Commit Graph

Select branches

Hide Pull Requests

master

1.0.0

1.0.1

Mono Color

• 05e14981b5 fix(security): verify transfer-token HMAC and sign CSRF double-submit cookie naibaandcloudcode 2026-05-31 05:48:50 +00:00
• 834ae25024 fix(security): verify transfer-token HMAC and sign CSRF double-submit cookie naibaandcloudcode 2026-05-31 05:48:50 +00:00
• d4837dfc7a fix(security): reserve dashboard hosts from NAT and re-check DDNS profile ownership at worker time naibaandcloudcode 2026-05-31 02:04:35 +00:00
• f18232eafa fix(security): reserve dashboard hosts from NAT and re-check DDNS profile ownership at worker time naibaandcloudcode 2026-05-31 02:04:35 +00:00
• e8dabf5bc6 feat(auth): add PAT auth, scoped REST/MCP access, CSRF, and tenant isolation naibaandcloudcode 2026-05-30 15:56:44 +00:00
• ab25662ddd feat(auth): add PAT auth, scoped REST/MCP access, CSRF, and tenant isolation naibaandcloudcode 2026-05-30 15:56:44 +00:00
• 029695344c chore(frontend-templates): bump admin-frontend to v2.0.9 3 people 2026-05-26 07:12:31 +00:00
• 58c1ea7b0b chore(frontend-templates): bump admin-frontend to v2.0.9 3 people 2026-05-26 07:12:31 +00:00
• 57703c4c3e ci(gosec): mark jwt secret env var name as non-secret 3 people 2026-05-26 05:27:46 +00:00
• 35fc24e2b2 ci(gosec): mark jwt secret env var name as non-secret 3 people 2026-05-26 05:27:46 +00:00
• c94639e199 fix(server-group): hide guest-empty groups from guest listing naibaandcloudcode 2026-05-26 04:07:50 +00:00
• 76a5e2b261 fix(server-group): hide guest-empty groups from guest listing naibaandcloudcode 2026-05-26 04:07:50 +00:00
• a4f4cb1f34 fix(fm): switch create FM session to POST to defeat CSRF naibaandcloudcode 2026-05-26 04:07:49 +00:00
• 00fde59d4d fix(fm): switch create FM session to POST to defeat CSRF naibaandcloudcode 2026-05-26 04:07:49 +00:00
• a8f014838c fix(service): hide EnableShowInService=false services from sideband endpoints naibaandcloudcode 2026-05-26 03:59:59 +00:00
• 94b7deef24 fix(service): hide EnableShowInService=false services from sideband endpoints naibaandcloudcode 2026-05-26 03:59:59 +00:00
• 9c0fa84c95 fix(cron): switch manual trigger to POST to defeat CSRF naibaandcloudcode 2026-05-26 03:59:50 +00:00
• 9929e04643 fix(cron): switch manual trigger to POST to defeat CSRF naibaandcloudcode 2026-05-26 03:59:50 +00:00
• e05700c2f0 feat(jwt): server-side session table with keyId + obfuscated uid claims naibaandcloudcode 2026-05-26 03:51:05 +00:00
• 7b54a2d5ea feat(jwt): server-side session table with keyId + obfuscated uid claims naibaandcloudcode 2026-05-26 03:51:05 +00:00
• d6f381d078 feat(idcodec): add hashid obfuscation derived from jwt secret naibaandcloudcode 2026-05-26 03:50:36 +00:00
• 304afd9e09 feat(idcodec): add hashid obfuscation derived from jwt secret naibaandcloudcode 2026-05-26 03:50:36 +00:00
• 95c3a775d5 feat(config): make jwt_secret_key env-first and never persist when injected naibaandcloudcode 2026-05-26 03:50:26 +00:00
• 6811f730e9 feat(config): make jwt_secret_key env-first and never persist when injected naibaandcloudcode 2026-05-26 03:50:26 +00:00
• d202ecf8db chore(frontend-templates): bump admin-frontend to v2.0.8 naiba 2026-05-25 11:42:39 +00:00
• 1e0f479bb5 chore(frontend-templates): bump admin-frontend to v2.0.8 naiba 2026-05-25 11:42:39 +00:00
• b83d93fdc9 fix(server-transfer): break loader sort ties by transferID naiba 2026-05-25 10:36:43 +00:00
• 3619e5551a fix(server-transfer): break loader sort ties by transferID naiba 2026-05-25 10:36:43 +00:00
• 6b88cdb012 feat: server transfer rotation naiba 2026-05-25 10:15:21 +00:00
• e816e94fca feat: server transfer rotation naiba 2026-05-25 10:15:21 +00:00
• 37b6db806f update contributors[no ci] github-actions[bot] 2026-05-22 23:55:19 +08:00
• 636f4a9716 update contributors[no ci] github-actions[bot] 2026-05-22 23:55:19 +08:00
