yangjianbo 9634494ba9 fix: 修复代码审核发现的10个问题（P0安全+P1数据一致性+P2性能优化） ...

P0: OpenAI SSE 错误消息 JSON 注入 — 使用 json.Marshal 替代 fmt.Sprintf
P1: subscription 续期包裹 Ent 事务确保原子性
P1: CSP nonce 生成处理 crypto/rand 错误，失败降级为 unsafe-inline
P1: singleflight 透传数据库真实错误，不再吞没为 not found
P1: GetUserSubscriptionsWithProgress 提取 calculateProgress 消除 N+1
P2: billing_cache/gateway_helper 迁移到 math/rand/v2 消除全局锁争用
P2: generateRandomID 降级分支增加原子计数器防碰撞
P2: CORS 非白名单 origin 不再设置 Allow-Headers/Methods/Max-Age
P2: Turnstile 验证移除 VerifyCode 空值跳过条件防绕过
P2: Redis Cluster Lua 脚本空 KEYS 添加兼容性警告注释

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-07 22:13:45 +08:00

..

account_repo_integration_test.go

merge upstream main

2026-02-02 22:13:50 +08:00

account_repo.go

Merge branch 'main' into test

2026-02-06 09:59:15 +08:00

aes_encryptor.go

merge upstream main

2026-02-02 22:13:50 +08:00

allowed_groups_contract_integration_test.go

…

announcement_read_repo.go

merge upstream main

2026-02-02 22:13:50 +08:00

announcement_repo.go

merge upstream main

2026-02-02 22:13:50 +08:00

api_key_cache_integration_test.go

…

api_key_cache_test.go

…

api_key_cache.go

merge upstream main

2026-02-02 22:13:50 +08:00

api_key_repo_integration_test.go

fix(audit): 第二批审计修复 — P0 生产 Bug、安全加固、性能优化、缓存一致性、代码质量

2026-02-07 19:46:42 +08:00

api_key_repo.go

merge: 合并 main 分支到 test，解决 config 和 modelWhitelist 冲突

2026-02-07 20:18:07 +08:00

billing_cache_integration_test.go

fix(audit): 第二批审计修复 — P0 生产 Bug、安全加固、性能优化、缓存一致性、代码质量

2026-02-07 19:46:42 +08:00

billing_cache_test.go

fix(audit): 第二批审计修复 — P0 生产 Bug、安全加固、性能优化、缓存一致性、代码质量

2026-02-07 19:46:42 +08:00

billing_cache.go

fix: 修复代码审核发现的10个问题（P0安全+P1数据一致性+P2性能优化）

2026-02-07 22:13:45 +08:00

claude_oauth_service_test.go

merge upstream main

2026-02-02 22:13:50 +08:00

claude_oauth_service.go

merge upstream main

2026-02-02 22:13:50 +08:00

claude_usage_service_test.go

…

claude_usage_service.go

merge upstream main

2026-02-02 22:13:50 +08:00

concurrency_cache_benchmark_test.go

…

concurrency_cache_integration_test.go

…

concurrency_cache.go

fix: 修复代码审核发现的10个问题（P0安全+P1数据一致性+P2性能优化）

2026-02-07 22:13:45 +08:00

dashboard_aggregation_repo.go

merge upstream main

2026-02-02 22:13:50 +08:00

dashboard_cache_test.go

fix(仪表盘): 修复缓存稳定性并补充测试

2026-01-11 15:00:16 +08:00

dashboard_cache.go

fix(仪表盘): 修复缓存稳定性并补充测试

2026-01-11 15:00:16 +08:00

db_pool_test.go

…

db_pool.go

…

email_cache_integration_test.go

…

email_cache_test.go

…

email_cache.go

merge upstream main

2026-02-02 22:13:50 +08:00

ent.go

merge upstream main

2026-02-02 22:13:50 +08:00

error_passthrough_cache.go

feat: 新增全局错误透传规则功能

2026-02-05 21:52:54 +08:00

error_passthrough_repo.go

feat: 新增全局错误透传规则功能

2026-02-05 21:52:54 +08:00

error_translate.go

…

fixtures_integration_test.go

…

gateway_cache_integration_test.go

feat(antigravity): comprehensive enhancements - model mapping, rate limiting, scheduling & ops

