Commits · 11cf23da7defc73665f8ca6e492887373c4f69ce · 陈曦 / sub2api · GitLab

23 Apr, 2026 4 commits
- 修改403逻辑: 先临时冷却，再根据连续次数决定是否判坏号 · 11cf23da
  wx-11 authored Apr 23, 2026
  
  11cf23da
- 使用codex的生图接口代替web2api · eea6f388
  wx-11 authored Apr 23, 2026
  
  eea6f388
- fix: add io.LimitReader bounds to prevent OOM in image handling · 0b85a8da
  shaw authored Apr 23, 2026
```
Limit image download and multipart upload reads to 20MB to prevent
unbounded memory allocation from abnormal upstream responses.
```
  0b85a8da
- fix openai image request handling · 00778dca
  meteor041 authored Apr 23, 2026
  
  00778dca
22 Apr, 2026 36 commits
- fix payment qr fallback and admin guidance · f35e9675
  IanShaw027 authored Apr 22, 2026
  
  f35e9675
- fix: clean up profile auth binding notes · 55513493
  IanShaw027 authored Apr 22, 2026
  
  55513493
- fix(ci): run 108a migration before 109 in backfill integration test · 45065c23
  shaw authored Apr 22, 2026
  
  45065c23
- feat: 补充gpt生图模型测试功能 · 4d0483f5
  shaw authored Apr 22, 2026
  
  4d0483f5
- fix(ci): align openai account tests and remove dead wxpay const · 6b194903
  IanShaw027 authored Apr 22, 2026
  
  6b194903
- feat: 补充gpt生图模型测试功能 · 1e0d4660
  shaw authored Apr 22, 2026
  
  1e0d4660
- fix(upgrade): close payment and oidc compatibility gaps · 9de7a72c
  IanShaw027 authored Apr 22, 2026
  
  9de7a72c
- fix(lint): remove embedded response selectors in openai images · 66b3acc2
  IanShaw027 authored Apr 22, 2026
  
  66b3acc2
- fix(admin): preserve legacy oidc security write defaults · 3419cb01
  IanShaw027 authored Apr 22, 2026
  
  3419cb01
- fix(unit): restore secure oidc defaults and wechat alias reuse · a94d89ef
  IanShaw027 authored Apr 22, 2026
  
  a94d89ef
- fix(test): update wechat bind start path assertion · 66680a30
  IanShaw027 authored Apr 22, 2026
  
  66680a30
- fix(ci): clean up lint and dead code · ad460096
  IanShaw027 authored Apr 22, 2026
  
  ad460096
- fix(auth): preserve resolved token version on oauth login · 82259d13
  IanShaw027 authored Apr 22, 2026
  
  82259d13
- fix(profile): stabilize binding compatibility and frontend checks · ca4e38aa
  IanShaw027 authored Apr 22, 2026
  
  ca4e38aa
- fix(payment): restore upgrade-safe payment flows · 1aab084e
  IanShaw027 authored Apr 22, 2026
  
  1aab084e
- fix(auth): harden oauth identity upgrade paths · 36aed359
  IanShaw027 authored Apr 22, 2026
  
  36aed359
- fix(auth): invalidate access tokens on session revoke · 3d29f7c2
  IanShaw027 authored Apr 22, 2026
  
  3d29f7c2
- fix(test): restore identity repo integration imports · 01a991f5
  IanShaw027 authored Apr 22, 2026
  
  01a991f5
- fix(profile): stabilize identity binding management · 81c827ee
  IanShaw027 authored Apr 22, 2026
  
  81c827ee
- fix(auth): harden oauth callback adoption flows · 83cad63c
  IanShaw027 authored Apr 22, 2026
  
  83cad63c
- fix(upgrade): preserve legacy auth and payment compatibility · 06136af8
  IanShaw027 authored Apr 22, 2026
  
  06136af8
- fix(openai): 修复生图服务 lint 问题 · 6ad333d6
  lucas morgan authored Apr 22, 2026
```
- 移除不安全的类型断言用法
- 补齐响应体关闭与字符串拼接的 lint 问题
- 按 staticcheck 建议简化选择器与条件表达式
```
  6ad333d6
- fix(payment): support source routing and compatible resume signing · d6a04bb7
  IanShaw027 authored Apr 22, 2026
  
  d6a04bb7
- feat(openai): 同步生图 API 支持并接入图片计费调度 · c5480219
  lucas morgan authored Apr 22, 2026
```
- 同步 OpenAI 图片生成与编辑接口
- 接入图片请求解析、账号调度、转发与用量记录
- 接入图片计费与图片用量落库
- 限制 OAuth 生图仅支持无显式模型和尺寸的基础请求
```
  c5480219
- fix(settings): preserve oauth config compatibility on upgrade · b2e07121
  IanShaw027 authored Apr 22, 2026
  
  b2e07121
- fix(auth): harden pending oauth and backend mode flows · 767f2f2d
  IanShaw027 authored Apr 22, 2026
  
  767f2f2d
- fix(migrations): keep auth identity and payment upgrades safe · 1ffebbb5
  IanShaw027 authored Apr 22, 2026
  
  1ffebbb5
- fix(auth): scrub legacy pending oauth tokens on upgrade · be9df2be
  IanShaw027 authored Apr 22, 2026
  
  be9df2be
- fix(payment): respect configured visible method source · 9d5e9bbc
  IanShaw027 authored Apr 22, 2026
  
  9d5e9bbc
- test(auth): strengthen pending oauth legacy token assertions · 45487322
  IanShaw027 authored Apr 22, 2026
  
  45487322
- fix(migrations): defer online ddl follow-ups safely · 18481a10
  IanShaw027 authored Apr 22, 2026
  
  18481a10
- fix(auth): harden pending oauth session consumption · ca1f30a9
  IanShaw027 authored Apr 22, 2026
  
  ca1f30a9
- fix(auth): preserve backward-compatible oauth defaults · 84628108
  IanShaw027 authored Apr 22, 2026
  
  84628108
- fix(payment): restore public resume and result flows · dd314c41
  IanShaw027 authored Apr 22, 2026
  
  dd314c41
- fix(review): harden payment, oauth, and migration paths · c229f33e
  IanShaw027 authored Apr 22, 2026
  
  c229f33e
- fix(ci): make legacy migration cleanup resilient · 7fbd5177
  IanShaw027 authored Apr 22, 2026
  
  7fbd5177