Haitao Pan
fdbef2ab29
Add bridge bootstrap ticket flow
2026-04-10 15:36:05 +08:00
Haitao Pan
f6cae1d8e7
fix(accounts): degrade xworkmate profile when vault status read fails
2026-04-10 09:43:57 +08:00
4970b0d3be
feat(accounting): expose pricing-backed billing profile state ( #11 )
...
Co-authored-by: Haitao Pan <manbuzhe2009@qq.com>
2026-04-09 14:04:59 +08:00
Haitao Pan
3b4df1ad0d
feat(accounts): expose network identities and pg billing source
2026-04-09 13:29:18 +08:00
Haitao Pan
c98688cd51
feat(accounts): add vault-backed xworkmate secrets
2026-04-02 09:14:19 +08:00
Haitao Pan
e9fb4af72b
feat(accounts): add accounting control plane
2026-04-01 16:15:16 +08:00
Haitao Pan
794d386639
feat(xworkmate): add profile secret locators
2026-03-30 19:35:46 +08:00
Haitao Pan
c827270543
fix(xworkmate): reject nested raw token payloads
2026-03-20 22:46:21 +08:00
Haitao Pan
1c1e068ba1
test(sync): cover sync ack receipt
2026-03-20 22:45:19 +08:00
Haitao Pan
0180e6ace5
feat(api): add homepage video settings endpoints
2026-03-18 15:14:08 +08:00
Haitao Pan
b7b57c875f
fix(sync): preserve node display names across desktop sync
2026-03-17 16:52:55 +08:00
Haitao Pan
74d9958274
Add multi-tenant XWorkmate backend
2026-03-17 13:25:21 +08:00
Haitao Pan
c849f08144
fix(sync): degrade desktop sync config render failures
2026-03-17 10:06:39 +08:00
Haitao Pan
cc684f7c2a
fix(auth): replace public token exchange with one-time code
2026-03-17 08:51:01 +08:00
Haitao Pan
b653883c24
feat: add stripe billing endpoints
2026-03-16 20:10:33 +08:00
Haitao Pan
d500976236
feat(auth): add readonly review account
2026-03-16 09:24:49 +08:00
Haitao Pan
d59a8a0415
fix(accountsvc): guard nil agent registry on startup
2026-03-13 11:18:51 +08:00
Haitao Pan
ea3d6aec06
fix(sync): use XHTTP VLESS URIs, include all agent nodes, remove server-side rendered_json
...
- Sync now generates XHTTP VLESS URIs (port 443, type=xhttp) instead of TCP
- Node list includes all registered agent hosts, not just publicURL
- Removed rendered_json (server-side inbound config) from sync response
- Client generates proper outbound config from VLESS URI
- Node names use full domain (e.g. jp-xhttp.svc.plus) with country code
2026-03-02 20:28:49 +08:00
Haitao Pan
803b16d403
sync: include vless uri and node-based naming in snapshot
2026-02-21 10:03:16 +08:00
Haitao Pan
a0543978c9
feat(auth): accept account field in login payload
2026-02-21 07:30:38 +08:00
Haitao Pan
1c32d2f01b
feat: Add multi-factor authentication login flow and config synchronization endpoints.
2026-02-17 11:59:18 +08:00
Haitao Pan
0bd31e0707
fix(experience): consolidate demo account into sandbox@svc.plus
2026-02-10 11:52:45 +08:00
Haitao Pan
5d5e3ce0f8
fix(agent-server): include all active users in sync
2026-02-07 03:32:39 +08:00
Haitao Pan
414a9a417f
fix(agent-server): sync all eligible users
2026-02-07 03:24:57 +08:00
Haitao Pan
627df39684
fix(sandbox): sync sandbox client on all agent nodes
2026-02-07 03:01:50 +08:00
Haitao Pan
957d56c090
fix(sandbox): expose internal sandbox guest endpoint
2026-02-07 02:31:52 +08:00
Haitao Pan
8ebc370a28
refactor: replace direct error comparison with errors.Is for ErrUserNotFound
2026-02-07 02:24:32 +08:00
Haitao Pan
6117e6f769
feat: export additional is type-checking utility functions from lodash
2026-02-07 02:24:19 +08:00
Haitao Pan
b5ee9723c8
fix(account): relax isReadOnlyAccount to allow MFA setup and fix build
2026-02-07 02:24:04 +08:00
Haitao Pan
7aa99b43d8
feat: Dynamically set session cookie domain based on the public URL.
