CaIon 5fc35e28a2 fix(user): harden account email and password handling ...

- normalize emails (trim + lowercase) and enforce uniqueness across
  registration, OAuth auto-registration, and email binding
- serialize concurrent writers on the same normalized email within a
  transaction to avoid duplicate accounts
- resolve password reset to a single matching account and reject
  ambiguous or absent matches
- require an existing password before self-service password change and
  reject login for accounts without a usable password

2026-07-05 13:15:41 +08:00

..

ability.go

feat: support ClickHouse log database (#5663)

2026-06-22 18:41:26 +08:00

authz_role.go

feat: better admin permissions (#5755)

2026-06-27 17:01:59 +08:00

casbin_rule.go

feat: better admin permissions (#5755)

2026-06-27 17:01:59 +08:00

channel_cache.go

feat(advanced-custom): remove fallback option and enhance path matching for advanced custom routes

2026-06-18 20:29:24 +08:00

channel_satisfy.go

feat: channel affinity (#2669)

2026-01-26 19:57:41 +08:00

channel.go

feat: support ClickHouse log database (#5663)

2026-06-22 18:41:26 +08:00

checkin.go

feat: support ClickHouse log database (#5663)

2026-06-22 18:41:26 +08:00

clickhouse_log_test.go

fix: adapt ClickHouse log LIKE filters

2026-06-27 17:03:25 +08:00

custom_oauth_provider.go

imporve oauth provider UI/UX (#2983)

2026-02-22 15:41:29 +08:00

db_time.go

feat: support ClickHouse log database (#5663)

2026-06-22 18:41:26 +08:00

errors.go

fix(user): harden account email and password handling

2026-07-05 13:15:41 +08:00

log.go

Make quota logging synchronous and delay startup log

2026-07-02 21:58:41 +08:00

main.go

feat: better admin permissions (#5755)

2026-06-27 17:01:59 +08:00

midjourney.go

feat: add system task runner (#5680)

2026-06-24 17:16:21 +08:00

missing_models.go

🖼️ chore: format code file

2025-08-10 12:11:31 +08:00

model_extra.go

🚀 perf: optimize model management APIs, unify pricing types as array, and remove redundancies

2025-08-11 14:40:01 +08:00

model_meta.go

fix: resolve model owned_by from active channels (#4416)

2026-05-21 11:16:17 +08:00

model_owner_test.go

fix: resolve model owned_by from active channels (#4416)

2026-05-21 11:16:17 +08:00

option.go

fix: support SMTP STARTTLS mode and NTLM auth (#5426)

2026-06-24 12:45:39 +08:00

passkey.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

payment_method_guard_test.go

fix: add PaymentProvider field to prevent cross-gateway callback attacks

2026-04-24 22:16:16 +08:00

perf_metric.go

feat(performance): add recent success rates to model summary and enhance metrics retrieval

2026-06-18 12:00:03 +08:00

prefill_group.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

pricing_default.go

✨ feat(pricing): add default vendor icons with LobeHub color support

2025-08-29 23:42:33 +08:00

pricing_refresh.go

🖼️ chore: format code file

2025-08-10 12:11:31 +08:00

pricing.go

refactor: rename and relocate HasModelBillingConfig function for clarity

2026-04-24 16:39:12 +08:00

redemption_test.go

fix(redemption): add status filtering and cleanup action

2026-07-04 16:15:47 +08:00

redemption.go

fix(redemption): add status filtering and cleanup action

2026-07-04 16:15:47 +08:00

setup.go

✨ feat: Implement system setup functionality

2025-04-03 18:57:15 +08:00

subscription.go

feat: support ClickHouse log database (#5663)

2026-06-22 18:41:26 +08:00

system_instance.go

feat: add system instance info panel (#5716)

2026-06-24 19:16:56 +08:00

system_task_test.go

feat: add system task runner (#5680)

2026-06-24 17:16:21 +08:00

system_task.go

feat: add system task runner (#5680)

2026-06-24 17:16:21 +08:00

task_cas_test.go

feat: add system instance info panel (#5716)

2026-06-24 19:16:56 +08:00

task.go

fix(task): attribute async task usage log to the initiating node (#5684)

2026-06-26 21:48:23 +08:00

token_cache.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

token.go

fix: adapt ClickHouse log LIKE filters

2026-06-27 17:03:25 +08:00

topup.go

feat: support ClickHouse log database (#5663)

2026-06-22 18:41:26 +08:00

twofa.go

fix: harden token auth error handling to prevent info leakage

2026-04-12 17:39:00 +08:00

usedata_flow_test.go

feat(dashboard): add traffic flow sankey chart (#5465)

2026-06-20 18:57:47 +08:00

usedata_flow.go

feat(dashboard): add traffic flow sankey chart (#5465)

2026-06-20 18:57:47 +08:00

usedata_rankings.go

feat: support ClickHouse log database (#5663)

2026-06-22 18:41:26 +08:00

usedata.go

feat(dashboard): add traffic flow sankey chart (#5465)

2026-06-20 18:57:47 +08:00

user_cache.go

Merge commit from fork

2026-07-03 15:25:33 +08:00

user_oauth_binding.go

fix(oauth): clear bindings when hard deleting users (#5582)

2026-06-18 12:16:23 +08:00

user_update_test.go

fix(user): harden account email and password handling

2026-07-05 13:15:41 +08:00

user.go

fix(user): harden account email and password handling

2026-07-05 13:15:41 +08:00

utils.go

fix: optimize batch update process

2026-05-27 13:23:05 +08:00

vendor_meta.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00