usage logs, with translations for all seven locales.

Validated controller, middleware, and model tests; 78 frontend tests; typecheck and lint; real SQLite 3.50.4, MySQL 8.4.11, and PostgreSQL 16.15 with shared and separate log databases.

2026-09-06 22:49:01 +08:00

..

audit.go

feat(audit): complete token and quota operation records

2026-09-06 22:49:01 +08:00

auth_origin_test.go

refactor(auth): replace dashboard sessions with stateless tokens and session control (#6329)

2026-07-20 16:48:43 +08:00

auth_origin.go

refactor(auth): replace dashboard sessions with stateless tokens and session control (#6329)

2026-07-20 16:48:43 +08:00

auth_test.go

fix(security): bind verification proofs to sessions and actions

2026-09-06 22:48:59 +08:00

auth.go

feat(security): add access token management and audit logs

2026-09-06 22:48:58 +08:00

body_cleanup.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

cache.go

feat: Improve backend multilingual support

2026-02-12 14:29:56 +08:00

cors.go

feat(session): support opt-in Secure session cookies

2026-07-05 13:53:16 +08:00

disable-cache.go

feat: add disable cache middleware

2025-08-27 01:30:01 +08:00

distributor_test.go

feat(relay): explicit @ model modifiers and canonical billing identity

2026-09-04 20:45:52 +08:00

distributor.go

feat(relay): explicit @ model modifiers and canonical billing identity

2026-09-04 20:45:52 +08:00

email-verification-rate-limit.go

refactor(auth): replace dashboard sessions with stateless tokens and session control (#6329)

2026-07-20 16:48:43 +08:00

gzip.go

feat: support zstd request decompression (#6545)

2026-07-31 11:17:55 +08:00

header_nav_test.go

refactor(auth): replace dashboard sessions with stateless tokens and session control (#6329)

2026-07-20 16:48:43 +08:00

header_nav.go

fix: enforce header nav access control for public modules (#4889)

2026-05-16 14:54:47 +08:00

i18n.go

refactor: extract protocol conversion layer into standalone relaykit module (#6369)

2026-07-27 15:56:21 +08:00

logger.go

fix(security): bind verification proofs to sessions and actions

2026-09-06 22:48:59 +08:00

model_rate_limit_test.go

refactor(auth): replace dashboard sessions with stateless tokens and session control (#6329)

2026-07-20 16:48:43 +08:00

model-rate-limit.go

refactor: deprecate int32 (#7025)

2026-08-26 20:57:54 +08:00

performance.go

refactor: extract protocol conversion layer into standalone relaykit module (#6369)

2026-07-27 15:56:21 +08:00

rate_limit_test.go

fix(auth): keep login state on rate-limited or failing token refresh

2026-07-21 12:39:29 +08:00

rate-limit.go

feat(rate-limit): add user critical rate limit middleware for access token and aff transfer routes

2026-08-07 16:01:22 +08:00

recover.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

request_body_limit.go

fix: limit anonymous request body (#5244)

2026-06-05 11:39:29 +08:00

request-id.go

feat: support ClickHouse log database (#5663)

2026-06-22 18:41:26 +08:00

secure_verification.go

feat(security): harden account binding and password changes

2026-09-06 22:49:00 +08:00

stats.go

🎨 style(go): format entire codebase

2025-08-31 13:08:34 +08:00

task_artifact_access_test.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

task_artifact_access.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

task_plugin_model.go

feat(task): resolve channel-mapped aliases and case variants for plugin models

2026-08-30 19:13:51 +08:00

task_plugin_origin_task_test.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

task_plugin_test.go

feat(task): resolve channel-mapped aliases and case variants for plugin models

2026-08-30 19:13:51 +08:00

task_plugin.go

feat(task): resolve channel-mapped aliases and case variants for plugin models

2026-08-30 19:13:51 +08:00

token_auto_groups_context_test.go

Feat/auto group (#6590)

2026-08-01 23:19:01 +08:00

trusted_proxies_test.go

refactor: rename trusted_proxies package to middleware and update function calls

2026-07-27 16:48:23 +08:00

trusted_proxies.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

turnstile-check.go

refactor(auth): replace dashboard sessions with stateless tokens and session control (#6329)

2026-07-20 16:48:43 +08:00

utils.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00