erio db139191e3 fix(payment): critical audit fixes for security, idempotency and correctness ...

Backend fixes:
- #1: doSub subscription idempotency via audit log check
- #2: markFailed only when status=RECHARGING (prevents overwriting COMPLETED)
- #3: ExpireTimedOutOrders checks upstream payment before expiring
- #4: Public verify endpoint for payment result page (no auth required)
- #5: EasyPay QueryOrder returns amount, confirmPayment handles zero amount
- #6: WxPay notifyUrl priority: request-first, config-fallback
- #7: EasyPay remove double URL decode in VerifyNotification
- #8: checkPaid/cancelUpstreamPayment use order's provider instance
- #9: Amount NaN/Inf/negative validation in order creation and refund
- #10: Refund amount comparison uses tolerance instead of float64 ==
- #11: Skip balance deduction on retry when previous rollback failed
- #12: checkPaid logs fulfillment errors instead of silently ignoring
- #13: WxPay certSerial added to required config fields

Frontend fixes:
- Payment result page no longer requires authentication
- Public verify API fallback for expired sessions

2026-04-10 02:23:19 +08:00

..

admin

fix(payment): refresh provider registry on config changes

2026-04-10 00:50:12 +08:00

dto

feat(payment): cancel rate limit, easypay multi-CID, payment UX improvements

2026-04-07 13:29:39 +08:00

announcement_handler.go

merge upstream main

2026-02-02 22:13:50 +08:00

api_key_handler.go

feat: /keys页面支持表单筛选

2026-03-04 11:29:31 +08:00

auth_handler.go

fix: 重置密码功能新增UI配置发送邮件域名

2026-03-15 17:52:29 +08:00

auth_linuxdo_oauth_test.go

refactor(auth): 将 Linux DO OAuth 配置迁移到系统设置

2026-01-09 18:26:32 +08:00

auth_linuxdo_oauth.go

fix claudecode review bug

2026-03-09 01:18:49 +08:00

endpoint_test.go

revert: completely remove all Sora functionality

2026-04-05 17:11:01 +08:00

endpoint.go

revert: completely remove all Sora functionality

2026-04-05 17:11:01 +08:00

failover_loop_test.go

feat: 支持 API Key 上游池模式同账号重试次数配置与自定义错误策略

2026-03-08 14:12:17 +08:00

failover_loop.go

feat: 支持 API Key 上游池模式同账号重试次数配置与自定义错误策略

2026-03-08 14:12:17 +08:00

gateway_handler_chat_completions.go

fix: resolve cherry-pick compilation and test issues

2026-04-04 12:38:50 +08:00

gateway_handler_error_fallback_test.go

feat(backend): 提交后端审计修复与配套测试改动

2026-02-14 11:23:10 +08:00

gateway_handler_intercept_test.go

fix: 收敛 Claude Code 探测拦截并补齐回归测试

2026-02-07 19:04:08 +08:00

gateway_handler_responses.go

fix: resolve cherry-pick compilation and test issues

2026-04-04 12:38:50 +08:00

gateway_handler_stream_failover_test.go

增加测试

2026-03-15 16:21:49 +08:00

gateway_handler_warmup_intercept_unit_test.go

feat(billing): 网关计费迁移到 CalculateCostUnified + 模型限制错误统一

2026-04-04 11:12:21 +08:00

gateway_handler.go

revert: completely remove all Sora functionality

2026-04-05 17:11:01 +08:00

gateway_helper_backoff_test.go

test: 为代码审核修复添加详细单元测试（7个测试文件，50+测试用例）

2026-02-07 22:14:07 +08:00

gateway_helper_fastpath_test.go

feat: cleanup stale concurrency slots on startup

2026-03-09 19:55:18 +08:00

gateway_helper_hotpath_test.go

fix: 修复 hotpath 测试中 metadata.user_id 格式不合法导致 CI 失败

2026-03-18 11:31:32 +08:00

gateway_helper_test.go

fix(并发): 修复 wrapReleaseOnDone goroutine 泄露问题

2026-01-06 20:31:40 +08:00

gateway_helper.go

feat(gateway): 添加 Claude Code 客户端最低版本检查功能

2026-03-01 15:45:44 +08:00

gemini_cli_session_test.go

fix(gateway): harden digest logging and align antigravity ops

2026-02-07 17:12:15 +08:00

gemini_v1beta_handler_test.go

fix(handler): fallback known gemini models on v1beta 404

2026-04-01 02:20:13 +08:00

gemini_v1beta_handler.go

fix: resolve cherry-pick compilation and test issues

2026-04-04 12:38:50 +08:00

handler.go

Merge feature/payment into release/custom-0.1.108

2026-04-06 00:53:57 +08:00

idempotency_helper_test.go

feat(idempotency): 为关键写接口接入幂等并完善并发容错

2026-02-23 12:45:37 +08:00

idempotency_helper.go

feat(idempotency): 为关键写接口接入幂等并完善并发容错

2026-02-23 12:45:37 +08:00

logging.go

chore(logging): 完成后端日志审计与结构化迁移

2026-02-12 19:01:09 +08:00

openai_chat_completions.go

fix: address review findings for channel restriction refactoring

2026-04-04 11:25:01 +08:00

openai_gateway_compact_log_test.go

test(openai-handler): add codex remote compact outcome coverage

2026-03-05 16:46:14 +08:00

openai_gateway_endpoint_normalization_test.go

refactor: migrate all handlers to shared endpoint normalization middleware

2026-03-15 22:13:42 +08:00

openai_gateway_handler_test.go

Fix OpenAI default model forwarding

2026-03-20 13:36:54 +08:00

openai_gateway_handler.go

fix: address review findings for channel restriction refactoring

2026-04-04 11:25:01 +08:00

ops_error_logger_test.go

refactor(test): improve type assertions in ops endpoint context tests

2026-03-24 09:52:56 +08:00

ops_error_logger.go

feat(ops): adapt repository INSERT/SELECT + add setOpsEndpointContext in error logger middleware

2026-03-21 23:38:00 +08:00

payment_handler.go

fix(payment): critical audit fixes for security, idempotency and correctness

2026-04-10 02:23:19 +08:00

payment_webhook_handler_test.go

test(payment): add unit tests for payment audit fixes + allow empty supported_types

2026-04-08 18:21:12 +08:00

payment_webhook_handler.go

fix(payment): ensure providers loaded before webhook, show out_trade_no

2026-04-09 17:23:23 +08:00

redeem_handler.go

…

request_body_limit_test.go

…

request_body_limit.go

…

setting_handler.go

fix: backward compatibility for legacy purchase subscription system

2026-04-06 01:51:12 +08:00

subscription_handler.go

…

totp_handler.go

merge upstream main

2026-02-02 22:13:50 +08:00

usage_handler_request_type_test.go

feat(sync): full code sync from release

2026-02-28 15:01:20 +08:00

usage_handler.go

fix: use half-open date ranges for DST-safe usage queries

2026-03-15 22:13:12 +08:00

usage_record_submit_task_test.go

revert: completely remove all Sora functionality

2026-04-05 17:11:01 +08:00

user_handler.go

merge upstream main

2026-02-02 22:13:50 +08:00

user_msg_queue_helper.go

feat(gateway): 双模式用户消息队列 — 串行队列 + 软性限速

2026-03-03 01:05:11 +08:00

wire.go

Merge feature/payment into release/custom-0.1.108

2026-04-06 00:53:57 +08:00