2026-02-07 12:31:10 +08:00

gateway_cache_model_load_integration_test.go

feat(antigravity): comprehensive enhancements - model mapping, rate limiting, scheduling & ops

2026-02-07 12:31:10 +08:00

gateway_cache.go

feat(antigravity): comprehensive enhancements - model mapping, rate limiting, scheduling & ops

2026-02-07 12:31:10 +08:00

gateway_routing_integration_test.go

merge upstream main

2026-02-02 22:13:50 +08:00

gemini_oauth_client.go

fix(gemini): Google One 强制使用内置 OAuth client + 自动获取 project_id + UI 优化 (#212)

2026-01-08 23:47:29 +08:00

gemini_token_cache_integration_test.go

fix(认证): 修复 OAuth token 缓存失效与 401 处理

2026-01-14 15:55:44 +08:00

gemini_token_cache_test.go

fix(认证): 修复 OAuth token 缓存失效与 401 处理

2026-01-14 15:55:44 +08:00

gemini_token_cache.go

feat(网关): 引入 OpenAI/Claude OAuth token 缓存

2026-01-15 18:27:06 +08:00

geminicli_codeassist_client.go

fix(lint): 修复错误消息大写问题以符合 Go 惯例

2026-02-05 20:47:15 +08:00

github_release_service_test.go

feat(update): 添加在线更新和定价数据获取的代理支持

2026-01-07 23:15:20 +08:00

github_release_service.go

feat(antigravity): comprehensive enhancements - model mapping, rate limiting, scheduling & ops

