shaw 539bfc8bad feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭 ...

新增系统设置 step_up_enabled（默认关闭），把敏感操作 2FA 门控做成可开关；
同时将会话 IP/UA 绑定默认值从开启改为关闭，避免用户因 IP 变动登录后掉线。

## 新增功能
- 敏感操作 step-up 2FA 总开关 step_up_enabled（默认关闭）：关闭时账号/代理导出、
  备份创建/下载、S3 配置修改、提升管理员等操作恢复门控引入前的直接放行行为；
  开启后要求当前会话在 15 分钟内完成过 TOTP step-up 验证。

## 优化改进
- 会话 IP/UA 绑定默认改为关闭（功能保留，可在设置页按需开启）。
- 开启 step-up 开关需操作者本人已启用 TOTP（防自锁）；关闭开关本身作为敏感操作，
  需通过 step-up 验证（防止攻击者拿到会话后先关闸再导出/备份）。
- 两个安全开关请求字段改为可空指针（省略=保持现值），避免旧客户端全量保存时
  静默重置安全开关。
- 备份恢复（整库覆盖可回滚安全设置）纳入 step-up 门控。
- 审计摘要 diffSettings 补记 step_up_enabled / session_binding_enabled 变更。

## Bug 修复
- 修复 BackupView 恢复操作 409（恢复进行中）判断未适配 apiClient 扁平化错误对象。

2026-07-18 10:46:42 +08:00

..

