CaIon 5fc35e28a2 fix(user): harden account email and password handling ...

- normalize emails (trim + lowercase) and enforce uniqueness across
  registration, OAuth auto-registration, and email binding
- serialize concurrent writers on the same normalized email within a
  transaction to avoid duplicate accounts
- resolve password reset to a single matching account and reject
  ambiguous or absent matches
- require an existing password before self-service password change and
  reject login for accounts without a usable password

2026-07-05 13:15:41 +08:00

..

audit.go

feat: better admin permissions (#5755)

2026-06-27 17:01:59 +08:00

authz.go

feat: better admin permissions (#5755)

2026-06-27 17:01:59 +08:00

billing.go

refactor(error): replace dto.OpenAIError with types.OpenAIError for consistency

2025-12-13 16:43:57 +08:00

channel_affinity_cache.go

fix: channel affinity (#2799)

2026-02-02 14:37:31 +08:00

channel_authz_test.go

feat: better admin permissions (#5755)

2026-06-27 17:01:59 +08:00

channel_authz.go

feat: better admin permissions (#5755)

2026-06-27 17:01:59 +08:00

channel_test_internal_test.go

feat: add system task runner (#5680)

2026-06-24 17:16:21 +08:00

channel_upstream_update_test.go

feat: add system task runner (#5680)

2026-06-24 17:16:21 +08:00

channel_upstream_update.go

feat: add system task runner (#5680)

2026-06-24 17:16:21 +08:00

channel-billing.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

channel-test.go

feat: add system task runner (#5680)

2026-06-24 17:16:21 +08:00

channel.go

feat: better admin permissions (#5755)

2026-06-27 17:01:59 +08:00

checkin.go

feat(checkin): add check-in functionality with status retrieval and user quota rewards

2026-01-02 23:00:33 +08:00

codex_usage.go

refactor: codex usage ui (#5595)

2026-06-19 16:07:32 +08:00

console_migrate.go

feat(file): unify file handling with a new FileSource abstraction for URL and base64 data

2026-02-04 18:23:17 +08:00

custom_oauth.go

perf: avoid eager formatting in debug log calls (#4929)

2026-05-19 12:11:24 +08:00

deployment.go

fix: fix model deployment style issues, lint problems, and i18n gaps. (#2556)

2026-01-03 12:37:50 +08:00

group.go

refactor(group): update user group handling to utilize userUsableGroups directly and add GetUserGroupRatio function

2025-10-30 21:16:42 +08:00

image.go

feat: support dify upload image file

2025-03-15 19:10:12 +08:00

log.go

refactor(log): remove legacy log deletion endpoint and associated types

2026-06-22 19:40:04 +08:00

midjourney.go

feat: add system task runner (#5680)

2026-06-24 17:16:21 +08:00

misc.go

fix(user): harden account email and password handling

2026-07-05 13:15:41 +08:00

missing_models.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

model_list_test.go

feat(playground): improve Playground chat experience and Markdown rendering (#5217)

2026-06-27 17:23:25 +08:00

model_meta.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

model_owned_by_test.go

fix: resolve model owned_by from active channels (#4416)

2026-05-21 11:16:17 +08:00

model_sync.go

feat(localization): added zh_TW (#2913)

2026-02-11 20:37:53 +08:00

model.go

fix: resolve model owned_by from active channels (#4416)

2026-05-21 11:16:17 +08:00

oauth.go

fix(user): harden account email and password handling

2026-07-05 13:15:41 +08:00

option.go

feat(audit): add localized security audit logs (#5462)

2026-06-12 23:40:40 +08:00

passkey.go

feat(audit): add localized security audit logs (#5462)

2026-06-12 23:40:40 +08:00

payment_compliance.go

feat: require compliance confirmation for paid features

2026-05-13 22:18:46 +08:00

payment_webhook_availability_test.go

[Feature Request] Waffo Pancake gateway — full integration with subscription support + admin catalog binding flow (#4935)

2026-05-22 11:00:58 +08:00

payment_webhook_availability.go

[Feature Request] Waffo Pancake gateway — full integration with subscription support + admin catalog binding flow (#4935)

2026-05-22 11:00:58 +08:00

perf_metrics.go

fix: filter perf metrics summary by active groups (#4976)