• 79a6dd76f8 Update vulnerability reporting contact method naiba 2026-05-22 22:58:18 +08:00
• 6612d151cd Update vulnerability reporting contact method naiba 2026-05-22 22:58:18 +08:00
• 8d21062c3b fix(rpc): authorize agent task results naibaandnaiba/CloudCode 2026-05-21 02:02:02 +00:00
• 02129f16fb fix(rpc): authorize agent task results naibaandnaiba/CloudCode 2026-05-21 02:02:02 +00:00
• 0f7af0bcb2 fix(rpc): bind io streams to target agents naibaandnaiba/CloudCode 2026-05-21 02:01:54 +00:00
• 8add559ec8 fix(rpc): bind io streams to target agents naibaandnaiba/CloudCode 2026-05-21 02:01:54 +00:00
• a5e2b0c36d ci: free gitee release storage before uploads naibaandnaiba/CloudCode 2026-05-19 05:06:38 +00:00
• 79c06d0f95 ci: free gitee release storage before uploads naibaandnaiba/CloudCode 2026-05-19 05:06:38 +00:00
• d8f077ffa2 ci: relax gitee release upload timeout naibaandnaiba/CloudCode 2026-05-19 03:59:48 +00:00
• fd08b35d81 ci: relax gitee release upload timeout naibaandnaiba/CloudCode 2026-05-19 03:59:48 +00:00
• d61f953c81 ci: make gitee release sync retryable naibaandnaiba/CloudCode 2026-05-19 03:17:33 +00:00
• 8d8fcb1275 ci: make gitee release sync retryable naibaandnaiba/CloudCode 2026-05-19 03:17:33 +00:00
• 1efe2bf053 fix(rpc): allow global agent secret across server owners naibaandnaiba/CloudCode 2026-05-19 01:58:53 +00:00
• fa31ba402e fix(rpc): allow global agent secret across server owners naibaandnaiba/CloudCode 2026-05-19 01:58:53 +00:00
• 9d67134148 fix(controller): filter service transfer stats by viewer naibaandnaiba/CloudCode 2026-05-19 00:35:02 +00:00
• 43624792a3 fix(controller): filter service transfer stats by viewer naibaandnaiba/CloudCode 2026-05-19 00:35:02 +00:00
• fb120074ac chore(security): pin JWT algorithm + SameSite and harden OAuth2 state cookie naibaandnaiba/CloudCode 2026-05-18 15:17:59 +00:00
• 59ccc12e58 chore(security): pin JWT algorithm + SameSite and harden OAuth2 state cookie naibaandnaiba/CloudCode 2026-05-18 15:17:59 +00:00
• 7c493e8f0b fix(rpc): verify gRPC client UUID belongs to the agent secret owner naibaandnaiba/CloudCode 2026-05-18 15:17:37 +00:00
• ee01a174fb fix(rpc): verify gRPC client UUID belongs to the agent secret owner naibaandnaiba/CloudCode 2026-05-18 15:17:37 +00:00
• 280e34977f fix(rpc): enforce magic ff05ff05 on IOStream init naibaandnaiba/CloudCode 2026-05-18 15:17:18 +00:00
• 26cf9b3fa6 fix(rpc): enforce magic ff05ff05 on IOStream init naibaandnaiba/CloudCode 2026-05-18 15:17:18 +00:00
• 097d4f7382 fix(controller): hide foreign server IDs from forceUpdateServer response naibaandnaiba/CloudCode 2026-05-18 15:16:59 +00:00
• 710a2c731c fix(controller): hide foreign server IDs from forceUpdateServer response naibaandnaiba/CloudCode 2026-05-18 15:16:59 +00:00
• 36297699f5 fix(rpc): bind io_stream sessions to creator to prevent terminal/fm hijack naibaandnaiba/CloudCode 2026-05-18 15:16:40 +00:00
• 6661d6a7fc fix(rpc): bind io_stream sessions to creator to prevent terminal/fm hijack naibaandnaiba/CloudCode 2026-05-18 15:16:40 +00:00
• ea7ad67f03 fix(ddns): apply SSRF defense to webhook provider naibaandnaiba/CloudCode 2026-05-18 15:14:27 +00:00
• e7c2e453c0 fix(ddns): apply SSRF defense to webhook provider naibaandnaiba/CloudCode 2026-05-18 15:14:27 +00:00
• b2294f11dd fix(ws): scope server stream visibility to viewer ownership naibaandnaiba/CloudCode 2026-05-17 03:41:28 +00:00
• 05e5da2535 fix(ws): scope server stream visibility to viewer ownership naibaandnaiba/CloudCode 2026-05-17 03:41:28 +00:00
• 2b6a1430ff chore(deps): upgrade go modules to latest naibaandnaiba/CloudCode 2026-05-17 02:40:09 +00:00
• e1244ca372 chore(deps): upgrade go modules to latest naibaandnaiba/CloudCode 2026-05-17 02:40:09 +00:00
• 854e2edf17 chore: bump admin frontend to v2.0.7 naibaandnaiba/CloudCode 2026-05-15 17:35:07 +00:00
• 9f21db2dc6 chore: bump admin frontend to v2.0.7 naibaandnaiba/CloudCode 2026-05-15 17:35:07 +00:00
