image2api

Files

T

dokploy-bot 42208c0753 security: fix rate-limit bypass, payment amount check, stats leak, owner-dir collision, video panic guard

- clientIP: stop trusting client-supplied X-Forwarded-For; use gin ClientIP
  with trusted proxies limited to private docker networks
- payment: verify notify money matches order amount; remove hardcoded
  gateway default, fail loudly when api_base is unset
- stats: public endpoint now serves aggregates only; recent files (owner
  names) moved to admin-only /stats/recent
- auth: reject signups whose username/email-local collides with another
  user's media directory namespace
- v1: recover panics in background video jobs, refund + mark failed

2026-09-19 22:13:08 +08:00

bootstrap

feat: sync all features to image2api

2026-08-15 23:00:30 +08:00

config

Initial open-source release (MIT): image2api AI gateway

2026-06-25 22:59:04 +08:00

http

security: fix rate-limit bypass, payment amount check, stats leak, owner-dir collision, video panic guard

2026-09-19 22:13:08 +08:00

model

feat(api): GET /v1/user/balance 查询用户余额