2026-05-20 11:38:09 +08:00

performance.go

fix: log management race condition, partial delete reporting, and UX issues

2026-03-21 20:40:39 +08:00

playground.go

refactor(channel_select): enhance retry logic and context key usage for channel selection

2025-12-13 16:43:38 +08:00

prefill_group.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

pricing.go

fix(pricing): add filtering for pricing based on usable groups

2026-04-07 15:56:28 +08:00

rankings.go

fix: enforce header nav access control for public modules (#4889)

2026-05-16 14:54:47 +08:00

ratio_config.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

ratio_sync.go

feat: sync upstream pricing from pricing endpoint (#4452)

2026-04-26 20:17:35 +08:00

redemption.go

fix(redemption): add status filtering and cleanup action

2026-07-04 16:15:47 +08:00

relay.go

fix(task): attribute async task usage log to the initiating node (#5684)

2026-06-26 21:48:23 +08:00

return_path.go

fix: defaut ui triage (#4802)

2026-05-12 16:47:02 +08:00

secure_verification.go

fix: require proper verification for passkey changes (#4393)

2026-04-22 22:55:06 +08:00

setup.go

feat: support ClickHouse log database (#5663)

2026-06-22 18:41:26 +08:00

subscription_payment_creem.go

feat: require compliance confirmation for paid features

2026-05-13 22:18:46 +08:00

subscription_payment_epay.go

feat: require compliance confirmation for paid features

2026-05-13 22:18:46 +08:00

subscription_payment_stripe.go

feat: require compliance confirmation for paid features

2026-05-13 22:18:46 +08:00

subscription_payment_waffo_pancake.go

[BugFix] fix webhook process (#5047)

2026-05-24 16:19:27 +08:00

subscription.go

Merge commit from fork

2026-07-03 15:25:33 +08:00

swag_video.go

feat: channel kling support New API

2025-07-21 21:38:53 +08:00

system_info.go

feat: add system instance info panel (#5716)

2026-06-24 19:16:56 +08:00

system_task_handlers.go

feat: add system task runner (#5680)

2026-06-24 17:16:21 +08:00

system_task.go

feat: add system task runner (#5680)

2026-06-24 17:16:21 +08:00

task_video.go

perf: avoid eager formatting in debug log calls (#4929)

2026-05-19 12:11:24 +08:00

task.go

feat: add system task runner (#5680)

2026-06-24 17:16:21 +08:00

telegram.go

fix: defaut ui triage (#4802)

2026-05-12 16:47:02 +08:00

token_test.go

feat: support ClickHouse log database (#5663)

2026-06-22 18:41:26 +08:00

token.go

feat(token): add batch API for fetching token keys

2026-04-06 19:46:01 +08:00

topup_creem.go

fix: add PaymentProvider field to prevent cross-gateway callback attacks

2026-04-24 22:16:16 +08:00

topup_stripe.go

fix: defaut ui triage (#4802)

2026-05-12 16:47:02 +08:00

topup_waffo_pancake_test.go

Merge pull request #4089 from seefs001/feature/waffo-pay

2026-04-18 14:22:54 +08:00

topup_waffo_pancake.go

feat(api): change subscription product options and catalog endpoints to use GET method

2026-06-18 17:15:05 +08:00

topup_waffo.go

fix: add Waffo goods info and webhook SDK update (#5704)

2026-06-25 17:34:02 +08:00

topup.go

[Feature Request] Waffo Pancake gateway — full integration with subscription support + admin catalog binding flow (#4935)

2026-05-22 11:00:58 +08:00

twofa.go

feat(audit): add localized security audit logs (#5462)

2026-06-12 23:40:40 +08:00

uptime_kuma.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

usedata_flow_test.go

feat(dashboard): add traffic flow sankey chart (#5465)

2026-06-20 18:57:47 +08:00

usedata.go

feat(dashboard): add traffic flow sankey chart (#5465)

2026-06-20 18:57:47 +08:00

user.go

fix(user): harden account email and password handling

2026-07-05 13:15:41 +08:00

vendor_meta.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

video_proxy_gemini.go

fix: vertex ai video proxy and task polling improvements

2026-02-27 18:47:47 +08:00

video_proxy.go

fix: harden SSRF protection for unauthenticated and user-level endpoints

2026-03-31 17:57:47 +08:00

wechat.go

refactor: use POST for account binding endpoints and normalize reset responses

2026-03-31 18:44:40 +08:00