account_codex_agent_identity_import_test.go

fix(openai): 修复 Agent Identity 导入过期校验

2026-07-15 17:52:10 +08:00

account_codex_import_test.go

fix(grok): route generic account refresh correctly

2026-07-14 15:00:52 +08:00

account_codex_import.go

fix(openai): 修复 Agent Identity 导入过期校验

2026-07-15 17:52:10 +08:00

account_data_handler_test.go

fix(grok): route generic account refresh correctly

2026-07-14 15:00:52 +08:00

account_data.go

feat(grok): probe newly imported OAuth accounts

2026-07-14 12:24:42 +08:00

account_handler_available_models_test.go

fix(grok): route generic account refresh correctly

2026-07-14 15:00:52 +08:00

account_handler_duplicate_test.go

fix(test): align duplicate account test with new NewAccountHandler signature

2026-07-15 16:13:22 +08:00

account_handler_grok_refresh_test.go

fix(grok): route generic account refresh correctly

2026-07-14 15:00:52 +08:00

account_handler_list_test.go

fix(grok): route generic account refresh correctly

2026-07-14 15:00:52 +08:00

account_handler_long_context_billing_test.go

fix(grok): route generic account refresh correctly

2026-07-14 15:00:52 +08:00

account_handler_mixed_channel_test.go

fix(grok): route generic account refresh correctly

2026-07-14 15:00:52 +08:00

account_handler_passthrough_test.go

fix(grok): route generic account refresh correctly

2026-07-14 15:00:52 +08:00

account_handler_spark_shadow_test.go

feat(spark-shadow): OpenAI Spark 链接型影子账号

2026-07-01 12:21:45 +08:00

account_handler.go

feat: 增加上游 Sub2API 计费倍率探测与账号展示

2026-07-15 23:58:46 +08:00

account_shadow_parent_test.go

feat(spark-shadow): OpenAI Spark 链接型影子账号

2026-07-01 12:21:45 +08:00

account_shadow_parent.go

feat(spark-shadow): OpenAI Spark 链接型影子账号

2026-07-01 12:21:45 +08:00

account_today_stats_cache.go

refactor: 消除重复的 normalizeAccountIDList，补充 PR#754 新增组件的单元测试

2026-03-04 15:22:46 +08:00

account_upstream_billing_probe_test.go

feat: 增加上游 Sub2API 计费倍率探测与账号展示

2026-07-15 23:58:46 +08:00

account_upstream_billing_probe.go

feat: 增加上游 Sub2API 计费倍率探测与账号展示

2026-07-15 23:58:46 +08:00

admin_basic_handlers_test.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

admin_helpers_test.go

feat(openai): 支持用户级 Fast/Flex 策略

2026-07-10 15:16:09 +08:00

admin_service_stub_test.go

Merge pull request #4425 from AdrianZhaoDev/agent/admin-users-batch-limits

2026-07-16 19:33:32 +08:00

affiliate_handler.go

feat: add admin affiliate record pages

2026-05-03 20:33:13 +08:00

announcement_handler_sort_test.go

feat(table): 表格排序与搜索改为后端处理

2026-04-09 18:14:28 +08:00

announcement_handler.go

feat(table): 表格排序与搜索改为后端处理

2026-04-09 18:14:28 +08:00

antigravity_oauth_handler.go

feat(antigravity): 支持 Refresh Token 批量导入创建 OAuth 账号

2026-02-11 01:23:21 +08:00

apikey_handler_test.go

fix(api-key): reset rate limit usage cache

2026-04-27 16:47:44 +08:00

apikey_handler.go

fix(api-key): reset rate limit usage cache

2026-04-27 16:47:44 +08:00

audit_log_handler.go

fix(security): unify audit log & session binding client IP with API key ACL trust toggle

