wushenghua/sub2api
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
2de6ccb0716d72bb545d86cc31763666246d830d
sub2api/backend/internal/handler/admin
T
History
shaw 0ddd58aaf9 feat(security): 操作审计日志 + 会话IP/UA绑定 + 敏感操作 step-up 2FA 
应对管理员访问凭证失守导致的数据外泄风险，新增三层防护：

审计日志（admin-only 可见，用户不可见）
- 新增 append-only audit_logs 表（migration 180）+ 异步批量写入 + 保留期清理
- 审计中间件挂在 admin/user/auth/admin-payment 组认证之后：记录所有变更类
  请求 + 白名单敏感读取（账号/代理导出、备份下载、admin/user API key 读取）
- 请求头凭证首尾掩码；请求体 JSON 递归脱敏（api_key/password 等擦除，base_url
  保留以便追责）；非 JSON body 不入库
- 无单条删除；全量清空需现场 TOTP 校验、拒绝 admin API key、未启用 2FA 不允许，
  清空后同步写入留痕记录

会话 IP/UA 绑定（默认开启，可在系统设置关闭）
- JWT 携带 session id + IP/UA 指纹哈希；IP 或 UA 任一变化即撤销会话家族并要求
  重新登录；旧 token 无指纹时放行以平滑升级

敏感操作 step-up 2FA（sudo 窗口 15 分钟）
- 账号/代理导出、DB 备份创建/下载、S3 目标修改要求近期 TOTP 二次验证；admin API
  key 一律拒绝；前端 useStepUp 组合式 + TotpStepUpDialog 弹码后自动重试
- API key 查看按需求暂不加强管控

前端：新增 /admin/audit-logs 操作日志页面（筛选/详情/2FA 清空）、侧边栏入口、
step-up 弹窗接入导出与备份流程、安全设置项（绑定开关 + 日志保留天数）、zh/en i18n
2026-07-16 13:47:50 +08:00
..
account_codex_agent_identity_import_test.go
fix(openai): 修复 Agent Identity 导入过期校验
2026-07-15 17:52:10 +08:00
account_codex_import_test.go
fix(grok): route generic account refresh correctly
2026-07-14 15:00:52 +08:00
account_codex_import.go
fix(openai): 修复 Agent Identity 导入过期校验
2026-07-15 17:52:10 +08:00
account_data_handler_test.go
fix(grok): route generic account refresh correctly
2026-07-14 15:00:52 +08:00
account_data.go
feat(grok): probe newly imported OAuth accounts
2026-07-14 12:24:42 +08:00
account_handler_available_models_test.go
fix(grok): route generic account refresh correctly
2026-07-14 15:00:52 +08:00
account_handler_duplicate_test.go
fix(test): align duplicate account test with new NewAccountHandler signature
2026-07-15 16:13:22 +08:00
account_handler_grok_refresh_test.go
fix(grok): route generic account refresh correctly
2026-07-14 15:00:52 +08:00
account_handler_list_test.go
fix(grok): route generic account refresh correctly
2026-07-14 15:00:52 +08:00
account_handler_long_context_billing_test.go
fix(grok): route generic account refresh correctly
2026-07-14 15:00:52 +08:00
account_handler_mixed_channel_test.go
fix(grok): route generic account refresh correctly
2026-07-14 15:00:52 +08:00
account_handler_passthrough_test.go
fix(grok): route generic account refresh correctly
2026-07-14 15:00:52 +08:00
account_handler_spark_shadow_test.go
feat(spark-shadow): OpenAI Spark 链接型影子账号
2026-07-01 12:21:45 +08:00
account_handler.go
feat: 增加上游 Sub2API 计费倍率探测与账号展示
2026-07-15 23:58:46 +08:00
account_shadow_parent_test.go
feat(spark-shadow): OpenAI Spark 链接型影子账号
2026-07-01 12:21:45 +08:00
account_shadow_parent.go
feat(spark-shadow): OpenAI Spark 链接型影子账号
2026-07-01 12:21:45 +08:00
account_today_stats_cache.go
refactor: 消除重复的 normalizeAccountIDList，补充 PR#754 新增组件的单元测试
2026-03-04 15:22:46 +08:00
account_upstream_billing_probe_test.go
feat: 增加上游 Sub2API 计费倍率探测与账号展示
2026-07-15 23:58:46 +08:00
