shaw 539bfc8bad feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭 ...

新增系统设置 step_up_enabled（默认关闭），把敏感操作 2FA 门控做成可开关；
同时将会话 IP/UA 绑定默认值从开启改为关闭，避免用户因 IP 变动登录后掉线。

## 新增功能
- 敏感操作 step-up 2FA 总开关 step_up_enabled（默认关闭）：关闭时账号/代理导出、
  备份创建/下载、S3 配置修改、提升管理员等操作恢复门控引入前的直接放行行为；
  开启后要求当前会话在 15 分钟内完成过 TOTP step-up 验证。

## 优化改进
- 会话 IP/UA 绑定默认改为关闭（功能保留，可在设置页按需开启）。
- 开启 step-up 开关需操作者本人已启用 TOTP（防自锁）；关闭开关本身作为敏感操作，
  需通过 step-up 验证（防止攻击者拿到会话后先关闸再导出/备份）。
- 两个安全开关请求字段改为可空指针（省略=保持现值），避免旧客户端全量保存时
  静默重置安全开关。
- 备份恢复（整库覆盖可回滚安全设置）纳入 step-up 门控。
- 审计摘要 diffSettings 补记 step_up_enabled / session_binding_enabled 变更。

## Bug 修复
- 修复 BackupView 恢复操作 409（恢复进行中）判断未适配 apiClient 扁平化错误对象。

2026-07-18 10:46:42 +08:00

..

account_codex_agent_identity_import_test.go

fix(openai): 修复 Agent Identity 导入过期校验

2026-07-15 17:52:10 +08:00

account_codex_import_test.go

fix(grok): route generic account refresh correctly

2026-07-14 15:00:52 +08:00

account_codex_import.go

fix(openai): 修复 Agent Identity 导入过期校验

2026-07-15 17:52:10 +08:00

account_data_handler_test.go

fix(grok): route generic account refresh correctly

2026-07-14 15:00:52 +08:00

account_data.go

feat(grok): probe newly imported OAuth accounts

2026-07-14 12:24:42 +08:00

account_handler_available_models_test.go

fix(grok): route generic account refresh correctly

2026-07-14 15:00:52 +08:00

account_handler_duplicate_test.go

fix(test): align duplicate account test with new NewAccountHandler signature

2026-07-15 16:13:22 +08:00

account_handler_grok_refresh_test.go

fix(grok): route generic account refresh correctly

2026-07-14 15:00:52 +08:00

account_handler_list_test.go

fix(grok): route generic account refresh correctly

2026-07-14 15:00:52 +08:00

account_handler_long_context_billing_test.go

fix(grok): route generic account refresh correctly

2026-07-14 15:00:52 +08:00

account_handler_mixed_channel_test.go

fix(grok): route generic account refresh correctly

2026-07-14 15:00:52 +08:00

account_handler_passthrough_test.go

fix(grok): route generic account refresh correctly

2026-07-14 15:00:52 +08:00

account_handler_spark_shadow_test.go

feat(spark-shadow): OpenAI Spark 链接型影子账号

2026-07-01 12:21:45 +08:00

account_handler.go

feat: 增加上游 Sub2API 计费倍率探测与账号展示

2026-07-15 23:58:46 +08:00

account_shadow_parent_test.go

feat(spark-shadow): OpenAI Spark 链接型影子账号

2026-07-01 12:21:45 +08:00

account_shadow_parent.go

feat(spark-shadow): OpenAI Spark 链接型影子账号

2026-07-01 12:21:45 +08:00

account_today_stats_cache.go

…

account_upstream_billing_probe_test.go

feat: 增加上游 Sub2API 计费倍率探测与账号展示

2026-07-15 23:58:46 +08:00

account_upstream_billing_probe.go

feat: 增加上游 Sub2API 计费倍率探测与账号展示

2026-07-15 23:58:46 +08:00

admin_basic_handlers_test.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

admin_helpers_test.go

feat(openai): 支持用户级 Fast/Flex 策略

2026-07-10 15:16:09 +08:00

admin_service_stub_test.go

Merge pull request #4425 from AdrianZhaoDev/agent/admin-users-batch-limits

2026-07-16 19:33:32 +08:00

affiliate_handler.go

…

announcement_handler_sort_test.go

…

announcement_handler.go

…

antigravity_oauth_handler.go

…

apikey_handler_test.go

…

apikey_handler.go

…

audit_log_handler.go

fix(security): unify audit log & session binding client IP with API key ACL trust toggle