2026-07-17 09:33:18 +08:00

backup_handler.go

feat(backup): 备份/恢复异步化，解决 504 超时

2026-03-16 20:22:10 +08:00

batch_update_credentials_test.go

fix(grok): route generic account refresh correctly

2026-07-14 15:00:52 +08:00

channel_handler_test.go

feat(channels): 模型定价支持一键同步最新模型

2026-05-19 20:32:32 +08:00

channel_handler.go

feat(billing): 渠道自定义定价支持图片输入 token 单价 image_input_price

2026-07-15 09:35:34 -07:00

channel_monitor_duplicate_test.go

Make repeated channel-monitor setup safer

2026-07-16 16:30:19 +08:00

channel_monitor_handler.go

Make repeated channel-monitor setup safer

2026-07-16 16:30:19 +08:00

channel_monitor_template_handler.go

feat(monitor): support Grok channel health checks

2026-07-14 12:24:42 +08:00

compliance_handler.go

Add admin compliance acknowledgement gate

2026-06-10 14:16:51 +08:00

content_moderation_handler.go

feat(openai): cyber_policy 硬阻断全链路透传、审计与计费

2026-06-12 01:47:01 +08:00

dashboard_handler_cache_test.go

Reduce admin dashboard read amplification

2026-03-11 16:46:58 +08:00

dashboard_handler_request_type_test.go

test(backend): add tests for upstream model tracking and model source filtering

2026-03-17 19:26:30 +08:00

dashboard_handler_user_breakdown_test.go

fix(admin): GetUserBreakdown 使用 ParseUsageRequestType 解析 request_type

2026-07-10 11:43:44 +08:00

dashboard_handler.go

fix(admin): GetUserBreakdown 使用 ParseUsageRequestType 解析 request_type

2026-07-10 11:43:44 +08:00

dashboard_query_cache.go

feat(api): expose model_source filter in dashboard endpoints

2026-03-17 19:26:11 +08:00

dashboard_snapshot_v2_handler.go

feat(api): expose model_source filter in dashboard endpoints

2026-03-17 19:26:11 +08:00

data_management_handler_test.go

feat(sync): full code sync from release

2026-02-28 15:01:20 +08:00

data_management_handler.go

fix(lint): resolve data management staticcheck warnings

2026-02-28 15:05:54 +08:00

error_passthrough_handler.go

feat: 错误透传规则支持 skip_monitoring 跳过运维监控记录

2026-02-10 11:42:39 +08:00

gemini_oauth_handler.go

fix: 修复 Gemini 授权链接生成失败并改进错误提示

2026-02-24 20:04:05 +08:00

grok_import_probe_handler_test.go

Merge remote-tracking branch 'origin/main' into pr4241-fix

2026-07-15 16:11:28 +08:00

grok_import_probe_test.go

fix(ci): keep probe scheduler snapshots test-only

2026-07-14 12:45:03 +08:00

grok_import_probe.go

fix(grok): route generic account refresh correctly

2026-07-14 15:00:52 +08:00

grok_oauth_handler_test.go

feat(grok): 支持上游端点手动切换与快捷端点，修复 SSO 建号自定义地址被覆盖

2026-07-16 19:10:21 +08:00

grok_oauth_handler.go

feat(grok): 支持上游端点手动切换与快捷端点，修复 SSO 建号自定义地址被覆盖

2026-07-16 19:10:21 +08:00

group_handler_duplicate_test.go

Make repeated group setup safer

2026-07-16 18:18:28 +08:00

group_handler.go

Make repeated group setup safer

2026-07-16 18:18:28 +08:00

id_list_utils_test.go

refactor: 消除重复的 normalizeAccountIDList，补充 PR#754 新增组件的单元测试

2026-03-04 15:22:46 +08:00

id_list_utils.go

perf(admin): optimize large-dataset loading for dashboard/users/accounts/ops

2026-03-04 13:45:49 +08:00

idempotency_helper_test.go

feat(idempotency): 为关键写接口接入幂等并完善并发容错

2026-02-23 12:45:37 +08:00

idempotency_helper.go

fix(accounts): prevent duplicate retries from crossing admins

2026-07-15 10:51:13 +08:00

openai_oauth_handler_spark_shadow_test.go

feat(spark-shadow): OpenAI Spark 链接型影子账号

2026-07-01 12:21:45 +08:00

openai_oauth_handler.go

fix(billing): 默认开启 OpenAI 长上下文计费

2026-07-13 17:55:01 +08:00

ops_alerts_handler.go

feat(proxies): 代理有效期与失败回退

2026-06-08 00:01:30 +08:00

ops_dashboard_handler.go

feat(ops): 运维监控新增 OpenAI Token 请求统计表

2026-02-12 14:20:14 +08:00

ops_handler.go

fix(grok): fail over OAuth credential errors safely

2026-07-14 14:55:30 +08:00

ops_realtime_handler.go

fix: optimize ops realtime account stats

2026-07-02 20:04:47 +00:00

ops_runtime_logging_handler_test.go

feat(log): 落地统一日志底座与系统日志运维能力

2026-02-12 16:27:29 +08:00

ops_settings_handler.go

feat(log): 落地统一日志底座与系统日志运维能力

2026-02-12 16:27:29 +08:00

ops_snapshot_v2_handler.go

perf(admin): optimize large-dataset loading for dashboard/users/accounts/ops

2026-03-04 13:45:49 +08:00

ops_system_log_handler_test.go

feat(ops): add host filtering to system logs

2026-07-14 01:29:46 +08:00