account_upstream_billing_probe.go
feat: 增加上游 Sub2API 计费倍率探测与账号展示
2026-07-15 23:58:46 +08:00
admin_basic_handlers_test.go
feat(group): 支持自定义 /v1/models 模型列表
2026-05-27 18:00:45 +08:00
admin_helpers_test.go
feat(openai): 支持用户级 Fast/Flex 策略
2026-07-10 15:16:09 +08:00
admin_service_stub_test.go
fix(accounts): prevent duplicate retries from crossing admins
2026-07-15 10:51:13 +08:00
affiliate_handler.go
feat: add admin affiliate record pages
2026-05-03 20:33:13 +08:00
announcement_handler_sort_test.go
feat(table): 表格排序与搜索改为后端处理
2026-04-09 18:14:28 +08:00
announcement_handler.go
feat(table): 表格排序与搜索改为后端处理
2026-04-09 18:14:28 +08:00
antigravity_oauth_handler.go
feat(antigravity): 支持 Refresh Token 批量导入创建 OAuth 账号
2026-02-11 01:23:21 +08:00
apikey_handler_test.go
fix(api-key): reset rate limit usage cache
2026-04-27 16:47:44 +08:00
apikey_handler.go
fix(api-key): reset rate limit usage cache
2026-04-27 16:47:44 +08:00
audit_log_handler.go
feat(security): 操作审计日志 + 会话IP/UA绑定 + 敏感操作 step-up 2FA
2026-07-16 13:47:50 +08:00
backup_handler.go
feat(backup): 备份/恢复异步化，解决 504 超时
2026-03-16 20:22:10 +08:00
batch_update_credentials_test.go
fix(grok): route generic account refresh correctly
2026-07-14 15:00:52 +08:00
channel_handler_test.go
feat(channels): 模型定价支持一键同步最新模型
2026-05-19 20:32:32 +08:00
channel_handler.go
feat(billing): 渠道自定义定价支持图片输入 token 单价 image_input_price
2026-07-15 09:35:34 -07:00
channel_monitor_handler.go
feat(monitor): support Grok channel health checks
2026-07-14 12:24:42 +08:00
channel_monitor_template_handler.go
feat(monitor): support Grok channel health checks
2026-07-14 12:24:42 +08:00
compliance_handler.go
Add admin compliance acknowledgement gate
2026-06-10 14:16:51 +08:00
content_moderation_handler.go
feat(openai): cyber_policy 硬阻断全链路透传、审计与计费
2026-06-12 01:47:01 +08:00
dashboard_handler_cache_test.go
Reduce admin dashboard read amplification
2026-03-11 16:46:58 +08:00
dashboard_handler_request_type_test.go
test(backend): add tests for upstream model tracking and model source filtering
2026-03-17 19:26:30 +08:00
dashboard_handler_user_breakdown_test.go
fix(admin): GetUserBreakdown 使用 ParseUsageRequestType 解析 request_type
2026-07-10 11:43:44 +08:00
dashboard_handler.go
fix(admin): GetUserBreakdown 使用 ParseUsageRequestType 解析 request_type
2026-07-10 11:43:44 +08:00
dashboard_query_cache.go
feat(api): expose model_source filter in dashboard endpoints
2026-03-17 19:26:11 +08:00
dashboard_snapshot_v2_handler.go
feat(api): expose model_source filter in dashboard endpoints
2026-03-17 19:26:11 +08:00
data_management_handler_test.go
feat(sync): full code sync from release
2026-02-28 15:01:20 +08:00
data_management_handler.go
fix(lint): resolve data management staticcheck warnings
2026-02-28 15:05:54 +08:00
error_passthrough_handler.go
feat: 错误透传规则支持 skip_monitoring 跳过运维监控记录
2026-02-10 11:42:39 +08:00
gemini_oauth_handler.go
fix: 修复 Gemini 授权链接生成失败并改进错误提示
2026-02-24 20:04:05 +08:00
grok_import_probe_handler_test.go
