16203b14f6
feat(admin-frontend): 新增系统与订阅管理后台页面
...
扩展管理端侧边栏与路由，新增系统配置真实页面、订阅套餐
管理页、节点管理页及多个结构化占位页
补齐前端 API、类型与工具层，并增强仪表盘刷新、趋势切换、
失败作业详情与流量排行 limit 联动能力
同步后端 traffic rank limit 支持与知识库归档、设计约束、
验证配置及视觉验收产物
2026-04-24 15:32:09 +08:00
9ce345eb76
merge: sync upstream/master preserving local changes
2026-04-23 22:27:18 +08:00
ec1efb4482
refactor(middleware): split V2 server middleware to drop node_type
2026-04-23 19:24:34 +08:00
2efef9e8ee
fix(security): prevent payment gateway credentials leakage via OrderResource
2026-04-23 10:26:35 +08:00
60b5c99e74
✨ feat(admin): 补齐工单工作台与流量日志
...
---
✨ feat(admin): add ticket workspace and traffic logs
2026-04-21 23:13:00 +08:00
cb8c1743dc
fix(deploy): make install/update redis-independent and clean stale octane state
...
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-04-19 23:23:27 +08:00
e01620689b
refactor: all-in-one docker deployment with auto-tuned resources and per-mode compose templates
2026-04-19 21:18:15 +08:00
c36054b970
fix: restore stripped protocol_settings fields for tuic/mieru/vmess
2026-04-19 00:45:47 +08:00
c0b6ee1763
refactor: core plugins to plugins-core
2026-04-18 23:31:59 +08:00
fe62542b7c
fix: unify Trojan server_name/allow_insecure to tls_settings across all protocols
2026-04-18 21:00:21 +08:00
bdd7820a69
feat(admin): batch node-machine binding & frontend update
2026-04-18 19:38:31 +08:00
360684245e
fix: ticket reply_status semantics, N+1 query, and admin reply auto-reopen
2026-04-18 16:40:21 +08:00
da8b5018ea
fix: Shadowrocket Trojan whitelist bug and xhttp support
2026-04-18 16:07:22 +08:00
9ba946621e
feat: email template management with DB override, modern mail redesign
2026-04-18 15:41:23 +08:00
e689699f44
fix: batchUpdate use model instance to trigger observer
2026-04-18 04:26:25 +08:00
521d4e3ac5
fix: dedup device IPs, reset stale online_count on disconnect and scheduled cleanup ( #886 )
2026-04-18 02:57:55 +08:00
1708b6564b
feat: add xhttp subscriptions, network monitoring, chart legend toggle and ticket sender labels
2026-04-18 02:02:06 +08:00
994819e8a0
fix(clashmeta): handle associative arrays in block yaml export
2026-04-18 01:50:45 +08:00
4a5091825c
t2
2026-04-18 01:30:24 +08:00
1282e802b5
t
2026-04-18 01:23:46 +08:00
9ca92430ee
fix(clashmeta): render block-style yaml for subscription export
2026-04-18 01:11:11 +08:00
cd5e00bbfb
Merge remote-tracking branch 'upstream/master'
...
# Conflicts:
# public/assets/admin
2026-04-18 00:35:04 +08:00
ecf0a268d3
fix(clashmeta): keep nested proxy objects in block style
2026-04-18 00:31:25 +08:00
d9833fab47
fix(plugin): improve plugin install and uninstall migration handling
2026-04-17 23:11:03 +08:00
f84afc7903
fix: support both GET and POST for handshake endpoint (backward compatibility)
2026-04-17 20:59:48 +08:00
fea7d97aa3
Update installer URL to use 'dev' branch
2026-04-17 12:54:22 +08:00
a74cc2f19d
feat: show install command on machine creation
2026-04-17 06:47:05 +08:00
e297b5fe9f
feat: machine mode, ECH subscriptions, batch ops & security hardening
2026-04-17 03:02:53 +08:00
edbd8de356
QuantumultX下发Anytls节点 ( #880 )
...
