sub2api

History

yangjianbo 470abee092 fix(auth): 修复邮件验证服务未配置时可绕过验证的安全漏洞

当邮件验证开启但 emailService 未配置时，原逻辑允许用户绕过验证直接注册。
现在会返回 ErrServiceUnavailable 拒绝注册，确保配置错误不会导致安全问题。

- 在验证码检查前先检查 emailService 是否配置
- 添加日志记录帮助发现配置问题
- 新增单元测试覆盖该场景

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-09 09:57:42 +08:00

cmd

Merge branch 'feature/account-expires-at' into main: feat: add account expires-at field and auto-pause expired accounts

2026-01-08 09:27:57 +08:00

ent

feat(groups): add Claude Code client restriction and session isolation

2026-01-08 23:07:00 +08:00

internal

fix(auth): 修复邮件验证服务未配置时可绕过验证的安全漏洞

2026-01-09 09:57:42 +08:00

migrations

feat(groups): add Claude Code client restriction and session isolation