15 Commits

• fix(auth): address index logic bug and remove redundant conditions

  - Updated loop iteration in `AuthSelector` to correct index management for selecting candidates.
  - Fixed cursor index reset condition for large values to prevent overflow.
  - Removed unnecessary conditional reassignment of `allowRemote` in management handler for clarity and correctness.

  Luis Pater · 2025-09-23 10:21:45 +08:00
  5bf7a9575c
• feat(auth): standardize last_refresh metadata handling across executors

  - Added `last_refresh` timestamp to metadata for Codex, Claude, Qwen, and Gemini executors.
  - Implemented `extractLastRefreshTimestamp` utility for parsing diverse timestamp formats in management handlers.
  - Ensured consistent update and preservation of `last_refresh` in file-based auth handling.

  Luis Pater · 2025-09-22 23:23:31 +08:00
  2e836cee88
• feat(auth): introduce auth.providers for flexible authentication configuration

  - Replaced legacy `api-keys` field with `auth.providers` in configuration, supporting multiple authentication providers including `config-api-key`.
  - Added synchronization to maintain compatibility with legacy `api-keys`.
  - Updated core components like request handling and middleware to use the new provider system.
  - Enhanced management API endpoints for seamless integration with `auth.providers`.

  Luis Pater · 2025-09-22 17:36:31 +08:00
  4008be19f4
• refactor: standardize constant naming and improve file-based auth handling

  - Renamed constants from uppercase to CamelCase for consistency.
  - Replaced redundant file-based auth handling logic with the new `util.CountAuthFiles` helper.
  - Fixed various error-handling inconsistencies and enhanced robustness in file operations.
  - Streamlined auth client reload logic in server and watcher components.
  - Applied minor code readability improvements across multiple packages.

  Luis Pater · 2025-09-22 02:56:45 +08:00
  d9ad65622a
• v6 version first commit
  Luis Pater · 2025-09-22 01:40:24 +08:00
  4999fce7f4
• Add support for forcing GPT-5 Codex model configuration

  - Introduced a new `ForceGPT5Codex` configuration option in settings.
  - Added relevant API endpoints for managing `ForceGPT5Codex`.
  - Enhanced Codex client to handle GPT-5 Codex-specific logic and mapping.
  - Updated example configuration file to include the new option.
  
  Add GPT-5 Codex model support and configuration options in documentation

  Luis Pater · 2025-09-16 04:40:19 +08:00
  b84cbee77a
• Update internal module imports to use v5 package path

  - Updated all `github.com/luispater/CLIProxyAPI/internal/...` imports to point to `github.com/luispater/CLIProxyAPI/v5/internal/...`.
  - Adjusted `go.mod` to specify `module github.com/luispater/CLIProxyAPI/v5`.

  Luis Pater · 2025-09-13 23:34:32 +08:00
  9fce13fe03
• Implement IP-based rate limiting and ban mechanism for management API

  - Introduced a new `attemptInfo` structure to track failed login attempts per IP.
  - Added logic to temporarily ban IPs exceeding the allowed number of failures.
  - Enhanced middleware to reset failed attempt counters on successful authentication.
  - Updated `Handler` to include a `failedAttempts` map with thread-safe access.

  Luis Pater · 2025-09-12 03:00:37 +08:00
  1c92034191
• Enhance OAuth handling for Anthropic, Codex, Gemini, and Qwen tokens

  - Transitioned OAuth callback handling from temporary servers to predefined persistent endpoints.
  - Simplified token retrieval by replacing in-memory handling with state-file-based persistence.
  - Introduced unified `oauthStatus` map for tracking flow progress and errors.
  - Added new `/auth/*/callback` routes, streamlining code and state management for OAuth flows.
  - Improved error handling and logging in token exchange and callback flows.

  Luis Pater · 2025-09-10 02:34:22 +08:00
  0449fefa60
• Restrict management key validation to non-localhost requests only
  Luis Pater · 2025-09-09 23:28:16 +08:00
  156e3b017d
• Add OAuth support for Gemini CLI, Claude, Codex, and Qwen authentication

  - Implemented new handlers (`RequestGeminiCLIToken`, `RequestAnthropicToken`, `RequestCodexToken`, `RequestQwenToken`) for initiating OAuth flows.
  - Added endpoints for authorization URLs in management API.
  - Extracted `GenerateRandomState` to a reusable utility in `misc` package.
  - Refactored related logic in `openai_login.go` and `anthropic_login.go` for consistency.
  
  Add endpoints for initiating OAuth flows in management API documentation
  
  - Documented new endpoints for Anthropic, Codex, Gemini CLI, and Qwen login URLs.
  - Provided request and response examples for each endpoint in both English and Chinese versions.

  Luis Pater · 2025-09-09 02:54:06 +08:00
  545dff8b64
• Add dynamic log level adjustment and "type" field to auth files response

  - Introduced `SetLogLevel` utility function for unified log level management.
  - Updated dynamic log level handling across server and watcher components.
  - Extended auth files response by extracting and including the `type` field from file content.
  - Updated management API documentation with the new `type` field in auth files response.

  Luis Pater · 2025-09-08 01:09:39 +08:00
  c875088be2
• Add JSON annotations to configuration structs and new /config management endpoint

  - Added JSON annotations across all configuration structs in `config.go`.
  - Introduced `/config` management API endpoint to fetch complete configuration.
  - Updated management API documentation (`MANAGEMENT_API.md`, `MANAGEMENT_API_CN.md`) with `/config` usage.
  - Implemented `GetConfig` handler in `config_basic.go`.

  Luis Pater · 2025-09-06 20:45:51 +08:00
  6164f5c35b
• Add support for Codex API key authentication

  - Introduced functionality to handle Codex API keys, including initialization and management via new endpoints in the management API.
  - Updated Codex client to support both OAuth and API key authentication.
  - Documented Codex API key configuration in both English and Chinese README files.
  - Enhanced logging to distinguish between API key and OAuth usage scenarios.

  Luis Pater · 2025-09-03 03:36:56 +08:00
  c4a42eb1f0
• Add management API handlers for config and auth file management

  - Implemented CRUD operations for authentication files.
  - Added endpoints for managing API keys, quotas, proxy settings, and other configurations.
  - Enhanced management access with robust validation, remote access control, and persistence support.
  - Updated README with new configuration details.
  
  Fixed OpenAI Chat Completions for codex

  Luis Pater · 2025-08-31 14:29:23 +08:00
  db43930b98