bwlcandClaude Opus 4.8 9a0e439803 fix(openai): 跨组会话失配保护移到生效的 WSv2 路径并补测 ...

87dd5f5d 把 previous_response_id 剥离保护加在了 HTTP Responses 路径，但该路径
在 previousResponseID != "" 时已无条件返回 400（0fcddce6 引入），剥离块恒不可达，
RemovePreviousResponseIDFromBody 也只被这段死分支调用、无覆盖。

- 删除 HTTP Responses 路径的死代码剥离块，留注释指明保护应在 WSv2 路径。
- 在 ResponsesWebSocket 首包（wsFirstMessage）处补回等价保护：previous_response_id
  未命中当前分组粘连账号（StickyPreviousHit=false）时剥离，改用首包 input 重建；
  带 function_call_output 的工具续链保持原样。这是 previous_response_id 真正生效、
  会触发跨组会话链鉴权失败的路径。
- 为 RemovePreviousResponseIDFromBody 增加单元测试（现已有真实 caller）。

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-07 20:30:56 +08:00

..

admin

fix(usage): 管理端错误请求页过滤与分列完善

2026-06-05 14:00:57 +08:00

dto

Merge pull request #2930 from touwaeriol/feat/image-token-billing

2026-06-06 09:28:46 +08:00

quotaview

feat(quota): 用户 × 平台 USD 配额

2026-05-26 10:49:20 +08:00

announcement_handler.go

merge upstream main

2026-02-02 22:13:50 +08:00

api_key_handler.go

fix: return 404 instead of 403 for unauthorized key access to prevent ID oracle (CWE-204)

2026-06-02 00:46:50 +08:00

auth_current_user_test.go

fix(profile): stabilize identity binding management

2026-04-22 13:19:28 +08:00

auth_dingtalk_client_test.go

feat(dingtalk): 钉钉 OAuth 登录接入与 internal_only 用户属性同步

2026-05-19 15:27:47 +08:00

auth_dingtalk_client.go

feat(dingtalk): 钉钉 OAuth 登录接入与 internal_only 用户属性同步

2026-05-19 15:27:47 +08:00

auth_dingtalk_oauth_test.go

feat(dingtalk): 钉钉 OAuth 登录接入与 internal_only 用户属性同步

2026-05-19 15:27:47 +08:00

auth_dingtalk_oauth.go

feat(dingtalk): 钉钉 OAuth 登录接入与 internal_only 用户属性同步

2026-05-19 15:27:47 +08:00

auth_email_oauth_test.go

fix: 完善邮箱快捷登录注册流程

2026-05-06 20:52:10 +08:00

auth_email_oauth.go

fix: 完善邮箱快捷登录注册流程

2026-05-06 20:52:10 +08:00

auth_handler.go

feat(auth): 透传验证码邮件语言偏好

2026-05-20 13:25:45 +08:00

auth_linuxdo_oauth_test.go

fix(auth): 修复 Linux DO 登录误进入邮箱验证

2026-06-06 13:05:07 +08:00

auth_linuxdo_oauth.go

fix(auth): 修复 Linux DO 登录误进入邮箱验证

2026-06-06 13:05:07 +08:00

auth_oauth_logout_test.go

fix(auth): harden pending oauth and backend mode flows

2026-04-22 12:30:00 +08:00

auth_oauth_pending_flow_test.go

feat(usage): 在 /admin/usage 支持查看已删除用户的历史使用情况

2026-05-30 17:52:18 +08:00

auth_oauth_pending_flow.go

feat(auth): 透传验证码邮件语言偏好

2026-05-20 13:25:45 +08:00

auth_oauth_test_helpers_test.go

fix(oidc): harden verified-email fast path

2026-05-21 15:19:29 +08:00

auth_oidc_oauth_test.go

fix(oidc): harden verified-email fast path

2026-05-21 15:19:29 +08:00

auth_oidc_oauth.go

fix(oidc): harden verified-email fast path

2026-05-21 15:19:29 +08:00

auth_session_revocation_test.go

feat(quota): 用户 × 平台 USD 配额

2026-05-26 10:49:20 +08:00

auth_wechat_oauth_test.go

feat(quota): 用户 × 平台 USD 配额

2026-05-26 10:49:20 +08:00

auth_wechat_oauth.go

feat(dingtalk): 钉钉 OAuth 登录接入与 internal_only 用户属性同步

2026-05-19 15:27:47 +08:00

available_channel_handler_test.go

feat(channels): themed model popover + group-badge with rate, subscription & exclusivity

2026-04-21 21:44:34 +08:00

available_channel_handler.go

feat(channels): themed model popover + group-badge with rate, subscription & exclusivity

