Commit Graph

55 Commits

Author SHA1 Message Date
Haitao Pan
c849f08144 fix(sync): degrade desktop sync config render failures 2026-03-17 10:06:39 +08:00
Haitao Pan
cc684f7c2a fix(auth): replace public token exchange with one-time code 2026-03-17 08:51:01 +08:00
Haitao Pan
b653883c24 feat: add stripe billing endpoints 2026-03-16 20:10:33 +08:00
Haitao Pan
d500976236 feat(auth): add readonly review account 2026-03-16 09:24:49 +08:00
Haitao Pan
d59a8a0415 fix(accountsvc): guard nil agent registry on startup 2026-03-13 11:18:51 +08:00
Haitao Pan
ea3d6aec06 fix(sync): use XHTTP VLESS URIs, include all agent nodes, remove server-side rendered_json
- Sync now generates XHTTP VLESS URIs (port 443, type=xhttp) instead of TCP
- Node list includes all registered agent hosts, not just publicURL
- Removed rendered_json (server-side inbound config) from sync response
- Client generates proper outbound config from VLESS URI
- Node names use full domain (e.g. jp-xhttp.svc.plus) with country code
2026-03-02 20:28:49 +08:00
Haitao Pan
803b16d403 sync: include vless uri and node-based naming in snapshot 2026-02-21 10:03:16 +08:00
Haitao Pan
a0543978c9 feat(auth): accept account field in login payload 2026-02-21 07:30:38 +08:00
Haitao Pan
1c32d2f01b feat: Add multi-factor authentication login flow and config synchronization endpoints. 2026-02-17 11:59:18 +08:00
Haitao Pan
0bd31e0707 fix(experience): consolidate demo account into sandbox@svc.plus 2026-02-10 11:52:45 +08:00
Haitao Pan
5d5e3ce0f8 fix(agent-server): include all active users in sync 2026-02-07 03:32:39 +08:00
Haitao Pan
414a9a417f fix(agent-server): sync all eligible users 2026-02-07 03:24:57 +08:00
Haitao Pan
627df39684 fix(sandbox): sync sandbox client on all agent nodes 2026-02-07 03:01:50 +08:00
Haitao Pan
957d56c090 fix(sandbox): expose internal sandbox guest endpoint 2026-02-07 02:31:52 +08:00
Haitao Pan
8ebc370a28 refactor: replace direct error comparison with errors.Is for ErrUserNotFound 2026-02-07 02:24:32 +08:00
Haitao Pan
6117e6f769 feat: export additional is type-checking utility functions from lodash 2026-02-07 02:24:19 +08:00
Haitao Pan
b5ee9723c8 fix(account): relax isReadOnlyAccount to allow MFA setup and fix build 2026-02-07 02:24:04 +08:00
Haitao Pan
7aa99b43d8 feat: Dynamically set session cookie domain based on the public URL. 2026-02-07 02:23:53 +08:00
Haitao Pan
3b980a7ff2 chore: Update Next.js routes type definition import path to include . 2026-02-06 23:20:27 +08:00
Haitao Pan
56166f6fd3 feat: Extend VLESS node fallback logic to include demo users, use request host as an additional fallback, and normalize '*' as an empty host. 2026-02-06 22:59:46 +08:00
Haitao Pan
235b1f57a3 feat: Provide fallback Vless nodes for sandbox users and refine proxy UUID database update logic. 2026-02-06 22:37:15 +08:00
Haitao Pan
48102e95ad feat: Add local-test.yaml configuration, modify user not found API response to include mfa_enabled status, and add 5xx error logging. 2026-02-06 22:31:50 +08:00
Haitao Pan
de66aec30e feat: Implement database session fallback for token validation in the authentication middleware. 2026-02-06 22:16:28 +08:00
Haitao Pan
51336af5b7 feat: Implement session store fallback for token validation in the authentication middleware. 2026-02-06 19:02:48 +08:00
Haitao Pan
17909d57d2 fix: sandbox binding + agent sandbox sync + uuid rotation 2026-02-06 18:06:20 +08:00
Haitao Pan
b6ab404206 fix: Remove duplicate route registration causing panic on startup. 2026-02-06 16:40:31 +08:00
Haitao Pan
1bfe4f1d53 fix: Robust DB connection retries and move sandbox routes to admin group. 2026-02-06 16:21:29 +08:00
Haitao Pan
