Commit Graph

149 Commits

Author SHA1 Message Date
cf1cbc7178 chore: bump quic-go dependencies (#765) 2025-12-06 19:39:02 +08:00
a39fe5d778 chore(account): bump quic-go (#763) 2025-12-06 18:20:24 +08:00
53dbd235c4 Fix account module path (#751)
* Fix module path for account service

* Restructure account module path
2025-12-06 10:32:31 +08:00
Haitao Pan
c5823ddf57 fix(makefile): add idempotent go mod init for account and rag-server 2025-12-06 10:09:06 +08:00
Haitao Pan
b94b9266bb fix(go-modules): correct module paths for account and rag-server
Split repositories into two standalone Go modules and fixed their
respective Makefile init targets. Updated:

- account: module → `account`
- rag-server: module → `rag-server`
2025-12-06 10:00:34 +08:00
Haitao Pan
42c3b1ecb7 chore(docker): bump Go base image to 1.25 for account and rag-server 2025-12-05 00:41:45 +08:00
Haitao Pan
eb91a7fa52 feat: add go modules for account & rag-server services 2025-12-05 00:38:33 +08:00
Haitao Pan
f9d120fc3e fix(rag-server): correct Dockerfile WORKDIR so go.mod is detected during build 2025-12-04 23:44:55 +08:00
Haitao Pan
595ad65292 fix(rag-server): correct Dockerfile WORKDIR so go.mod is detected during build 2025-12-04 23:37:22 +08:00
Haitao Pan
05a1db3aa2 fix(docker): install curl in builder image for init-go 2025-12-04 23:25:09 +08:00
Haitao Pan
eaa1412bcb build: ensure Go init runs before binary compilation 2025-12-04 23:20:47 +08:00
Haitao Pan
c1f78ee1da fix(docker): expose GO_VERSION arg in builder stages
Builder images install Go SDK and must receive GO_VERSION explicitly.
Adds missing ARG to account and rag-server Dockerfiles.
2025-12-04 23:15:00 +08:00
Haitao Pan
7601669fd4 build: drop ARG gymnastics; embed Go install in builder stages 2025-12-04 23:11:20 +08:00
Haitao Pan
447f60ba51 ci(docker): simplify Go builder pipeline and trim runtime images 2025-12-04 22:57:12 +08:00
Haitao Pan
87d2e90244 fix(docker): add default go-runtime image arg for account and rag-server builds 2025-12-04 22:42:40 +08:00
Haitao Pan
ce0f0e10c9 fix(docker): align account build stages with go-runtime INSTALL_GO args 2025-12-04 22:23:18 +08:00
Haitao Pan
d85b4a6d50 chore(docker): unify account service entrypoint naming and permissions 2025-12-04 21:47:00 +08:00
Haitao Pan
4e764284ad refactor(docker): replace GO_BASE_IMAGE with GO_RUNTIME_IMAGE across Dockerfiles 2025-12-04 21:04:31 +08:00
Haitao Pan
e4869b9ed5 fix(account,ci): adjust image digests and simplify account config handling 2025-12-04 20:21:57 +08:00
Haitao Pan
9344c7bf19 chore: workflow tweaks + go-runtime rename + Dockerfile fixes 2025-12-04 15:07:23 +08:00
Haitao Pan
5c92bebc2c merged: go-runtime.Dockerfile & go-builder.Dockerfile -> go-base.Dockerfile 2025-12-04 14:52:33 +08:00
a12d52540b Add production Dockerfiles for services (#725) 2025-12-02 15:31:02 +08:00
shenlan
dda0dbbcd4 Add crypto billing options and trial subscriptions (#680) 2025-11-21 19:20:51 +08:00
shenlan
a1afa0d829 Add PayPal billing and subscription support (#679) 2025-11-21 18:55:12 +08:00
Haitao Pan
44f59293cb feat(account): add database management targets to Makefile
- Add create-db-user: create database user and grant privileges
- Add db-reset: reset entire PostgreSQL cluster (dangerous operation)
- Update help text to document new database management commands

