CaIon 3e1be18310 fix: harden token search with pagination, rate limiting and input validation ...

- Add configurable per-user token creation limit (max_user_tokens)
- Sanitize search input patterns to prevent expensive queries
- Add per-user search rate limiting (by user ID)
- Add pagination to search endpoint with strict page size cap
- Skip empty search fields instead of matching nothing
- Hide internal errors from API responses
- Fix Interface2String float64 formatting causing config parse failures
- Add float-string fallback in config system for int/uint fields

2026-02-06 17:52:19 +08:00

..

limiter

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

api_type.go

feat: codex channel (#2652)

2026-01-14 22:29:43 +08:00

audio.go

Revert "feat(audio): replace SysLog with logger for improved logging in GetAudioDuration"

2025-12-14 00:04:40 +08:00

body_storage.go

feat: disk request body cache (#2780)

2026-01-30 01:00:49 +08:00

constants.go

fix: harden token search with pagination, rate limiting and input validation

2026-02-06 17:52:19 +08:00

copy.go

Revert "refactor: replace DeepCopy with Copy for request handling consistency"

2025-08-28 15:11:55 +08:00

crypto.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

custom-event.go

fix: WriteContentType panic

2025-07-30 20:31:51 +08:00

database.go

💱 feat(settings): introduce site-wide quota display type (USD/CNY/TOKENS/CUSTOM)

2025-09-29 23:23:31 +08:00

disk_cache_config.go

feat: disk request body cache (#2780)

2026-01-30 01:00:49 +08:00

email-outlook-auth.go

fix: 多地区outlook邮箱和ofb邮箱Auth

2024-08-23 17:16:09 +08:00

email.go

fix: correct sender format issues

2025-12-12 16:19:14 +08:00

embed-file-system.go

fix: typo

2025-10-30 14:21:46 +08:00

endpoint_defaults.go

feat: openai response /v1/response/compact (#2644)

2026-01-26 20:20:16 +08:00

endpoint_type.go

feat: add support for Sora channel type and OpenAI video endpoint

2025-10-13 19:21:45 +08:00

env.go

feat: add env DIFY_DEBUG

2024-07-07 02:24:51 +08:00

gin.go

feat: disk request body cache (#2780)

2026-01-30 01:00:49 +08:00

go-channel.go

refactor: Replace manual goroutine creation with gopool.Go

2025-02-19 18:38:29 +08:00

gopool.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

hash.go

fix: for AI review problems

2025-07-10 20:55:43 +08:00

init.go

feat: TLS_INSECURE_SKIP_VERIFY env

2026-01-15 14:43:53 +08:00

ip.go

feat(auth): enhance IP restriction handling with CIDR support

2025-12-15 17:24:09 +08:00

json.go

fix: regex repeat compile

2025-12-03 00:41:47 +08:00

model.go

feat: refactor token estimation logic

2025-12-02 21:34:39 +08:00

page_info.go

fix: page query param is p

2025-07-21 15:39:16 +08:00

pprof.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

pyro.go

docs: document pyroscope env var

2025-12-19 23:16:56 +08:00

quota.go

refactor: enhance quota handling and logging for pre-consume operations

2025-08-14 21:30:03 +08:00

rate-limit.go

Initial commit

2023-04-22 20:39:27 +08:00

redis.go

✨ feat: refactor environment variable initialization and introduce new constant types for API and context keys

2025-07-03 13:10:25 +08:00

ssrf_protection.go

feat(auth): enhance IP restriction handling with CIDR support

2025-12-15 17:24:09 +08:00

str.go

feat: add regex pattern to mask API keys in sensitive information

2026-01-05 22:44:11 +08:00

sys_log.go

feat: add startup logging with network IPs and container detection

2025-09-27 16:30:24 +08:00

topup-ratio.go

chore: 重构

2024-06-27 19:30:17 +08:00

totp.go

fix: coderabbit review

2025-08-03 10:41:00 +08:00

utils.go

fix: harden token search with pagination, rate limiting and input validation

2026-02-06 17:52:19 +08:00

validate.go

Initial commit

2023-04-22 20:39:27 +08:00

verification.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00