2026-04-21 21:44:34 +08:00

channel_monitor_user_handler.go

feat(channel-monitor): add feature switch settings + fix extra_models save

2026-04-21 00:21:29 +08:00

concurrency_error_response_test.go

fix: classify concurrency acquire failures

2026-05-28 10:03:41 +00:00

concurrency_error_response.go

fix: classify concurrency acquire failures

2026-05-28 10:03:41 +00:00

content_moderation_helper.go

feat(risk-control): add content moderation audit

2026-05-07 09:14:47 +08:00

endpoint_test.go

Add OpenAI embeddings gateway

2026-05-28 19:39:52 +08:00

endpoint.go

Add OpenAI embeddings gateway

2026-05-28 19:39:52 +08:00

failover_loop_test.go

feat: 支持 API Key 上游池模式同账号重试次数配置与自定义错误策略

2026-03-08 14:12:17 +08:00

failover_loop.go

feat: 支持 API Key 上游池模式同账号重试次数配置与自定义错误策略

2026-03-08 14:12:17 +08:00

gateway_handler_billing_error_test.go

feat(quota): 用户 × 平台 USD 配额

2026-05-26 10:49:20 +08:00

gateway_handler_chat_completions.go

fix: validate stream field type

2026-06-03 14:18:12 +08:00

gateway_handler_error_fallback_test.go

fix(openai): also emit response.failed in ensureForwardErrorResponse after Writer.Written