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-10 23:12:07 +08:00
Haitao Pan
0b3fab7d28 cleanup(auth): remove test/docs files from internal/auth
- Deleted non-essential files from rag-server/account internal/auth:
  - Removed: test files, docs (README, IMPLEMENTATION), cache/client modules
  - Kept: core JWT auth middleware and token_service only
- Simplified to JWT service-to-service authentication
- Claims retain UserID/Email/Roles business info
2025-11-05 22:58:39 +08:00
Haitao Pan
a1e4cc9146 remove: remove internal/auth/mfa_service.go
• Deleted unused mfa_service.go file
• Fixed import in api/api.go for auth package
• Build verified and working

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-05 22:25:15 +08:00
Haitao Pan
8edeb75391 feat(auth): implement dual-layer token authentication with config support
- Add auth.enable configuration field (default: true)
- Add TokenService initialization in account service
- Implement token exchange endpoint (/api/auth/token/exchange)
- Implement token refresh endpoint (/api/auth/token/refresh)
- Protect routes with JWT authentication middleware
- Update configuration structures for all services
- Support accessSecret with configurable expiry times
- Update token management script to handle all token types
- Validate auth configuration consistency across services
2025-11-05 20:11:23 +08:00
Haitao Pan
7ef1f960fb feat(auth): implement token authentication system across services
- Add token service and MFA service to account service
- Implement auth middleware for request validation
- Add token-based auth to dashboard and RAG server
- Update configuration files for auth settings
2025-11-05 19:28:23 +08:00
Haitao Pan
36dcb53256 update: account/config/sync.yaml 2025-11-05 16:36:08 +08:00
Haitao Pan
34edab39de fix(account): add timeout and email validation for verification sending 2025-11-04 09:38:15 +08:00
root
5bd01fae54 update prod runtime config and cleanup: adjust .gitignore, remove account-export.yaml 2025-11-02 12:07:13 +08:00
shenlan
55a2f052c6 Limit SMTP send duration with request-scoped timeouts (#636) 2025-11-02 11:54:59 +08:00
shenlan
ebcac64939 Detect implicit TLS when auto mode uses port 465 (#633) 2025-11-02 10:47:20 +08:00
shenlan
f915c46915 Refine registration flow with verification gate (#623) 2025-11-01 21:34:35 +08:00
shenlan
a41e8e0b32 Rename register resend endpoint to send (#622) 2025-11-01 20:25:37 +08:00
shenlan
6b0e98ee2f Add verification code resend flow to registration 2025-10-31 19:17:03 +08:00
Haitao Pan
3b3fa3d28b Added new account export and config files, updated nginx configuration 2025-10-31 07:59:09 +08:00
shenlan
9bfd6232aa Fix account Makefile tabs and update sync env handling (#603) 2025-10-30 16:01:31 +08:00
Haitao Pan
22254c18de feat(db): add setup_postgres_local.sh for local PostgreSQL initialization 2025-10-30 15:35:13 +08:00
shenlan
2a945adb6f Add SSH-based account sync utility (#602) 2025-10-30 14:07:53 +08:00
shenlan
78f1d10031 Embed Xray config template in generator (#601)
* Refactor xray config generator to use embedded definition

* Restore agent template compatibility for Xray config
2025-10-30 13:45:27 +08:00
shenlan
c31fc1c985 feat: point account service to dedicated domain (#598) 2025-10-28 17:07:02 +08:00
shenlan
afe6383124 Add desktop config sync endpoint stub (#597) 2025-10-28 09:47:30 +08:00
shenlan
6e2f8d7348 Allow combined server and agent mode (#595) 2025-10-27 21:02:03 +08:00
root
0bbbb176ed account/Makefile: add upgrade target 2025-10-27 12:12:48 +08:00
shenlan
167632fd80 Improve MFA provisioning resilience (#590) 2025-10-27 11:41:05 +08:00
shenlan
2555752001 Refactor Xray client injection (#589) 2025-10-27 03:02:41 +08:00
root
4a23dfefac update config/xray.config.template.json 2025-10-27 02:51:24 +08:00
shenlan
ef2e4088ef Ensure VLESS users include encryption field (#588) 2025-10-27 02:23:12 +08:00