4503b053f7 feat: Implement sandbox agent functionality with dedicated user, admin API, and agent-side user filtering. 2026-02-06 13:03:47 +08:00
Haitao Pan
882378e328 test: Replace hardcoded test password with a named variable in api_test.go and add api.test. 2026-02-06 12:29:10 +08:00
Haitao Pan
fbe04d37b1 fix(agent-server): authenticate /v1/nodes via session tokens 2026-02-05 17:39:43 +08:00
Haitao Pan
4b4a2069b3 feat(agent): expose canonical /api/agent-server/v1/nodes 2026-02-05 16:52:10 +08:00
Haitao Pan
d849e3e6cc fix(admin): complete management APIs for console integration 2026-02-05 15:01:12 +08:00
Haitao Pan
3ffd39cc8b feat: add public.agents table and its set_updated_at trigger. 2026-02-05 13:10:56 +08:00
Haitao Pan
bc2562b877 fix: move mfa/status endpoint outside auth middleware and implement persistent session storage
- Moved /api/auth/mfa/status outside authProtected group to allow pre-login MFA checks
- Added session management to Store interface with CreateSession, GetSession, DeleteSession
- Implemented session persistence in both memoryStore and postgresStore
- Updated handler to use store-based sessions instead of in-memory map
- Added database schema for users, sessions, agents, and email_blacklist tables
- This fixes the 401 error when checking MFA status before login
2026-02-05 09:37:04 +08:00
Haitao Pan
15c07826ae feat: incorporate registered agent metadata to dynamically populate and name VLESS nodes 2026-02-04 22:40:50 +08:00
Haitao Pan
5ff9d0ade0 feat(vless): support multi-region URI schemes and node metadata 2026-02-04 20:48:21 +08:00
Haitao Pan
838b1a1c0f fix: enforce demo no-mfa login and expose proxy uuid in session 2026-02-04 14:59:19 +08:00
Haitao Pan
982a091b33 feat: add internal public overview endpoint for homepage stats 2026-02-04 14:15:27 +08:00
Haitao Pan
40bb141322 feat: enforce root account and introduce RBAC policy scaffolding 2026-02-04 13:36:24 +08:00
Haitao Pan
09eb26da25 feat: add read-only Demo account with hourly UUID rotation 2026-02-04 12:37:31 +08:00
Haitao Pan
a9f669e7cd feat: Enforce OAuth email verification and update user verification status during login. 2026-02-02 21:07:10 +08:00
Haitao Pan
08a92ba2d0 feat: Add multiple context and editor hooks to ChatInput component. 2026-02-02 21:02:32 +08:00
Haitao Pan
9774dea4b6 feat: enhance proxy UUID renewal with absolute date and refined expiration logic 2026-02-02 20:37:43 +08:00
Haitao Pan
8afd3e5b8f fix: resolve build errors (undefined generateRandomUUID, shadowed auth package) and update .gitignore 2026-02-02 20:29:10 +08:00
Haitao Pan
693889f366 feat: implement user management features (pause, delete, blacklist, renew uuid) 2026-02-02 20:19:06 +08:00
Haitao Pan
9c061b2f9b feat: expose TCP node and populate VLESS users in agent list API 2026-01-31 18:26:57 +08:00
Haitao Pan
3b8195fd08 feat: support internal agent auth token and update agent server API path 2026-01-31 17:42:05 +08:00
Haitao Pan
ccb0bada22 feat: Add endpoint to list agent VLESS nodes based on the server's public URL and introduce a configuration option for the public URL. 2026-01-31 13:52:31 +08:00
Haitao Pan
400c56e72d feat(auth): support shared session tokens and device/node pairing integration 2026-01-30 23:12:01 +08:00
Haitao Pan
5bf93d1d3f feat: add user management APIs for management page
- Add ListUsers to Store interface and implementations
- Add user listing API endpoint (GET /api/users)
- Add role management endpoints (POST/DELETE /api/auth/admin/users/:userId/role)
- Add GeneratePublicToken to TokenService for OAuth callback
- Add CancelSubscription to Store interface
- Update go.mod with oauth2 dependencies
2026-01-30 08:59:55 +08:00