3 Commits

Author	SHA1	Message	Date
Janu Yoga	efd20be8d8	feat(provider): add CodeBuddy CN provider (copilot.tencent.com) ... Add Tencent CodeBuddy CN (codebuddy-cn) OAuth provider with full support: OAuth login (GET poll with state query param), token refresh, 15-model catalog, /v2 inference endpoint, forced streaming, OpenAI-style reasoning, and per-model capabilities. Renamed from codebuddy to codebuddy-cn to allow a future codebuddy-ai variant. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-19 15:33:26 +07:00
decolua	da667836cc	fix(security): don't trust loopback socket as local when request arrives via reverse proxy ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-17 11:12:24 +07:00
decolua	7648c3412b	fix(auth): real client IP rate-limiting + remote default-password guard ... - Add custom-server.js: inject unspoofable socket IP, strip client XFF (wired into Docker CMD + CLI spawn + build-cli copy) - loginLimiter: key on trusted x-9r-real-ip, TRUST_PROXY opt-in, global fallback - Force password change on first remote login while default is in use - Add /api/auth/reset-password (local-only) so CLI reset writes live SQLite - CLI settings: reset via API instead of stale db.json - Fix OAuth modals opening duplicate browser tabs on add-connection - Add cli:pack / cli:publish scripts Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-08 12:10:02 +07:00