CaIon 6f23339906 feat(auth): unify login verification and secure account deletion ...

Treat TOTP and Passkey as alternative enrolled factors across login and
sensitive account operations. Gate every primary login transport before
issuing a session, require WebAuthn user verification, and consume login
challenges atomically with session creation.

Reuse the shared verification UI for login, 2FA management, and account
deletion. Require scoped, single-use deletion proof; recheck the session
inside the deletion transaction and revoke all sessions afterward.

Validation: controller/service/model/middleware tests; real SQLite 3.50.4,
MySQL 8.4.11, and PostgreSQL 16.15 security regressions; frontend tests,
TypeScript, targeted lint, formatting, and production build.

Deploy the frontend and all backend nodes together. No schema changes.

2026-09-06 22:49:02 +08:00

..

authz

feat(security): add access token management and audit logs

2026-09-06 22:48:58 +08:00

passkey

feat(auth): unify login verification and secure account deletion

2026-09-06 22:49:02 +08:00

account_security.go

feat(security): harden account binding and password changes

2026-09-06 22:49:00 +08:00

audio.go

feat: gemini audio input billing

2025-06-07 12:26:23 +08:00

auth_cleanup.go

refactor(auth): replace dashboard sessions with stateless tokens and session control (#6329)

2026-07-20 16:48:43 +08:00

auth_session_test.go

refactor(auth): replace dashboard sessions with stateless tokens and session control (#6329)

2026-07-20 16:48:43 +08:00

auth_session.go

feat(auth): unify login verification and secure account deletion

2026-09-06 22:49:02 +08:00

auth_token_test.go

fix(security): bind verification proofs to sessions and actions

2026-09-06 22:48:59 +08:00

auth_token.go

fix(security): bind verification proofs to sessions and actions

2026-09-06 22:48:59 +08:00

billing_session.go

feat(relay): hosted-tool conversion fidelity, reasoning normalization, and billing usage integrity (#7137)

2026-09-01 21:53:35 +08:00

billing_usage.go

fix(logs): isolate privileged metadata

2026-09-03 11:28:57 +08:00

billing.go

refactor: extract protocol conversion layer into standalone relaykit module (#6369)

2026-07-27 15:56:21 +08:00

channel_affinity_template_test.go

feat: 支持配置渠道被禁用后是否清空渠道粘性 (#5306)

2026-06-05 11:30:29 +08:00

channel_affinity_usage_cache_test.go

refactor: extract protocol conversion layer into standalone relaykit module (#6369)

2026-07-27 15:56:21 +08:00

channel_affinity.go

fix(logs): isolate privileged metadata

2026-09-03 11:28:57 +08:00

channel_select_auto_groups_test.go

Feat/auto group (#6590)

2026-08-01 23:19:01 +08:00

channel_select_test.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

channel_select.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

channel.go

refactor: extract protocol conversion layer into standalone relaykit module (#6369)

2026-07-27 15:56:21 +08:00

codex_channel_models.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

codex_credential_refresh_task.go

fix(channel): improve proxy client compatibility and cache lifecycle (#6157)

2026-07-20 18:11:22 +08:00

codex_credential_refresh.go

fix(channel): improve proxy client compatibility and cache lifecycle (#6157)

2026-07-20 18:11:22 +08:00

codex_models.go

feat(channel): support Codex upstream model discovery (#6184)

2026-07-18 13:04:16 +08:00

codex_oauth.go

chore: update Codex channel (#5461)

2026-06-12 23:45:15 +08:00

codex_wham_usage.go

refactor: codex usage ui (#5595)

2026-06-19 16:07:32 +08:00

convert_test.go

refactor: extract protocol conversion layer into standalone relaykit module (#6369)

2026-07-27 15:56:21 +08:00

convert.go

refactor: extract protocol conversion layer into standalone relaykit module (#6369)

2026-07-27 15:56:21 +08:00

download.go

feat(ssrf): implement SSRF protection in HTTP clients and validation functions

2026-07-06 14:52:01 +08:00

email_binding.go

feat(security): harden account binding and password changes

2026-09-06 22:49:00 +08:00

epay.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

error_test.go

refactor: extract protocol conversion layer into standalone relaykit module (#6369)

2026-07-27 15:56:21 +08:00

error.go

refactor: extract protocol conversion layer into standalone relaykit module (#6369)

2026-07-27 15:56:21 +08:00

file_decoder.go

refactor: extract protocol conversion layer into standalone relaykit module (#6369)

2026-07-27 15:56:21 +08:00

file_service.go

refactor: extract protocol conversion layer into standalone relaykit module (#6369)

2026-07-27 15:56:21 +08:00

funding_source.go

fix: harden concurrent quota and status updates

2026-08-11 22:03:47 +08:00

group_auto_groups_test.go

Feat/auto group (#6590)

2026-08-01 23:19:01 +08:00

group.go

Feat/auto group (#6590)

2026-08-01 23:19:01 +08:00

http_client_transport_test.go

feat: add per-channel HTTP transport controls

2026-07-27 21:41:13 +08:00

http_client.go

fix(relay): bound the wait for upstream response headers (fixes unbounded heap growth → OOM) (#6949)