Merge remote-tracking branch 'origin/main' into pr4241-fix
2026-07-15 16:11:28 +08:00
grok_import_probe_test.go
fix(ci): keep probe scheduler snapshots test-only
2026-07-14 12:45:03 +08:00
grok_import_probe.go
fix(grok): route generic account refresh correctly
2026-07-14 15:00:52 +08:00
grok_oauth_handler_test.go
feat(grok): 支持账号级自定义上游地址与请求头覆写
2026-07-15 20:30:23 +08:00
grok_oauth_handler.go
fix(grok): refresh OAuth pools proactively
2026-07-15 09:40:08 +08:00
group_handler.go
feat(billing): Codex alpha/search 网页搜索按次计费
2026-07-13 09:54:51 +08:00
id_list_utils_test.go
refactor: 消除重复的 normalizeAccountIDList，补充 PR#754 新增组件的单元测试
2026-03-04 15:22:46 +08:00
id_list_utils.go
perf(admin): optimize large-dataset loading for dashboard/users/accounts/ops
2026-03-04 13:45:49 +08:00
idempotency_helper_test.go
feat(idempotency): 为关键写接口接入幂等并完善并发容错
2026-02-23 12:45:37 +08:00
idempotency_helper.go
fix(accounts): prevent duplicate retries from crossing admins
2026-07-15 10:51:13 +08:00
openai_oauth_handler_spark_shadow_test.go
feat(spark-shadow): OpenAI Spark 链接型影子账号
2026-07-01 12:21:45 +08:00
openai_oauth_handler.go
fix(billing): 默认开启 OpenAI 长上下文计费
2026-07-13 17:55:01 +08:00
ops_alerts_handler.go
feat(proxies): 代理有效期与失败回退
2026-06-08 00:01:30 +08:00
ops_dashboard_handler.go
feat(ops): 运维监控新增 OpenAI Token 请求统计表
2026-02-12 14:20:14 +08:00
ops_handler.go
fix(grok): fail over OAuth credential errors safely
2026-07-14 14:55:30 +08:00
ops_realtime_handler.go
fix: optimize ops realtime account stats
2026-07-02 20:04:47 +00:00
ops_runtime_logging_handler_test.go
feat(log): 落地统一日志底座与系统日志运维能力
2026-02-12 16:27:29 +08:00
ops_settings_handler.go
feat(log): 落地统一日志底座与系统日志运维能力
2026-02-12 16:27:29 +08:00
ops_snapshot_v2_handler.go
perf(admin): optimize large-dataset loading for dashboard/users/accounts/ops
2026-03-04 13:45:49 +08:00
ops_system_log_handler_test.go
feat(ops): add host filtering to system logs
2026-07-14 01:29:46 +08:00
ops_system_log_handler.go
feat(ops): add host filtering to system logs
2026-07-14 01:29:46 +08:00
ops_ws_handler.go
feat(admin): add opt-in server timing metrics
2026-07-14 01:29:30 +08:00
payment_handler_test.go
fix(admin): 订单金额币种符号读取 currency 字段
2026-06-25 16:23:45 +08:00
payment_handler.go
Fix refund pending finalization gaps
2026-06-30 10:19:50 +08:00
promo_handler.go
fix(promo): allow clearing promo code expiry on edit
2026-06-18 23:07:25 +08:00
proxy_data_handler_test.go
fix(export): 导出逻辑与当前筛选条件对齐
2026-04-09 18:14:28 +08:00
proxy_data.go
feat(proxies): 代理有效期与失败回退
2026-06-08 00:01:30 +08:00
proxy_handler.go
feat(proxies): 代理有效期与失败回退
2026-06-08 00:01:30 +08:00
redeem_export_handler_test.go
fix(export): 导出逻辑与当前筛选条件对齐
2026-04-09 18:14:28 +08:00
redeem_handler_test.go
feat(redeem): 兑换码支持设置使用有效期
2026-05-19 15:53:28 +08:00
redeem_handler.go
feat(redeem): add redeem code batch update
2026-05-20 16:08:41 +08:00
scheduled_test_handler.go
feat(admin): 支持定时测试自动恢复并统一账号恢复入口
2026-03-08 06:59:53 +08:00