QuantumultX最新版本支持Anytls了，做适配
2026-04-16 19:31:24 +08:00
abd64ed20c
Merge remote-tracking branch 'upstream/master'
...
# Conflicts:
# app/Services/UserOnlineService.php
# public/assets/admin
2026-04-16 16:59:21 +08:00
13756956a6
fix: reset traffic stats when copying server nodes
2026-04-11 20:24:43 +08:00
121511523f
Fix: CVE-2026-39912 - Magic link token leak in loginWithMailLink ( #873 )
...
The loginWithMailLink endpoint returns the magic login link in the
HTTP response body, allowing unauthenticated account takeover.
The fix returns true instead of the link. The email delivery is
the authentication factor.
Bug inherited from V2Board commit bdb10bed (2022-06-27).
2026-04-10 02:44:20 +08:00
58ef46f754
fix: stop sending VLESS decryption when encryption is disabled
2026-04-08 11:05:55 +08:00
ec49ba3fd1
Loon和Surfboard适配anytls ( #854 )
...
* Loon适配anytls
* Surfboard适配anytls
Surfboard适配anytls
2026-04-02 15:47:41 +08:00
b7c8b31a91
Merge pull request #856 from NFamou/master
...
支持Surfboard下发SS2022
2026-04-02 15:46:55 +08:00
c5a8c836c0
Revert "feat: Track user traffic per node (server_id)"
2026-03-30 18:17:27 +08:00
5f1afe4bdc
feat: add Vless Encryption support
2026-03-30 17:03:37 +08:00
0cd20d12dd
Merge pull request #755 from socksprox/feat/server-id-stat-user
...
feat: Track user traffic per node (server_id)
2026-03-30 13:55:11 +08:00
b4a94d1605
Merge pull request #689 from socksprox/fix-user-generation-multiple-prefix
...
Fix user generation with email_prefix to support multiple users
2026-03-30 13:32:46 +08:00
7879a9ef85
Merge pull request #786 from lithromantic/master
...
Add sha256salt hashing option in password verification
2026-03-30 13:05:39 +08:00
a58d66d72e
feat: node traffic limit & batch operations
...
- Traffic monitoring with transfer_enable limit
- Batch delete nodes
- Reset traffic (single/batch)
2026-03-30 02:50:56 +08:00
daf3055b42
fix: escape Telegram Markdown special characters
2026-03-30 01:46:56 +08:00
3744ebcd5a
Revert "fix: escape Telegram Markdown special characters ( fix #450 )"
...
This reverts commit 23294c1f93
2026-03-29 17:48:49 +08:00
6cac241144
Merge branch 'cedar2025:master' into master
2026-03-29 00:00:34 +01:00
76a800ddbb
Merge pull request #832 from Dlphine/fix/raw-array-access-data-get
...
fix: replace raw array access with data_get() to prevent Undefined array key
2026-03-28 17:38:44 +08:00
23294c1f93
fix: escape Telegram Markdown special characters ( fix #450 )
2026-03-28 09:10:54 +08:00
130f7c82a8
feat: revoke other sessions when changing password ( fix #414 )
2026-03-28 08:31:24 +08:00
7fbd1bb92d
feat: implement email case-insensitive queries ( fix #318 )
2026-03-28 07:09:21 +08:00
5dd4cd4bc9
fix: replace raw array access with data_get() to prevent Undefined array key
...
- Migrate $protocol_settings['key'] to data_get($protocol_settings, 'key') across General, SingBox, Shadowrocket, Surfboard, QuantumultX
- Prevents PHP 8 Undefined array key fatal errors when optional protocol_settings fields are missing
- Same class of bug that caused #735
2026-03-27 13:51:28 +08:00
3c3639613e
fix: use ServerService::getServer() for node lookup in WebSocket
2026-03-26 03:51:58 +08:00
yinjianm