William DrakeandClaude Opus 5.5 cf19f30d26 fix(payment): rate-limit anonymous public order verify endpoint ...

POST /api/v1/payment/public/orders/verify is unauthenticated and still used
by PaymentResultView as a fallback, so keep it but cap it at 20 req/min per
client IP (fail-open on Redis errors) to make out_trade_no enumeration
impractical without affecting users mid-payment.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-09-28 12:03:17 -04:00

..

admin.go

feat(opencode): 支持 OpenCode Go 官方用量窗口查询与自动刷新

2026-09-23 15:26:35 +08:00

auth_rate_limit_integration_test.go

…

auth_rate_limit_test.go

feat(security): add panel API rate limiting to protect DB from high-frequency requests

2026-07-27 15:12:51 +08:00

auth.go

新增腾讯天御验证码认证门禁

2026-08-04 15:09:29 +08:00

channel_monitor_feature_gate_test.go

feat(channel-monitor-v2): 接入模式开关、路由门控与依赖注入

2026-08-07 11:05:32 +08:00

common.go

…

composite_images_compatible_test.go

test(images): require explicit incompatible-account rejection

2026-09-12 14:46:50 +08:00

composite_platform_test.go

feat(groups)!: enforce model allowlists across gateway endpoints

2026-09-05 16:05:17 +08:00

gateway_codex_models_test.go

feat(gateway): expose routed Codex model catalogs

2026-08-22 14:43:40 +09:00

gateway_key_billing_test.go

test: align composite route contracts after rebase

2026-07-23 09:20:52 +08:00

gateway_model_allowlist_test.go

feat: support native Seedance Ark video task API

2026-09-17 04:14:14 +09:00

gateway_models_pinned_test.go

feat(gateway): retrieve models from the visible catalogue

2026-09-10 15:57:17 +08:00

gateway_test.go

Merge pull request #5654 from zninggo/fix/composite-video-generation

2026-08-21 21:27:17 +08:00

gateway.go

feat: support native Seedance Ark video task API

2026-09-17 04:14:14 +09:00

model_plaza.go

feat: add model plaza with group-scoped pricing showcase

2026-07-28 16:19:41 +08:00

ops_ingress_reject_routes_test.go

feat(security): add panel API rate limiting to protect DB from high-frequency requests

2026-07-27 15:12:51 +08:00

payment_public_rate_limit_test.go

fix(payment): rate-limit anonymous public order verify endpoint

2026-09-28 12:03:17 -04:00

payment.go

fix(payment): rate-limit anonymous public order verify endpoint

2026-09-28 12:03:17 -04:00

prompt_audit_route_coverage_test.go

feat: 新增独立 /x_search，走原生 x_search 并沿用搜索计费

2026-08-13 07:49:19 +08:00

seedance_test.go

feat: support native Seedance Ark video task API

2026-09-17 04:14:14 +09:00

subscription_bulk_action_routes_test.go

feat: 支持订阅管理批量操作

2026-09-13 11:49:03 +08:00

user.go

feat(channel-monitor-v2): 接入模式开关、路由门控与依赖注入

2026-08-07 11:05:32 +08:00