shaw 93d91e20b9 fix(vertex): audit fixes for Vertex Service Account feature (#1977) ...

- Security: force token_uri to Google default, preventing SSRF via crafted service account JSON
- Dedup: extract shared getVertexServiceAccountAccessToken() to eliminate ~35 lines of duplication between ClaudeTokenProvider and GeminiTokenProvider
- Fix: apply model mapping + Vertex model ID normalization in forward_as_responses and forward_as_chat_completions paths
- Fix: exclude service_account from AI Studio endpoint selection (Vertex cannot serve generativelanguage.googleapis.com)
- Feature: add model restriction/mapping UI for service_account in EditAccountModal
- Dedup: extract VERTEX_LOCATION_OPTIONS to shared constants
- i18n: replace all hardcoded Chinese strings in Vertex UI with translation keys

2026-04-29 16:53:09 +08:00

..

public

revert: remove fork-only changes from release sync

2026-04-23 21:40:58 +08:00

src

fix(vertex): audit fixes for Vertex Service Account feature (#1977)

2026-04-29 16:53:09 +08:00

.eslintignore

chore: 添加ESLint忽略配置

2026-01-12 11:44:34 +08:00

.eslintrc.cjs

feat(安全): 添加安全开关并完善测试流程

2026-01-05 13:54:43 +08:00

.npmrc

chore(deps): 将包管理器从 npm 迁移到 pnpm

2026-01-05 10:06:31 +08:00

audit.json

fix(安全): 修复依赖漏洞并强化安全扫描

2026-01-06 11:36:38 +08:00

index.html

chore(frontend): 更新项目配置和依赖

2025-12-26 00:10:44 -08:00

package.json

fix(deps): upgrade axios to 1.15.0 to fix GHSA-fvcv-3m26-pcqx

2026-04-11 16:46:46 +08:00

pnpm-lock.yaml

fix(deps): upgrade axios to 1.15.0 to fix GHSA-fvcv-3m26-pcqx

2026-04-11 16:46:46 +08:00

postcss.config.js

chore(frontend): 更新项目配置和依赖

2025-12-26 00:10:44 -08:00

tailwind.config.js

perf(前端): 移除 Google Fonts 改用系统字体栈

2026-01-16 19:49:33 +08:00

tsconfig.json

merge upstream main

2026-02-02 22:13:50 +08:00

tsconfig.node.json

First commit

2025-12-18 13:50:39 +08:00

vite.config.ts

feat: 新增apikey的usage查询页面

2026-03-05 10:45:51 +08:00

vitest.config.ts

revert: remove fork-only changes from release sync

2026-04-23 21:40:58 +08:00