CaIon a7c38ec851 fix: add PaymentProvider field to prevent cross-gateway callback attacks ...

EPay allows users to switch payment methods (e.g. wxpay→alipay) during
checkout, causing callback rejection. Replace fragile blocklist guard
with a PaymentProvider field on TopUp and SubscriptionOrder that
identifies which gateway created the order.

2026-04-24 22:16:16 +08:00

..

ability.go

feat: add special user usable group setting

2025-10-28 23:25:43 +08:00

channel_cache.go

refactor(channel_cache): improve channel selection logic by handling zero total weight and removing unnecessary variable

2025-10-29 21:49:06 +08:00

channel_satisfy.go

feat: channel affinity (#2669)

2026-01-26 19:57:41 +08:00

channel.go

feat(channel): add error handling for SaveWithoutKey when channel ID is 0

2025-12-20 13:26:40 +08:00

checkin.go

feat(checkin): add check-in functionality with status retrieval and user quota rewards

2026-01-02 23:00:33 +08:00

custom_oauth_provider.go

imporve oauth provider UI/UX (#2983)

2026-02-22 15:41:29 +08:00

db_time.go

✨ feat: add subscription billing system (#2808)

2026-02-03 17:40:43 +08:00

errors.go

fix: harden token auth error handling to prevent info leakage

2026-04-12 17:39:00 +08:00

log.go

feat(topup-log): add NODE_NAME env var for audit logs

2026-04-18 00:51:04 +08:00

main.go

fix: enhance migrateTokenModelLimitsToText function to return errors and improve migration checks

2026-02-28 19:08:03 +08:00

midjourney.go

refactor(task): enhance UpdateWithStatus for CAS updates and add integration tests

2026-02-22 16:01:19 +08:00

missing_models.go

🖼️ chore: format code file

2025-08-10 12:11:31 +08:00

model_extra.go

🚀 perf: optimize model management APIs, unify pricing types as array, and remove redundancies

2025-08-11 14:40:01 +08:00

model_meta.go

fix(model): 解决模型创建和更新时零值字段被默认值覆盖的问题

2026-02-03 13:32:14 +08:00

option.go

Merge pull request #4431 from yyhhyyyyyy/fix/tiered-billing-model-list

2026-04-24 16:24:36 +08:00

passkey.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

payment_method_guard_test.go

fix: add PaymentProvider field to prevent cross-gateway callback attacks

2026-04-24 22:16:16 +08:00

prefill_group.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

pricing_default.go

✨ feat(pricing): add default vendor icons with LobeHub color support

2025-08-29 23:42:33 +08:00

pricing_refresh.go

🖼️ chore: format code file

2025-08-10 12:11:31 +08:00

pricing.go

refactor: rename and relocate HasModelBillingConfig function for clarity

2026-04-24 16:39:12 +08:00

redemption.go

fix: harden token auth error handling to prevent info leakage

2026-04-12 17:39:00 +08:00

setup.go

✨ feat: Implement system setup functionality

2025-04-03 18:57:15 +08:00

subscription.go

fix: add PaymentProvider field to prevent cross-gateway callback attacks

2026-04-24 22:16:16 +08:00

task_cas_test.go

Merge pull request #4089 from seefs001/feature/waffo-pay

2026-04-18 14:22:54 +08:00

task.go

fix: support vertex multi-key task fetch in content proxy

2026-02-27 17:07:10 +08:00

token_cache.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

token.go

Support longer legacy token keys

2026-04-23 13:29:00 +08:00

topup.go

fix: add PaymentProvider field to prevent cross-gateway callback attacks

2026-04-24 22:16:16 +08:00

twofa.go

fix: harden token auth error handling to prevent info leakage

2026-04-12 17:39:00 +08:00

usedata.go

feat(dashboard): add admin user analytics and fix chart labels

2026-04-08 15:44:01 +08:00

user_cache.go

fix(user): invalidate user and token caches when disabling user

2026-04-17 23:58:45 +08:00

user_oauth_binding.go

fix(oauth): enhance error handling and transaction management for OAuth user creation and binding

2026-02-05 21:48:05 +08:00

user.go

fix: harden token auth error handling to prevent info leakage

2026-04-12 17:39:00 +08:00

utils.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

vendor_meta.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00