mirror of https://github.com/zhayujie/chatgpt-on-wechat.git synced 2026-07-18 12:07:15 +08:00

Files

kirs-hi 1940d628a8 refactor(custom): id-based routing, single source of truth, security fixes

Rework the multi custom-provider design per maintainer review:

1. Data model: use server-generated uuid4 short id as primary key;
   'name' is now a pure display label that can be freely renamed.

2. Routing: drop 'custom_active_provider'; activate a provider by
   setting bot_type to 'custom:<id>'. Single source of truth — no
   pointer drift between bot_type and a separate active selector.

3. Security: drag_sensitive() now recursively masks api_key/secret in
   nested structures (custom_providers list); previously only top-level
   string fields were masked.

4. Per-provider model: the provider's 'model' field now takes effect on
   the main chat path and agent path (was silently ignored before).

5. XSS fix: replace all inline onclick handlers in custom-provider UI
   with data-* attributes + event delegation. Provider names never
   appear in executable HTML contexts.

Legacy compatibility: bot_type='custom' (no colon) still reads the flat
custom_api_key/custom_api_base fields byte-for-byte identically.

Closes: consolidates #2876 into this PR as requested.
Ref: #2838

2026-06-11 17:25:24 +08:00

static

refactor(custom): id-based routing, single source of truth, security fixes

2026-06-11 17:25:24 +08:00

chat.html

feat(web): manage multiple custom (OpenAI-compatible) providers in console UI

2026-06-10 18:12:30 +08:00

README.md

docs: add web channel and agent plugin docs

2025-05-23 11:56:41 +08:00

web_channel.py

refactor(custom): id-based routing, single source of truth, security fixes