ops_system_log_handler.go

feat(ops): add host filtering to system logs

2026-07-14 01:29:46 +08:00

ops_ws_handler.go

feat(admin): add opt-in server timing metrics

2026-07-14 01:29:30 +08:00

payment_handler_test.go

fix(admin): 订单金额币种符号读取 currency 字段

2026-06-25 16:23:45 +08:00

payment_handler.go

Fix refund pending finalization gaps

2026-06-30 10:19:50 +08:00

promo_handler.go

fix(promo): allow clearing promo code expiry on edit

2026-06-18 23:07:25 +08:00

proxy_data_handler_test.go

fix(export): 导出逻辑与当前筛选条件对齐

2026-04-09 18:14:28 +08:00

proxy_data.go

feat(proxies): 代理有效期与失败回退

2026-06-08 00:01:30 +08:00

proxy_handler.go

feat(proxies): 代理有效期与失败回退

2026-06-08 00:01:30 +08:00

redeem_export_handler_test.go

fix(export): 导出逻辑与当前筛选条件对齐

2026-04-09 18:14:28 +08:00

redeem_handler_test.go

feat(redeem): 兑换码支持设置使用有效期

2026-05-19 15:53:28 +08:00

redeem_handler.go

feat(redeem): add redeem code batch update

2026-05-20 16:08:41 +08:00

scheduled_test_handler.go

feat(admin): 支持定时测试自动恢复并统一账号恢复入口

2026-03-08 06:59:53 +08:00

search_truncate_test.go

fix(audit): 第二批审计修复 — P0 生产 Bug、安全加固、性能优化、缓存一致性、代码质量

2026-02-07 19:46:42 +08:00

setting_handler_audit.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

setting_handler_auth_source_defaults_test.go

feat: 按上游计费倍率调度 OpenAI 账号

2026-07-16 00:40:46 +08:00

setting_handler_codex_whitelist_test.go

feat(codex-detect): codex_cli_only 检测加固 + 引擎指纹统一信号列表 + 账号级 app-server

2026-06-26 16:19:41 +08:00

setting_handler_dingtalk_test.go

feat(dingtalk): 钉钉 OAuth 登录接入与 internal_only 用户属性同步

2026-05-19 15:27:47 +08:00

setting_handler_email.go

fix(security): HTML-escape site_name 并对 doc_url 统一应用 sanitizeUrl

2026-07-09 10:03:49 +08:00

setting_handler_platform_quota_test.go

feat(quota): 用户 × 平台 USD 配额

2026-05-26 10:49:20 +08:00

setting_handler_runtime.go

refactor(handler): 纯移动拆分 setting_handler.go（3957→468行）

2026-07-08 08:49:22 +08:00

setting_handler_stepup_switch_test.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

setting_handler_update.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

setting_handler.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

snapshot_cache_test.go

Reduce admin dashboard read amplification

2026-03-11 16:46:58 +08:00

snapshot_cache.go

Reduce admin dashboard read amplification

2026-03-11 16:46:58 +08:00

subscription_handler.go

feat(subscription): 支持恢复已撤销订阅

2026-07-01 22:19:21 +08:00

system_handler_test.go

feat: 版本徽章新增近3个历史版本在线回退与手动回退指引

2026-07-09 22:30:04 +08:00

system_handler.go

feat: 版本徽章新增近3个历史版本在线回退与手动回退指引

2026-07-09 22:30:04 +08:00

tls_fingerprint_profile_handler.go

feat(tls-fingerprint): 新增 TLS 指纹 Profile 数据库管理及代码质量优化

2026-03-27 14:33:05 +08:00

usage_cleanup_handler_test.go

feat(sync): full code sync from release

2026-02-28 15:01:20 +08:00

usage_handler_request_type_test.go

fix(lint): 修复 CI 中的 ineffassign 和 unused 代码告警，修正 group 排序集成测试兼容性

2026-04-09 19:25:08 +08:00

usage_handler_search_users_test.go

feat(usage): 在 /admin/usage 支持查看已删除用户的历史使用情况

2026-05-30 17:52:18 +08:00

usage_handler_sort_test.go

feat(table): 表格排序与搜索改为后端处理

2026-04-09 18:14:28 +08:00

usage_handler.go

perf(usage): 优化 /admin/usage 打开速度与刷新响应

2026-05-30 18:56:08 +08:00

usage_query_cache_test.go

perf(usage): 优化 /admin/usage 打开速度与刷新响应

2026-05-30 18:56:08 +08:00

usage_query_cache.go

perf(usage): 优化 /admin/usage 打开速度与刷新响应

2026-05-30 18:56:08 +08:00

user_attribute_handler.go

perf(admin): optimize large-dataset loading for dashboard/users/accounts/ops

2026-03-04 13:45:49 +08:00

user_handler_activity_test.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

user_handler_batch_limits_test.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

user_handler_get_deleted_test.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

user_handler_list_apikey_group_test.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

user_handler_role_stepup_test.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

user_handler.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

user_platform_quota_admin_test.go

fix: allow five platform quota updates

2026-06-29 09:40:04 +08:00

user_platform_quotas_handler_test.go

feat(quota): 用户 × 平台 USD 配额

2026-05-26 10:49:20 +08:00