• 7061651587 test: cover multi-user permission boundaries naibaandnaiba/CloudCode 2026-05-15 02:46:27 +00:00
• c0e2470a9d test: cover multi-user permission boundaries naibaandnaiba/CloudCode 2026-05-15 02:46:27 +00:00
• 2573ba7522 fix(controller): restrict waf and online-user listings to admins naibaandnaiba/CloudCode 2026-05-15 02:46:16 +00:00
• 530722293f fix(controller): restrict waf and online-user listings to admins naibaandnaiba/CloudCode 2026-05-15 02:46:16 +00:00
• 0ca7ee38c0 fix(controller): filter listing endpoints by ownership naibaandnaiba/CloudCode 2026-05-15 02:46:06 +00:00
• acc2b63ce2 fix(controller): filter listing endpoints by ownership naibaandnaiba/CloudCode 2026-05-15 02:46:06 +00:00
• 2a65a7db80 fix(controller): enforce ownership on notification group, NAT server, and batch move naibaandnaiba/CloudCode 2026-05-15 02:45:57 +00:00
• a5995ce045 fix(controller): enforce ownership on notification group, NAT server, and batch move naibaandnaiba/CloudCode 2026-05-15 02:45:57 +00:00
• 58f98db1a0 fix(controller): validate trigger task ownership naibaandnaiba/CloudCode 2026-05-10 02:53:24 +00:00
• 423175a425 fix(controller): validate trigger task ownership naibaandnaiba/CloudCode 2026-05-10 02:53:24 +00:00
• e38a0ef469 fix(cron): restrict task delivery by owner naibaandnaiba/CloudCode 2026-05-10 02:53:24 +00:00
• d7526351cf fix(cron): restrict task delivery by owner naibaandnaiba/CloudCode 2026-05-10 02:53:24 +00:00
• c4bea1ffd3 fix(notification): harden webhook request handling naibaandnaiba/CloudCode 2026-05-10 02:53:24 +00:00
• d06d539d34 fix(notification): harden webhook request handling naibaandnaiba/CloudCode 2026-05-10 02:53:24 +00:00
• f3dded3186 feat: separate expiry notification days and refactor TG bot interactive logic Bot 2026-05-13 00:52:36 +08:00
• 3d00f09493 feat: implement self-hosted scripts and agent binary proxy with tar.gz conversion Bot 2026-05-11 17:39:37 +08:00
• 3e889dc3d9 fix(OnUserDelete): only delete current iterated user from db uubulb 2026-05-09 12:16:31 +08:00
• 85b0dd2992 fix(OnUserDelete): only delete current iterated user from db uubulb 2026-05-09 12:16:31 +08:00
• 3319d7344f feat: rewrite notification system and telegram interactive bot Bot 2026-04-28 00:04:29 +08:00
• c606fd99f6 chore: optimize and fix github actions (cleanup, CI fixes, security scanner tuning) Bot 2026-04-26 22:25:00 +08:00
• b4a0641177 feat: use RDAP as primary domain info source for higher reliability Bot 2026-04-16 23:18:42 +08:00
• a3e2b2edba fix: resolve import errors and clarify whois error messages Bot 2026-04-16 23:16:30 +08:00
• 3d19be657d feat: automated renewal price sync via nazhumi API Bot 2026-04-16 23:11:30 +08:00
• 5dfc049121 feat: implement automated WHOIS sync for domains Bot 2026-04-16 23:08:50 +08:00
• 5493f5c32f feat: add native Telegram notification provider Bot 2026-04-16 21:43:44 +08:00
• dc58e84946 fix: automatic theme switching and extended expiry notifications Bot 2026-04-16 21:40:26 +08:00
• 3d849b4b43 feat: implement VPS/Domain expiry notifications and native SMTP support Bot 2026-04-16 21:36:49 +08:00
• bc32f8fce4 feat: add support for custom branding and background settings in Config Bot 2026-04-16 17:18:48 +08:00
• 23ece08076 Remove WebSocket SSH terminal API implementation Bot 2026-04-16 12:09:49 +08:00
• 2ad62df7b3 Merge upstream/master and resolve conflicts Buriburizaemon 2026-04-16 11:58:30 +08:00
• 027cb5f4b7 chore: upgrade frontend naiba 2026-04-05 10:00:11 +08:00
• 50dc8e6603 chore: upgrade frontend naiba 2026-04-05 10:00:11 +08:00
• 241506e390 chore: bump Go to 1.26, update dependencies and frontend templates naibaandnaiba/CloudCode 2026-03-20 11:23:03 +00:00
• 9acffc11f6 chore: bump Go to 1.26, update dependencies and frontend templates naibaandnaiba/CloudCode 2026-03-20 11:23:03 +00:00