yx-bot7 7d6660d181 fix: address PR review feedback ...

- Fix SSRF: validate API endpoint host against allowlist before use
- Limit /models response body to 2MB to prevent memory exhaustion (DoS)
- Use MakeAuthenticatedRequest for consistent headers across API calls
- Trim trailing slash on API endpoint to prevent double-slash URLs
- Use ListModelsWithGitHubToken to simplify token exchange + listing
- Deduplicate model IDs to prevent incorrect registry reference counting
- Remove dead capabilities enrichment code block
- Remove unused ModelExtra field with misleading json:"-" tag
- Extract magic numbers to named constants (defaultCopilotContextLength)
- Remove redundant hyphenID == id check (already filtered by Contains)
- Use defer cancel() for context timeout in service.go

2026-03-04 15:43:51 +08:00

..

copilot_auth.go

fix: address PR review feedback

2026-03-04 15:43:51 +08:00

errors.go

refactor(copilot): improve code quality in authentication module

2025-11-28 08:32:36 +01:00

oauth_test.go

feat(copilot): fetch and persist user email and display name on login

2026-02-25 17:09:40 +08:00

oauth.go

feat(copilot): fetch and persist user email and display name on login

2026-02-25 17:09:40 +08:00

token.go

feat(copilot): fetch and persist user email and display name on login

2026-02-25 17:09:40 +08:00