2026-02-07 02:23:53 +08:00
Haitao Pan
3b980a7ff2
chore: Update Next.js routes type definition import path to include .
2026-02-06 23:20:27 +08:00
Haitao Pan
56166f6fd3
feat: Extend VLESS node fallback logic to include demo users, use request host as an additional fallback, and normalize '*' as an empty host.
2026-02-06 22:59:46 +08:00
Haitao Pan
235b1f57a3
feat: Provide fallback Vless nodes for sandbox users and refine proxy UUID database update logic.
2026-02-06 22:37:15 +08:00
Haitao Pan
48102e95ad
feat: Add local-test.yaml configuration, modify user not found API response to include mfa_enabled status, and add 5xx error logging.
2026-02-06 22:31:50 +08:00
Haitao Pan
de66aec30e
feat: Implement database session fallback for token validation in the authentication middleware.
2026-02-06 22:16:28 +08:00
Haitao Pan
51336af5b7
feat: Implement session store fallback for token validation in the authentication middleware.
2026-02-06 19:02:48 +08:00
Haitao Pan
17909d57d2
fix: sandbox binding + agent sandbox sync + uuid rotation
2026-02-06 18:06:20 +08:00
Haitao Pan
b6ab404206
fix: Remove duplicate route registration causing panic on startup.
2026-02-06 16:40:31 +08:00
Haitao Pan
1bfe4f1d53
fix: Robust DB connection retries and move sandbox routes to admin group.
2026-02-06 16:21:29 +08:00
Haitao Pan
4503b053f7
feat: Implement sandbox agent functionality with dedicated user, admin API, and agent-side user filtering.
2026-02-06 13:03:47 +08:00
Haitao Pan
882378e328
test: Replace hardcoded test password with a named variable in api_test.go and add api.test.
2026-02-06 12:29:10 +08:00
Haitao Pan
fbe04d37b1
fix(agent-server): authenticate /v1/nodes via session tokens
2026-02-05 17:39:43 +08:00
Haitao Pan
4b4a2069b3
feat(agent): expose canonical /api/agent-server/v1/nodes
2026-02-05 16:52:10 +08:00
Haitao Pan
d849e3e6cc
fix(admin): complete management APIs for console integration
2026-02-05 15:01:12 +08:00
Haitao Pan
3ffd39cc8b
feat: add public.agents table and its set_updated_at trigger.
2026-02-05 13:10:56 +08:00
Haitao Pan
bc2562b877
fix: move mfa/status endpoint outside auth middleware and implement persistent session storage
...
- Moved /api/auth/mfa/status outside authProtected group to allow pre-login MFA checks
- Added session management to Store interface with CreateSession, GetSession, DeleteSession
- Implemented session persistence in both memoryStore and postgresStore
- Updated handler to use store-based sessions instead of in-memory map
- Added database schema for users, sessions, agents, and email_blacklist tables
- This fixes the 401 error when checking MFA status before login
2026-02-05 09:37:04 +08:00
Haitao Pan
15c07826ae
feat: incorporate registered agent metadata to dynamically populate and name VLESS nodes
2026-02-04 22:40:50 +08:00
Haitao Pan
5ff9d0ade0
feat(vless): support multi-region URI schemes and node metadata
2026-02-04 20:48:21 +08:00
Haitao Pan
838b1a1c0f
fix: enforce demo no-mfa login and expose proxy uuid in session
2026-02-04 14:59:19 +08:00
Haitao Pan
982a091b33
feat: add internal public overview endpoint for homepage stats
2026-02-04 14:15:27 +08:00