sdhfsl 959e6fd62b fix(panel): accept 2FA codes from adjacent TOTP windows ...

CheckUser compared only gotp.Now(), so a code submitted at the end of
its 30s window (or with slight client/server clock drift) failed with
'invalid 2fa code', while the immediate retry in the next window
succeeded. Accept current +/-1 window, the standard TOTP skew
tolerance.

Fixes MHSanaei/3x-ui#6535

2026-09-15 18:28:52 +08:00

..

amneziawg

fix(amneziawg): read the outbound pseudo-protocol id like the core (#6531)

2026-09-15 08:23:18 +03:00

amneziawgnet

fix(amneziawg): wrap the relay port window instead of refusing ids past it (#6539)

2026-09-15 10:07:14 +03:00

config

v3.8.0

2026-09-14 19:11:03 +02:00

crypto/nodetoken

fix(nodetoken): make the corrupt-ciphertext test corrupt deterministically (#6520)

2026-09-14 12:08:11 +02:00

database

fix(xray): read an outbound protocol id the way the core does (#6521)

2026-09-14 19:52:27 +03:00

eventbus

chore: refresh dependencies, fix Linux tool tasks, modernize Go idioms

2026-07-25 16:08:09 +02:00

logger

fix(inbounds): apply runtime changes after the DB commit (#5768)

2026-07-08 22:12:28 +02:00

mtproto

fix(mtproto): synchronize child-process lifecycle (#6141)

2026-07-29 20:56:26 +02:00

pia

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

sub

feat(sub): add opt-in month-end expiry presentation (#6517)

2026-09-14 12:10:25 +02:00

tuic

fix(tuic): evict the oldest relay flow instead of refusing new clients

2026-09-12 10:40:41 +02:00

tunnelmonitor

style: adopt golangci-lint v2 and resolve all findings

2026-06-27 15:42:22 +02:00

util

fix(link): restore mKCP seed and headerType on share-link import (#6480)

2026-09-13 22:28:13 +02:00

web

fix(panel): accept 2FA codes from adjacent TOTP windows

2026-09-15 18:28:52 +08:00

xray

feat(sub): let the panel set the JSON subscription DNS servers (#6485)

2026-09-13 11:51:56 +02:00