search_truncate_test.go
fix(audit): 第二批审计修复 — P0 生产 Bug、安全加固、性能优化、缓存一致性、代码质量
2026-02-07 19:46:42 +08:00
setting_handler_audit.go
feat: 按上游计费倍率调度 OpenAI 账号
2026-07-16 00:40:46 +08:00
setting_handler_auth_source_defaults_test.go
feat: 按上游计费倍率调度 OpenAI 账号
2026-07-16 00:40:46 +08:00
setting_handler_codex_whitelist_test.go
feat(codex-detect): codex_cli_only 检测加固 + 引擎指纹统一信号列表 + 账号级 app-server
2026-06-26 16:19:41 +08:00
setting_handler_dingtalk_test.go
feat(dingtalk): 钉钉 OAuth 登录接入与 internal_only 用户属性同步
2026-05-19 15:27:47 +08:00
setting_handler_email.go
fix(security): HTML-escape site_name 并对 doc_url 统一应用 sanitizeUrl
2026-07-09 10:03:49 +08:00
setting_handler_platform_quota_test.go
feat(quota): 用户 × 平台 USD 配额
2026-05-26 10:49:20 +08:00
setting_handler_runtime.go
refactor(handler): 纯移动拆分 setting_handler.go（3957→468行）
2026-07-08 08:49:22 +08:00
setting_handler_update.go
feat(security): 操作审计日志 + 会话IP/UA绑定 + 敏感操作 step-up 2FA
2026-07-16 13:47:50 +08:00
setting_handler.go
feat(security): 操作审计日志 + 会话IP/UA绑定 + 敏感操作 step-up 2FA
2026-07-16 13:47:50 +08:00
snapshot_cache_test.go
Reduce admin dashboard read amplification
2026-03-11 16:46:58 +08:00
snapshot_cache.go
Reduce admin dashboard read amplification
2026-03-11 16:46:58 +08:00
subscription_handler.go
feat(subscription): 支持恢复已撤销订阅
2026-07-01 22:19:21 +08:00
system_handler_test.go
feat: 版本徽章新增近3个历史版本在线回退与手动回退指引
2026-07-09 22:30:04 +08:00
system_handler.go
feat: 版本徽章新增近3个历史版本在线回退与手动回退指引
2026-07-09 22:30:04 +08:00
tls_fingerprint_profile_handler.go
feat(tls-fingerprint): 新增 TLS 指纹 Profile 数据库管理及代码质量优化
2026-03-27 14:33:05 +08:00
usage_cleanup_handler_test.go
feat(sync): full code sync from release
2026-02-28 15:01:20 +08:00
usage_handler_request_type_test.go
fix(lint): 修复 CI 中的 ineffassign 和 unused 代码告警，修正 group 排序集成测试兼容性
2026-04-09 19:25:08 +08:00
usage_handler_search_users_test.go
feat(usage): 在 /admin/usage 支持查看已删除用户的历史使用情况
2026-05-30 17:52:18 +08:00
usage_handler_sort_test.go
feat(table): 表格排序与搜索改为后端处理
2026-04-09 18:14:28 +08:00
usage_handler.go
perf(usage): 优化 /admin/usage 打开速度与刷新响应
2026-05-30 18:56:08 +08:00
usage_query_cache_test.go
perf(usage): 优化 /admin/usage 打开速度与刷新响应
2026-05-30 18:56:08 +08:00
usage_query_cache.go
perf(usage): 优化 /admin/usage 打开速度与刷新响应
2026-05-30 18:56:08 +08:00
user_attribute_handler.go
perf(admin): optimize large-dataset loading for dashboard/users/accounts/ops
2026-03-04 13:45:49 +08:00
user_handler_activity_test.go
feat(quota): 用户 × 平台 USD 配额
2026-05-26 10:49:20 +08:00
user_handler_get_deleted_test.go
feat(usage): 在 /admin/usage 支持查看已删除用户的历史使用情况
2026-05-30 17:52:18 +08:00
user_handler_list_apikey_group_test.go
feat(admin): /admin/users 新增按用户 API Key 所在分组过滤
2026-06-08 22:54:01 +08:00
user_handler.go
fix: 落实 #3867-#3870 合并审计的全部跟进项
2026-07-09 20:06:09 +08:00
user_platform_quota_admin_test.go
fix: allow five platform quota updates
2026-06-29 09:40:04 +08:00
user_platform_quotas_handler_test.go
feat(quota): 用户 × 平台 USD 配额
2026-05-26 10:49:20 +08:00