Jian Qiu 9c88aa36d8 fix(notify): harden verification code generation and verification (#25483) ...

- Generate verification codes with crypto/rand instead of the
  predictable time-seeded math/rand
- Count failed verification attempts and invalidate the code after
  verify_max_attempts (default 5) failures, closing the unlimited
  online brute force of the 6-digit code at the login endpoint
- Delete the verification record after a successful check so codes
  are single use and can not be replayed within the validity window
- Add unit tests for code generation

Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
Co-authored-by: Claude <noreply@anthropic.com>

2026-09-03 23:49:29 +08:00

..

aiproxy

Automated cherry pick of #25479: Feat/aiproxy model context window (#25481)

2026-09-02 17:43:58 +08:00

ansibleserver

fix: support ansible galaxy mirror (#24987)

2026-06-08 08:57:09 +08:00

apigateway

fix: mask tokens and passwords in logs (#25489)

2026-09-03 19:20:25 +08:00

apihelper

fix: vpc distributes static routes (#25213)

2026-07-23 19:36:42 +08:00

apimap

fix(mcclient,region): add tasks mod, service app options (#24731)

2026-04-29 23:47:54 +08:00

apis

feat(llm): support cancel and resume for instant model import (#25521)

2026-09-03 20:14:48 +08:00

appsrv

fix(mcp-server): support forwarding mcp-server request (#25190)

2026-07-21 13:27:39 +08:00

baremetal

fix: unhandled errors (#25383)

2026-08-20 17:30:29 +08:00

cloudcommon

fix: mask tokens and passwords in logs (#25489)

2026-09-03 19:20:25 +08:00

cloudevent

fix(mcclient,region): add tasks mod, service app options (#24731)

2026-04-29 23:47:54 +08:00

cloudid

fix(cloudid): batch detach policy (#25163)

2026-07-16 19:08:08 +08:00

cloudir

fix(mcclient,region): add tasks mod, service app options (#24731)

2026-04-29 23:47:54 +08:00

cloudmon

fix: unhandled errors (#25383)

2026-08-20 17:30:29 +08:00

cloudnet

fix(mcclient,region): add tasks mod, service app options (#24731)

2026-04-29 23:47:54 +08:00

cloudproxy

fix: unhandled errors (#25383)

2026-08-20 17:30:29 +08:00

cloutpost

fix(mcclient,region): add tasks mod, service app options (#24731)

2026-04-29 23:47:54 +08:00

compute

fix(region): vmware vm nic sync (#25507)

2026-09-03 18:27:21 +08:00

controller/autoscaling

fix: unhandled errors (#25383)

2026-08-20 17:30:29 +08:00

devtool

fix: unhandled errors (#25383)

2026-08-20 17:30:29 +08:00

dns

fix: upgrade coredns to v1.10.1 at master (#24620)

2026-04-08 16:27:11 +08:00

esxi

feat(aiproxy): add aiproxy (#24916)

2026-06-09 18:54:42 +08:00

hostimage

fix(hostimage): harden nbd export against command injection (#25491)

2026-09-03 23:48:20 +08:00

hostman

fix: mask tokens and passwords in logs (#25489)

2026-09-03 19:20:25 +08:00

httperrors

fix: change OutOfResource http status code to 507 (#23986)

2025-12-29 10:58:58 +08:00

i18n

fix(region): add translate (#19137)

2024-01-02 16:49:18 +08:00

image

fix(glance): avoid receive notify when glance restart (#25409)

2026-08-24 15:05:04 +08:00

keystone

fix: unhandled errors (#25383)

2026-08-20 17:30:29 +08:00

lbagent

fix(lbagent): generate valid UDP health check config (#25268)

2026-08-07 14:31:03 +08:00

llm

feat(llm): support cancel and resume for instant model import (#25521)

2026-09-03 20:14:48 +08:00

logger

fix(logger): add syslog init log (#24554)

2026-03-26 18:11:34 +08:00

mcclient

fix(mcp-server): do not expose server-monitor as an MCP tool (#25488)

2026-09-03 19:22:30 +08:00

mcp-server

fix(mcp-server): do not expose server-monitor as an MCP tool (#25488)

2026-09-03 19:22:30 +08:00

monitor

fix: unhandled errors (#25383)

2026-08-20 17:30:29 +08:00

notify

fix(notify): harden verification code generation and verification (#25483)

2026-09-03 23:49:29 +08:00

proxy

fix(mcp-server): support forwarding mcp-server request (#25190)

2026-07-21 13:27:39 +08:00

s3gateway

fix(mcclient,region): add tasks mod, service app options (#24731)

2026-04-29 23:47:54 +08:00

scheduledtask

fix(mcclient,region): add tasks mod, service app options (#24731)

2026-04-29 23:47:54 +08:00

scheduler

fix: unhandled errors (#25383)

2026-08-20 17:30:29 +08:00

util

feat(llm): support cancel and resume for instant model import (#25521)

2026-09-03 20:14:48 +08:00

vpcagent

fix: dhcp distribute static routes on condition (#25297)

2026-08-10 10:31:22 +08:00

webconsole

fix: mask tokens and passwords in logs (#25489)

2026-09-03 19:20:25 +08:00

yunionconf

fix(yunionconf): batch import tags (#25116)

2026-07-09 16:43:01 +08:00