2026-02-07 12:31:10 +08:00

group_repo_integration_test.go

Merge branch 'test' into dev

2026-01-10 09:39:02 +08:00

group_repo.go

merge: 合并 main 分支到 test，解决 config 和 modelWhitelist 冲突

2026-02-07 20:18:07 +08:00

http_upstream_benchmark_test.go

…

http_upstream_test.go

…

http_upstream.go

merge upstream main

2026-02-02 22:13:50 +08:00

identity_cache_integration_test.go

…

identity_cache_test.go

…

identity_cache.go

merge upstream main

2026-02-02 22:13:50 +08:00

inprocess_transport_test.go

…

integration_harness_test.go

…

migrations_runner.go

feat(scheduler): 引入调度快照缓存与 outbox 回放

2026-01-12 14:19:06 +08:00

migrations_schema_integration_test.go

…

openai_oauth_service_test.go

merge upstream main

2026-02-02 22:13:50 +08:00

openai_oauth_service.go

merge upstream main

2026-02-02 22:13:50 +08:00

ops_repo_alerts.go

feat: merge dev

2026-01-15 15:14:44 +08:00

ops_repo_dashboard.go

feat(ops): 添加 count_tokens 错误过滤功能

2026-01-12 17:06:12 +08:00

ops_repo_histograms.go

fix(ci): 修复所有CI失败问题

2026-01-11 23:49:03 +08:00

ops_repo_latency_histogram_buckets_test.go

feat(repository): 实现运维监控数据访问层

2026-01-09 20:52:57 +08:00

ops_repo_latency_histogram_buckets.go

fix(ci): 修复剩余的CI错误

2026-01-11 23:57:20 +08:00

ops_repo_metrics.go

feat(ops): add account switch metrics and trend

2026-01-23 19:39:48 +08:00

ops_repo_preagg.go

fix(网关): 修复账号选择中的调度器快照延迟问题

2026-01-13 22:49:26 -08:00

ops_repo_realtime_traffic.go

feat(ops): 新增实时流量数据层

2026-01-12 14:17:42 +08:00

ops_repo_request_details.go

fix(ci): 修复剩余的CI错误

2026-01-11 23:57:20 +08:00

ops_repo_trends.go

fix(ops): count failover kinds with suffix

2026-01-24 01:14:44 +08:00

ops_repo_window_stats.go

feat(repository): 实现运维监控数据访问层

2026-01-09 20:52:57 +08:00

ops_repo.go

merge upstream main

2026-02-02 22:13:50 +08:00

pagination.go

…

pricing_service_test.go

feat(update): 添加在线更新和定价数据获取的代理支持

2026-01-07 23:15:20 +08:00

pricing_service.go

feat(update): 添加在线更新和定价数据获取的代理支持

2026-01-07 23:15:20 +08:00

promo_code_repo.go

fix(audit): 第二批审计修复 — P0 生产 Bug、安全加固、性能优化、缓存一致性、代码质量

2026-02-07 19:46:42 +08:00

proxy_latency_cache.go

feat: merge dev

2026-01-15 15:14:44 +08:00

proxy_probe_service_test.go

fix(proxy): 增加代理探测的多 URL 回退机制

2026-02-03 17:12:27 +08:00

proxy_probe_service.go

fix(proxy): 增加代理探测的多 URL 回退机制

2026-02-03 17:12:27 +08:00

proxy_repo_integration_test.go

…

proxy_repo.go

perf: batch fetch proxies for account export

2026-02-05 18:40:49 +08:00

redeem_cache_integration_test.go

…

redeem_cache_test.go

…

redeem_cache.go

…

redeem_code_repo_integration_test.go

…

redeem_code_repo.go

feat(admin): add user balance/concurrency history modal

2026-02-03 00:16:10 +08:00

redis_test.go

merge upstream main

2026-02-02 22:13:50 +08:00

redis.go

merge upstream main

2026-02-02 22:13:50 +08:00

refresh_token_cache.go

feat(auth): 实现 Refresh Token 机制

2026-02-05 12:42:54 +08:00

req_client_pool_test.go

merge upstream main

2026-02-02 22:13:50 +08:00

req_client_pool.go

merge upstream main

2026-02-02 22:13:50 +08:00

scheduler_cache.go

merge upstream main

2026-02-02 22:13:50 +08:00

scheduler_outbox_repo.go

fix(调度): 修复 outbox 空载写入并稳固回放测试

2026-01-12 15:46:55 +08:00

scheduler_snapshot_outbox_integration_test.go

merge upstream main

2026-02-02 22:13:50 +08:00

session_limit_cache.go

fix: 修复管理页面活跃会话数始终显示为0的问题

2026-02-05 22:36:17 +08:00

setting_repo_integration_test.go

…

setting_repo.go

…

simple_mode_default_groups_integration_test.go

merge upstream main

2026-02-02 22:13:50 +08:00

simple_mode_default_groups.go

merge upstream main

2026-02-02 22:13:50 +08:00

soft_delete_ent_integration_test.go

…

sora_account_repo.go

fix(sora): 修复流式重写与计费问题

2026-01-31 21:46:28 +08:00

sql_scan.go

…

temp_unsched_cache.go

…

timeout_counter_cache.go

feat(gateway): 添加流超时处理机制

2026-01-11 21:54:52 -08:00

totp_cache.go

merge upstream main

2026-02-02 22:13:50 +08:00

turnstile_service_test.go

…

turnstile_service.go

…

update_cache_integration_test.go

…

update_cache.go

…

usage_cleanup_repo_ent_test.go

merge upstream main

2026-02-02 22:13:50 +08:00

usage_cleanup_repo_test.go

merge upstream main

2026-02-02 22:13:50 +08:00

usage_cleanup_repo.go

merge upstream main

2026-02-02 22:13:50 +08:00

usage_log_repo_integration_test.go

fix(audit): 第二批审计修复 — P0 生产 Bug、安全加固、性能优化、缓存一致性、代码质量

2026-02-07 19:46:42 +08:00

usage_log_repo_unit_test.go

fix(audit): 第二批审计修复 — P0 生产 Bug、安全加固、性能优化、缓存一致性、代码质量

2026-02-07 19:46:42 +08:00

usage_log_repo.go

merge: 合并 main 分支到 test，解决 config 和 modelWhitelist 冲突

2026-02-07 20:18:07 +08:00

user_attribute_repo.go

…

user_group_rate_repo.go

feat: 支持用户专属分组倍率配置

2026-02-05 16:05:42 +08:00

user_repo_integration_test.go

…

user_repo.go

merge upstream main

2026-02-02 22:13:50 +08:00

user_subscription_repo_integration_test.go

merge upstream main

2026-02-02 22:13:50 +08:00

user_subscription_repo.go

merge upstream main

2026-02-02 22:13:50 +08:00

wire.go

Merge branch 'main' of https://github.com/mt21625457/aicodex2api

2026-02-06 06:56:23 +08:00