CaIon 3e1be18310 fix: harden token search with pagination, rate limiting and input validation ...

- Add configurable per-user token creation limit (max_user_tokens)
- Sanitize search input patterns to prevent expensive queries
- Add per-user search rate limiting (by user ID)
- Add pagination to search endpoint with strict page size cap
- Skip empty search fields instead of matching nothing
- Hide internal errors from API responses
- Fix Interface2String float64 formatting causing config parse failures
- Add float-string fallback in config system for int/uint fields

2026-02-06 17:52:19 +08:00

..

billing.go

refactor(error): replace dto.OpenAIError with types.OpenAIError for consistency

2025-12-13 16:43:57 +08:00

channel_affinity_cache.go

feat: channel affinity (#2669)

2026-01-26 19:57:41 +08:00

channel-billing.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

channel-test.go

feat: openai response /v1/response/compact (#2644)

2026-01-26 20:20:16 +08:00

channel.go

feat: codex channel (#2652)

2026-01-14 22:29:43 +08:00

checkin.go

feat(checkin): add check-in functionality with status retrieval and user quota rewards

2026-01-02 23:00:33 +08:00

codex_oauth.go

feat: codex channel (#2652)

2026-01-14 22:29:43 +08:00

codex_usage.go

feat: codex channel (#2652)

2026-01-14 22:29:43 +08:00

console_migrate.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

deployment.go

fix: fix model deployment style issues, lint problems, and i18n gaps. (#2556)

2026-01-03 12:37:50 +08:00

discord.go

🛡️ fix: prevent OOM on large/decompressed requests; skip heavy prompt meta when token count is disabled

2025-12-16 17:00:19 +08:00

github.go

fix: optimized the GitHub login copy and timeout.

2025-11-19 14:34:30 +08:00

group.go

refactor(group): update user group handling to utilize userUsableGroups directly and add GetUserGroupRatio function

2025-10-30 21:16:42 +08:00

image.go

feat: support dify upload image file

2025-03-15 19:10:12 +08:00

linuxdo.go

feat: linuxdo oauth endpoint -> environment

2025-11-16 14:50:59 +08:00

log.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

midjourney.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

misc.go

feat: disk request body cache (#2780)

2026-01-30 01:00:49 +08:00

missing_models.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

model_meta.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

model_sync.go

feat: TLS_INSECURE_SKIP_VERIFY env

2026-01-15 14:43:53 +08:00

model.go

refactor(error): replace dto.OpenAIError with types.OpenAIError for consistency

2025-12-13 16:43:57 +08:00

oidc.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

option.go

feat: customizable automatic retry status codes

2026-01-14 14:34:12 +08:00

passkey.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

performance_unix.go

fix: FreeBSD build failure due to type mismatch in Statfs_t fields (#2793)

2026-02-02 00:36:36 +08:00

performance_windows.go

feat: disk request body cache (#2780)

2026-01-30 01:00:49 +08:00

performance.go

feat: disk request body cache (#2780)

2026-01-30 01:00:49 +08:00

playground.go

refactor(channel_select): enhance retry logic and context key usage for channel selection

2025-12-13 16:43:38 +08:00

prefill_group.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

pricing.go

feat: add special user usable group setting

2025-10-28 23:25:43 +08:00

ratio_config.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

ratio_sync.go

feat: TLS_INSECURE_SKIP_VERIFY env

2026-01-15 14:43:53 +08:00

redemption.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

relay.go

feat: grok Usage Guidelines Violation Fee (#2753)

2026-01-26 20:20:30 +08:00

secure_verification.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

setup.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

swag_video.go

feat: channel kling support New API

2025-07-21 21:38:53 +08:00

task_video.go

fix(task): 修复渠道配置多个key时无法获取任务的问题

2025-12-15 18:15:35 +08:00

task.go

🛡️ fix: prevent OOM on large/decompressed requests; skip heavy prompt meta when token count is disabled

2025-12-16 17:00:19 +08:00

telegram.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

token.go

fix: harden token search with pagination, rate limiting and input validation

2026-02-06 17:52:19 +08:00

topup_creem.go

🛡️ fix: prevent OOM on large/decompressed requests; skip heavy prompt meta when token count is disabled

2025-12-16 17:00:19 +08:00

topup_stripe.go

fix: stripe cancelURL topUp link

2025-10-30 13:41:52 +08:00

topup.go

Merge branch 'main' into feat_subscribe_sp1

2025-10-20 22:36:33 +08:00

twofa.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

uptime_kuma.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

usedata.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

user.go

feat: support first bind update password (#2520)

2025-12-26 13:59:56 +08:00

vendor_meta.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00

video_proxy_gemini.go

fix: Use channel proxy settings for task query scenarios

2025-12-09 11:15:27 +08:00

video_proxy.go

fix: Use channel proxy settings for task query scenarios

2025-12-09 11:15:27 +08:00

wechat.go

format: package name -> github.com/QuantumNous/new-api (#2017)

2025-10-11 15:30:09 +08:00