mirror of
https://github.com/Wei-Shaw/sub2api.git
synced 2026-10-07 16:37:52 +08:00
IanShaw027
d7c9e7167b
- P0: 直播 SSE SearchCount 跨事件 call_id 去重，避免 ~2× 附加费 - SearchCount/Audio/WebSearchCalls 走 mandatory usage task - web_search:uuid 等 forced request_id 优先于 client/local - Sanitize 始终剥离 cookie；ApplyOAuth 清 grok_needs_reauth_at - free 判定：paid 证据压过陈旧 free 凭据 - Gateway 列表应用 free soft-gate；token/body-read 可 failover - web_search 重试支持 WaitPlan 获取；周 PeriodEnd 不再回填月 end
22 lines
767 B
Go
22 lines
767 B
Go
package service
|
|
|
|
// SanitizeStoredCredentials strips secrets that must never be persisted on the
|
|
// account credentials map after conversion to OAuth tokens (Grok Web SSO / password).
|
|
// Call from admin create/update/import/apply-oauth paths.
|
|
//
|
|
// Cookie is always stripped: bulk paths may pass an empty platform label, and
|
|
// session-jar residue must never sit next to OAuth tokens on any platform.
|
|
// The platform argument is retained for call-site clarity / future scrubbing.
|
|
func SanitizeStoredCredentials(platform string, creds map[string]any) map[string]any {
|
|
if creds == nil {
|
|
return nil
|
|
}
|
|
_ = platform
|
|
for _, key := range []string{
|
|
"password", "sso_token", "sso", "sso-rw", "clearTextPassword", "cookie",
|
|
} {
|
|
delete(creds, key)
|
|
}
|
|
return creds
|
|
}
|