shaw 2faa0891e4 fix(ollama): 审计日志不落会话明文并收紧凭证清理守卫 ...

- PUT /admin/accounts/:id/ollama-cloud-usage/session 加入审计整体不入库
  路由，并把裸键 session 纳入键级脱敏兜底，防止浏览器会话 Cookie 明文
  留存 audit_logs.request_body
- UpdateCredentials 的 Ollama 清理分支加顶层 credentials DISTINCT 守卫，
  凭证未变化的持久化不再误清 openai 探测快照或重写 NULL extra

2026-07-23 16:43:18 +08:00

..

admin_auth_test.go

Merge pull request #4425 from AdrianZhaoDev/agent/admin-users-batch-limits

2026-07-16 19:33:32 +08:00

admin_auth.go

feat(security): 操作审计日志 + 会话IP/UA绑定 + 敏感操作 step-up 2FA

2026-07-16 13:47:50 +08:00

admin_compliance_test.go

Add admin compliance acknowledgement gate

2026-06-10 14:16:51 +08:00

admin_compliance.go

Add admin compliance acknowledgement gate

2026-06-10 14:16:51 +08:00

admin_only.go

refactor: 调整项目结构为单向依赖

2025-12-26 16:45:40 +08:00

api_key_auth_google_test.go

fix: 过滤入口拒绝日志并强化鉴权边界

2026-07-18 00:11:18 +08:00

api_key_auth_google.go

fix: 过滤入口拒绝日志并强化鉴权边界

2026-07-18 00:11:18 +08:00

api_key_auth_image_task_test.go

feat: add async image generation tasks

2026-07-15 19:57:37 -07:00

api_key_auth_test.go

Merge pull request #4616 from zhangxaochen/codex/openai-quota-error

2026-07-20 15:30:41 +08:00

api_key_auth.go

fix(openai): return standard insufficient quota errors

2026-07-19 21:59:45 +08:00

audit_log_test.go

fix(ollama): 审计日志不落会话明文并收紧凭证清理守卫

2026-07-23 16:43:18 +08:00

audit_log.go

fix(ollama): 审计日志不落会话明文并收紧凭证清理守卫

2026-07-23 16:43:18 +08:00

auth_subject.go

refactor: 调整项目结构为单向依赖

2025-12-26 16:45:40 +08:00

backend_mode_guard_test.go

feat: fix OAuth email completion flow

2026-06-30 01:11:51 +08:00

backend_mode_guard.go

feat: fix OAuth email completion flow

2026-06-30 01:11:51 +08:00

client_request_id_test.go

fix: 过滤入口拒绝日志并强化鉴权边界

2026-07-18 00:11:18 +08:00

client_request_id.go

fix: 过滤入口拒绝日志并强化鉴权边界

2026-07-18 00:11:18 +08:00

cors_test.go

feat: extend Server-Timing to authenticated user web APIs

2026-07-15 00:23:27 +08:00

cors.go

feat: extend Server-Timing to authenticated user web APIs

2026-07-15 00:23:27 +08:00

ingress_reject_access_sampler_test.go

fix: 过滤入口拒绝日志并强化鉴权边界

2026-07-18 00:11:18 +08:00

ingress_reject_access_sampler.go

fix: 过滤入口拒绝日志并强化鉴权边界

2026-07-18 00:11:18 +08:00

ingress_reject_test.go

fix: 过滤入口拒绝日志并强化鉴权边界

2026-07-18 00:11:18 +08:00

ingress_reject.go

fix: 过滤入口拒绝日志并强化鉴权边界

2026-07-18 00:11:18 +08:00

invalid_auth_abuse_test.go

fix: 过滤入口拒绝日志并强化鉴权边界

2026-07-18 00:11:18 +08:00

jwt_auth_test.go

feat(security): 操作审计日志 + 会话IP/UA绑定 + 敏感操作 step-up 2FA

2026-07-16 13:47:50 +08:00

jwt_auth.go

feat(security): 操作审计日志 + 会话IP/UA绑定 + 敏感操作 step-up 2FA

2026-07-16 13:47:50 +08:00

logger.go

fix: 过滤入口拒绝日志并强化鉴权边界

2026-07-18 00:11:18 +08:00

middleware.go

fix(openai): return standard insufficient quota errors

2026-07-19 21:59:45 +08:00

misc_coverage_test.go

feat(subscription): 有界队列执行维护并改进鉴权解析

2026-02-10 00:37:47 +08:00

openai_fast_policy_forwarding_test.go

feat(openai): 支持用户级 Fast/Flex 策略

2026-07-10 15:16:09 +08:00

recovery_test.go

test: 完善自动化测试体系（7个模块，73个任务）

2026-02-08 12:05:39 +08:00

recovery.go

refactor: 移除 infrastructure 目录 (#108)

2025-12-31 23:42:01 +08:00

request_access_logger_test.go

fix: 过滤入口拒绝日志并强化鉴权边界

2026-07-18 00:11:18 +08:00

request_body_limit.go

perf(后端): 完成性能优化与连接池配置

2025-12-31 08:50:12 +08:00

request_logger.go

fix: 过滤入口拒绝日志并强化鉴权边界

2026-07-18 00:11:18 +08:00

request_metadata.go

fix: 过滤入口拒绝日志并强化鉴权边界

2026-07-18 00:11:18 +08:00

security_headers_test.go

feat: add Airwallex payments and multi-currency support

2026-05-11 11:17:26 +08:00

security_headers.go

feat: add Airwallex payments and multi-currency support

2026-05-11 11:17:26 +08:00

server_timing_test.go

feat: extend Server-Timing to authenticated user web APIs

2026-07-15 00:23:27 +08:00

server_timing.go

feat: extend Server-Timing to authenticated user web APIs

2026-07-15 00:23:27 +08:00

session_binding_test.go

fix: 快照自定义客户端 IP 请求头

2026-07-20 00:08:48 +08:00

session_binding.go

fix: 快照自定义客户端 IP 请求头

2026-07-20 00:08:48 +08:00

step_up_test.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

step_up.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

wire.go

feat(security): 操作审计日志 + 会话IP/UA绑定 + 敏感操作 step-up 2FA

2026-07-16 13:47:50 +08:00