2026-08-30 21:18:41 +08:00

http_transport_policy.go

feat: add per-channel HTTP transport controls

2026-07-27 21:41:13 +08:00

http_transport_sharded.go

feat: add per-channel HTTP transport controls

2026-07-27 21:41:13 +08:00

http.go

feat: track upstream request ID and prevent response header override

2026-05-12 21:53:54 +08:00

image.go

feat: add HEIC/HEIF image format support

2026-04-02 16:40:45 +08:00

log_info_generate.go

fix(logs): isolate privileged metadata

2026-09-03 11:28:57 +08:00

login_verification.go

feat(auth): unify login verification and secure account deletion

2026-09-06 22:49:02 +08:00

midjourney.go

fix(logs): isolate privileged metadata

2026-09-03 11:28:57 +08:00

notify-limit.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

oauth_verification.go

fix(security): bind verification proofs to sessions and actions

2026-09-06 22:48:59 +08:00

openai_chat_responses_compat.go

refactor: extract protocol conversion layer into standalone relaykit module (#6369)

2026-07-27 15:56:21 +08:00

openai_chat_responses_mode.go

refactor: extract protocol conversion layer into standalone relaykit module (#6369)

2026-07-27 15:56:21 +08:00

protected_fetch_client_test.go

feat(ssrf): implement SSRF protection in HTTP clients and validation functions

2026-07-06 14:52:01 +08:00

protected_fetch_client.go

feat(ssrf): implement SSRF protection in HTTP clients and validation functions

2026-07-06 14:52:01 +08:00

quota_saturation_test.go

fix(logs): isolate privileged metadata

2026-09-03 11:28:57 +08:00

quota.go

feat(relay): hosted-tool conversion fidelity, reasoning normalization, and billing usage integrity (#7137)

2026-09-01 21:53:35 +08:00

rankings.go

feat(rankings): remove 'all' period option from rankings and related components

2026-06-18 17:56:45 +08:00

request_converter.go

feat(relay): hosted-tool conversion fidelity, reasoning normalization, and billing usage integrity (#7137)

2026-09-01 21:53:35 +08:00

response_converter.go

feat(relay): hosted-tool conversion fidelity, reasoning normalization, and billing usage integrity (#7137)

2026-09-01 21:53:35 +08:00

return_path_test.go

refactor(auth): replace dashboard sessions with stateless tokens and session control (#6329)

2026-07-20 16:48:43 +08:00

return_path.go

refactor(auth): replace dashboard sessions with stateless tokens and session control (#6329)

2026-07-20 16:48:43 +08:00

security_verification.go

feat(auth): unify login verification and secure account deletion

2026-09-06 22:49:02 +08:00

sensitive.go

refactor: extract protocol conversion layer into standalone relaykit module (#6369)

2026-07-27 15:56:21 +08:00

str.go

feat: 优化ac自动机

2025-08-15 16:54:26 +08:00

subscription_reset_task.go

✨ feat: add subscription billing system (#2808)

2026-02-03 17:40:43 +08:00

system_instance.go

feat: add system instance info panel (#5716)

2026-06-24 19:16:56 +08:00

system_task_test.go

feat: add system task runner (#5680)

2026-06-24 17:16:21 +08:00

system_task.go

feat: add system task runner (#5680)

2026-06-24 17:16:21 +08:00

task_artifact_access_test.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

task_artifact_access.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

task_artifact_store_test.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

task_artifact_store.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

task_billing_test.go

feat(task): give polling hooks a real query context, host HTTP classification, and bounded poll failures

2026-09-03 14:37:47 +08:00

task_billing.go

refactor(logs): simplify LogOther projection and dedupe sensitive keys

2026-09-03 14:37:47 +08:00

task_plugin_audit.go

fix(logs): isolate privileged metadata

2026-09-03 11:28:57 +08:00

task_plugin_view_test.go

feat(task): give polling hooks a real query context, host HTTP classification, and bounded poll failures

2026-09-03 14:37:47 +08:00

task_plugin_view.go

feat(task): replace built-in task adaptors with a sandboxed JS plugin system (#7076)

2026-08-29 18:51:57 +08:00

task_polling_test.go

feat(task): give polling hooks a real query context, host HTTP classification, and bounded poll failures

2026-09-03 14:37:47 +08:00

task_polling.go

feat(task): give polling hooks a real query context, host HTTP classification, and bounded poll failures

2026-09-03 14:37:47 +08:00

task.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

text_quota_test.go

refactor(logs): simplify LogOther projection and dedupe sensitive keys

2026-09-03 14:37:47 +08:00

text_quota.go

fix(logs): isolate privileged metadata

2026-09-03 11:28:57 +08:00

tiered_settle_test.go

fix(billing): harden tiered retry group-switch billing (#6570)

2026-08-01 09:35:51 +08:00

tiered_settle.go

refactor: deprecate int32 (#7025)

2026-08-26 20:57:54 +08:00

token_counter.go

feat(relay): hosted-tool conversion fidelity, reasoning normalization, and billing usage integrity (#7137)

2026-09-01 21:53:35 +08:00

token_estimator.go

feat(token_estimator): add concurrency support for multipliers retrieval

2025-12-02 21:38:58 +08:00

tokenizer.go

feat: refactor token estimation logic

2025-12-02 21:34:39 +08:00

twofa.go

fix(security): bind verification proofs to sessions and actions

2026-09-06 22:48:59 +08:00

usage_helpr.go

refactor: extract protocol conversion layer into standalone relaykit module (#6369)

2026-07-27 15:56:21 +08:00

user_notify.go

refactor: extract protocol conversion layer into standalone relaykit module (#6369)

2026-07-27 15:56:21 +08:00

violation_fee.go

fix(logs): isolate privileged metadata

2026-09-03 11:28:57 +08:00

waffo_pancake.go

fix(payment): hide classic Waffo Pancake settings (#5085)

2026-05-24 16:37:43 +08:00

webhook.go

refactor: extract protocol conversion layer into standalone relaykit module (#6369)

2026-07-27 15:56:21 +08:00