2026-05-24 22:00:56 +08:00

gateway_handler_intercept_test.go

fix: 收敛 Claude Code 探测拦截并补齐回归测试

2026-02-07 19:04:08 +08:00

gateway_handler_responses.go

Merge pull request #3000 from Pluviobyte/codex/sub2api-stream-field-validation

2026-06-06 15:02:06 +08:00

gateway_handler_stream_failover_test.go

增加测试

2026-03-15 16:21:49 +08:00

gateway_handler_warmup_intercept_unit_test.go

feat(quota): 用户 × 平台 USD 配额

2026-05-26 10:49:20 +08:00

gateway_handler.go

Merge pull request #2927 from moonagic/main

2026-06-01 14:50:36 +08:00

gateway_helper_backoff_test.go

test: 为代码审核修复添加详细单元测试（7个测试文件，50+测试用例）

2026-02-07 22:14:07 +08:00

gateway_helper_fastpath_test.go

feat: cleanup stale concurrency slots on startup

2026-03-09 19:55:18 +08:00

gateway_helper_hotpath_test.go

refactor(gateway): shorten OpenAI request body retention

2026-05-30 20:01:39 +08:00

gateway_helper_test.go

fix(并发): 修复 wrapReleaseOnDone goroutine 泄露问题

2026-01-06 20:31:40 +08:00

gateway_helper.go

refactor(gateway): shorten OpenAI request body retention

2026-05-30 20:01:39 +08:00

gateway_models_test.go

feat(group): 支持自定义 /v1/models 模型列表

2026-05-27 18:00:45 +08:00

gemini_cli_session_test.go

fix(gateway): harden digest logging and align antigravity ops

2026-02-07 17:12:15 +08:00

gemini_v1beta_handler_test.go

fix(handler): fallback known gemini models on v1beta 404

2026-04-01 02:20:13 +08:00

gemini_v1beta_handler.go

Merge pull request #2927 from moonagic/main

2026-06-01 14:50:36 +08:00

handler.go

feat(risk-control): add content moderation audit

2026-05-07 09:14:47 +08:00

idempotency_helper_test.go

feat(idempotency): 为关键写接口接入幂等并完善并发容错

2026-02-23 12:45:37 +08:00

idempotency_helper.go

feat(idempotency): 为关键写接口接入幂等并完善并发容错

2026-02-23 12:45:37 +08:00

image_concurrency_limiter_test.go

feat(quota): 用户 × 平台 USD 配额

2026-05-26 10:49:20 +08:00

image_concurrency_limiter.go

feat: add OpenAI image generation controls

2026-05-05 03:26:54 +08:00

logging.go

chore(logging): 完成后端日志审计与结构化迁移

2026-02-12 19:01:09 +08:00

openai_chat_completions.go

Merge pull request #3000 from Pluviobyte/codex/sub2api-stream-field-validation

2026-06-06 15:02:06 +08:00

openai_embeddings.go

Merge pull request #2865 from wey-gu/feat/usage-request-context

2026-05-29 16:21:59 +08:00

openai_gateway_compact_log_test.go

fix(openai): bump codex CLI version from 0.104.0 to 0.125.0

2026-04-25 05:26:33 +00:00

openai_gateway_endpoint_normalization_test.go

refactor: migrate all handlers to shared endpoint normalization middleware

2026-03-15 22:13:42 +08:00

openai_gateway_handler_test.go

fix(openai): preserve upstream response.failed errors

2026-06-04 11:17:22 +00:00

openai_gateway_handler.go

fix(openai): 跨组会话失配保护移到生效的 WSv2 路径并补测

2026-06-07 20:30:56 +08:00

openai_gateway_usage_context_test.go

Preserve usage request context

2026-05-28 22:44:25 +08:00

openai_images_controls_test.go

feat: add OpenAI image generation controls

2026-05-05 03:26:54 +08:00

openai_images.go

Merge pull request #3036 from whatIsNextToTheMoon/fix/openai-response-failed-passthrough

2026-06-06 09:53:08 +08:00

openai_stream_validation_test.go

fix: validate stream field type

2026-06-03 14:18:12 +08:00

openai_stream_validation.go

fix: validate stream field type

2026-06-03 14:18:12 +08:00

ops_error_logger_attribution_test.go

feat(ops): 错误日志 key 归因与早退字段补全

2026-06-05 14:00:57 +08:00

ops_error_logger_test.go

feat(ops): 错误日志 key 归因与早退字段补全

2026-06-05 14:00:57 +08:00

ops_error_logger.go

feat(ops): 错误日志 key 归因与早退字段补全

2026-06-05 14:00:57 +08:00

page_handler_test.go

Fix image billing size normalization

2026-05-12 15:21:31 +08:00

page_handler.go

fix: harden markdown page image paths

2026-05-07 10:05:49 +08:00

payment_handler_resume_test.go

feat: add Airwallex payments and multi-currency support

2026-05-11 11:17:26 +08:00

payment_handler.go

Merge pull request #2599 from Arron196/feature/email-template-editor

2026-05-20 15:12:57 +08:00

payment_webhook_handler_test.go

feat: add Airwallex payments and multi-currency support

2026-05-11 11:17:26 +08:00

payment_webhook_handler.go

feat: add Airwallex payments and multi-currency support

2026-05-11 11:17:26 +08:00

redeem_handler.go

refactor: 调整项目结构为单向依赖

2025-12-26 16:45:40 +08:00

request_body_limit_test.go

perf(后端): 完成性能优化与连接池配置

2025-12-31 08:50:12 +08:00

request_body_limit.go

perf(后端): 完成性能优化与连接池配置

2025-12-31 08:50:12 +08:00

setting_handler_public_test.go

feat(settings): support dual-mode wechat oauth defaults

2026-04-21 20:36:10 +08:00

setting_handler.go

feat(usage): 记录并展示失败请求(用户端+管理端)

2026-06-05 14:00:57 +08:00

stream_error_event_test.go

style: fix lint errors in response.failed SSE writer

2026-05-25 18:16:46 +08:00

stream_error_event.go

style: fix lint errors in response.failed SSE writer

2026-05-25 18:16:46 +08:00

subscription_handler.go

refactor: 调整项目结构为单向依赖

2025-12-26 16:45:40 +08:00

totp_handler.go

feat(auth): 透传验证码邮件语言偏好

2026-05-20 13:25:45 +08:00

usage_handler_daily_test.go

feat(usage): 记录并展示失败请求(用户端+管理端)

2026-06-05 14:00:57 +08:00

usage_handler_request_type_test.go

feat(usage): 记录并展示失败请求(用户端+管理端)

2026-06-05 14:00:57 +08:00

usage_handler_sort_test.go

feat(table): 表格排序与搜索改为后端处理

2026-04-09 18:14:28 +08:00

usage_handler.go

feat(usage): 记录并展示失败请求(用户端+管理端)

2026-06-05 14:00:57 +08:00

usage_record_submit_task_test.go

Preserve usage request context

2026-05-28 22:44:25 +08:00

user_handler_test.go

feat(usage): 在 /admin/usage 支持查看已删除用户的历史使用情况

2026-05-30 17:52:18 +08:00

user_handler.go

feat(quota): 用户 × 平台 USD 配额

2026-05-26 10:49:20 +08:00

user_msg_queue_helper.go

feat(gateway): 双模式用户消息队列 — 串行队列 + 软性限速

2026-03-03 01:05:11 +08:00

user_platform_quotas_handler_test.go

feat(quota): 用户 × 平台 USD 配额

2026-05-26 10:49:20 +08:00

wire.go

chore(wire): 注入通知邮件服务

2026-05-20 11:09:18 +08:00