update CI

feat: enhance session store security and configuration
- Add 30-day max age for session cookies - Enable HttpOnly flag - Set SameSite to strict mode
2025-02-11 17:44:54 +08:00 · 2025-02-11 17:06:51 +08:00 · 2025-02-11 15:53:15 +08:00 · 2025-02-11 15:45:24 +08:00 · 2025-02-11 12:21:06 +07:00 · 2025-02-10 22:39:56 +08:00
3 changed files with 18 additions and 15 deletions
@@ -51,10 +51,6 @@ jobs:
          images: |
            calciumion/new-api
            ghcr.io/${{ github.repository }}
-
-      - name: Update Go dependencies
-        run: go get -u ./...
-
      - name: Build and push Docker images
        uses: docker/build-push-action@v3
        with:
@@ -58,17 +58,17 @@ func testChannel(channel *model.Channel, testModel string) (err error, openAIErr
 				testModel = "gpt-3.5-turbo"
 			}
 		}
-	} else {
-		modelMapping := *channel.ModelMapping
-		if modelMapping != "" && modelMapping != "{}" {
-			modelMap := make(map[string]string)
-			err := json.Unmarshal([]byte(modelMapping), &modelMap)
-			if err != nil {
-				return err, service.OpenAIErrorWrapperLocal(err, "unmarshal_model_mapping_failed", http.StatusInternalServerError)
-			}
-			if modelMap[testModel] != "" {
-				testModel = modelMap[testModel]
-			}
+	}
+
+	modelMapping := *channel.ModelMapping
+	if modelMapping != "" && modelMapping != "{}" {
+		modelMap := make(map[string]string)
+		err := json.Unmarshal([]byte(modelMapping), &modelMap)
+		if err != nil {
+			return err, service.OpenAIErrorWrapperLocal(err, "unmarshal_model_mapping_failed", http.StatusInternalServerError)
+		}
+		if modelMap[testModel] != "" {
+			testModel = modelMap[testModel]
 		}
 	}

@@ -145,6 +145,13 @@ func main() {
 	middleware.SetUpLogger(server)
 	// Initialize session store
 	store := cookie.NewStore([]byte(common.SessionSecret))
+	store.Options(sessions.Options{
+		Path:     "/",
+		MaxAge:   2592000, // 30 days
+		HttpOnly: true,
+		Secure:   false,
+		SameSite: http.SameSiteStrictMode,
+	})
 	server.Use(sessions.Sessions("session", store))

 	router.SetRouter(server, buildFS, indexPage)
Author	SHA1	Message	Date
1808837298@qq.com	0486041952	update CI	2025-02-11 17:44:54 +08:00
1808837298@qq.com	8f3752c423	feat: enhance session store security and configuration - Add 30-day max age for session cookies - Enable HttpOnly flag - Set SameSite to strict mode	2025-02-11 17:06:51 +08:00
1808837298@qq.com	94c10d8def	fix: update session store configuration - Change session cookie path from "/api" to "/" - Remove HttpOnly flag	2025-02-11 15:53:15 +08:00
1808837298@qq.com	6a9c0fd2c0	feat: configure session store options for API routes - Set session cookie path to "/api" - Disable secure flag for local development - Enable HttpOnly flag for improved security	2025-02-11 15:45:24 +08:00
Calcium-Ion	14399d6176	Merge pull request #746 from zjjxwhh/main fix: always use modelMapping in channel test	2025-02-11 12:21:06 +07:00
zjjxwhh	5bebd3760a	fix: always use modelMapping in channel test	2025-02-10 22:39:56 +08:00