2026-07-17 09:33:18 +08:00

backup_handler.go

…

batch_update_credentials_test.go

fix(grok): route generic account refresh correctly

2026-07-14 15:00:52 +08:00

channel_handler_test.go

…

channel_handler.go

feat(billing): 渠道自定义定价支持图片输入 token 单价 image_input_price

2026-07-15 09:35:34 -07:00

channel_monitor_duplicate_test.go

Make repeated channel-monitor setup safer

2026-07-16 16:30:19 +08:00

channel_monitor_handler.go

Make repeated channel-monitor setup safer

2026-07-16 16:30:19 +08:00

channel_monitor_template_handler.go

feat(monitor): support Grok channel health checks

2026-07-14 12:24:42 +08:00

compliance_handler.go

…

content_moderation_handler.go

…

dashboard_handler_cache_test.go

…

dashboard_handler_request_type_test.go

…

dashboard_handler_user_breakdown_test.go

fix(admin): GetUserBreakdown 使用 ParseUsageRequestType 解析 request_type

2026-07-10 11:43:44 +08:00

dashboard_handler.go

fix(admin): GetUserBreakdown 使用 ParseUsageRequestType 解析 request_type

2026-07-10 11:43:44 +08:00

dashboard_query_cache.go

…

dashboard_snapshot_v2_handler.go

…

data_management_handler_test.go

…

data_management_handler.go

…

error_passthrough_handler.go

…

gemini_oauth_handler.go

…

grok_import_probe_handler_test.go

Merge remote-tracking branch 'origin/main' into pr4241-fix

2026-07-15 16:11:28 +08:00

grok_import_probe_test.go

fix(ci): keep probe scheduler snapshots test-only

2026-07-14 12:45:03 +08:00

grok_import_probe.go

fix(grok): route generic account refresh correctly

2026-07-14 15:00:52 +08:00

grok_oauth_handler_test.go

feat(grok): 支持上游端点手动切换与快捷端点，修复 SSO 建号自定义地址被覆盖

2026-07-16 19:10:21 +08:00

grok_oauth_handler.go

feat(grok): 支持上游端点手动切换与快捷端点，修复 SSO 建号自定义地址被覆盖

2026-07-16 19:10:21 +08:00

group_handler_duplicate_test.go

Make repeated group setup safer

2026-07-16 18:18:28 +08:00

group_handler.go

Make repeated group setup safer

2026-07-16 18:18:28 +08:00

id_list_utils_test.go

…

id_list_utils.go

…

idempotency_helper_test.go

…

idempotency_helper.go

fix(accounts): prevent duplicate retries from crossing admins

2026-07-15 10:51:13 +08:00

openai_oauth_handler_spark_shadow_test.go

feat(spark-shadow): OpenAI Spark 链接型影子账号

2026-07-01 12:21:45 +08:00

openai_oauth_handler.go

fix(billing): 默认开启 OpenAI 长上下文计费

2026-07-13 17:55:01 +08:00

ops_alerts_handler.go

…

ops_dashboard_handler.go

…

ops_handler.go

fix(grok): fail over OAuth credential errors safely

2026-07-14 14:55:30 +08:00

ops_realtime_handler.go

fix: optimize ops realtime account stats

2026-07-02 20:04:47 +00:00

ops_runtime_logging_handler_test.go

…

ops_settings_handler.go

…

ops_snapshot_v2_handler.go

…

ops_system_log_handler_test.go

feat(ops): add host filtering to system logs

2026-07-14 01:29:46 +08:00

ops_system_log_handler.go

feat(ops): add host filtering to system logs

2026-07-14 01:29:46 +08:00

ops_ws_handler.go

feat(admin): add opt-in server timing metrics

2026-07-14 01:29:30 +08:00

payment_handler_test.go

fix(admin): 订单金额币种符号读取 currency 字段

2026-06-25 16:23:45 +08:00

payment_handler.go

Fix refund pending finalization gaps

2026-06-30 10:19:50 +08:00

promo_handler.go

…

proxy_data_handler_test.go

…

proxy_data.go

…

proxy_handler.go

…

redeem_export_handler_test.go

…

redeem_handler_test.go

…

redeem_handler.go

…

scheduled_test_handler.go

…

search_truncate_test.go

…

setting_handler_audit.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

setting_handler_auth_source_defaults_test.go

feat: 按上游计费倍率调度 OpenAI 账号

2026-07-16 00:40:46 +08:00

setting_handler_codex_whitelist_test.go

feat(codex-detect): codex_cli_only 检测加固 + 引擎指纹统一信号列表 + 账号级 app-server

2026-06-26 16:19:41 +08:00

setting_handler_dingtalk_test.go

…

setting_handler_email.go

fix(security): HTML-escape site_name 并对 doc_url 统一应用 sanitizeUrl

2026-07-09 10:03:49 +08:00

setting_handler_platform_quota_test.go

…

setting_handler_runtime.go

refactor(handler): 纯移动拆分 setting_handler.go（3957→468行）

2026-07-08 08:49:22 +08:00

setting_handler_stepup_switch_test.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

setting_handler_update.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

setting_handler.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

snapshot_cache_test.go

…

snapshot_cache.go

…

subscription_handler.go

feat(subscription): 支持恢复已撤销订阅

2026-07-01 22:19:21 +08:00

system_handler_test.go

feat: 版本徽章新增近3个历史版本在线回退与手动回退指引

2026-07-09 22:30:04 +08:00

system_handler.go

feat: 版本徽章新增近3个历史版本在线回退与手动回退指引

2026-07-09 22:30:04 +08:00

tls_fingerprint_profile_handler.go

…

usage_cleanup_handler_test.go

…

usage_handler_request_type_test.go

…

usage_handler_search_users_test.go

…

usage_handler_sort_test.go

…

usage_handler.go

…

usage_query_cache_test.go

…

usage_query_cache.go

…

user_attribute_handler.go

…

user_handler_activity_test.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

user_handler_batch_limits_test.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

user_handler_get_deleted_test.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

user_handler_list_apikey_group_test.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

user_handler_role_stepup_test.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

user_handler.go

feat(security): 敏感操作 step-up 2FA 开关化，安全开关默认关闭

2026-07-18 10:46:42 +08:00

user_platform_quota_admin_test.go

fix: allow five platform quota updates

2026-06-29 09:40:04 +08:00

user_platform_quotas_handler_test.go

…