fix: require authentication on user-balance stats endpoint

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -9,7 +9,7 @@ body:
       value: |
         感谢您花时间填写此 Bug 报告！
 
-        - **提交错误报告前**：请检查 [已有 Issues](https://github.com/linux-do/pay/issues)列表，了解是否有类似问题被报告。如果不确定，请进行搜索，这有助于我们高效地专注于改进项目。
+        - **提交错误报告前**：请检查 [已有 Issues](https://github.com/linux-do/credit/issues)列表，了解是否有类似问题被报告。如果不确定，请进行搜索，这有助于我们高效地专注于改进项目。
   - type: checkboxes
     id: issue-check
     attributes:
@@ -18,7 +18,7 @@ body:
       options:
         - label: 我已经搜索了现有问题和讨论。
           required: true
-        - label: 我正在使用最新版本或 cdk.linux.do 上的此应用。
+        - label: 我正在使用最新版本或 credit.linux.do 上的此应用。
           required: true
   - type: textarea
     id: what-happened
@@ -68,7 +68,7 @@ body:
       options:
         - label: 我已阅读并遵循了 `README.md` 中的所有说明。
           required: true
-        - label: 我正在使用 linux-do/cdk 的最新版本。
+        - label: 我正在使用 linux-do/credit 的最新版本。
           required: true
         - label: 我已提供我能够提供的尽可能多的相关日志，屏幕截图等。
           required: true
@@ -87,4 +87,4 @@ body:
       value: |
         ## 注意
         如果 Bug 报告不完整或不遵循说明，则可能不会得到处理。请确保您已遵循所有 **README.md** 指南，并提供所有必要信息以便我们重现该问题。
-        感谢您为 linux-do/cdk 做出贡献！
+        感谢您为 linux-do/credit 做出贡献！

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -9,7 +9,7 @@ body:
       value: |
         感谢您花时间填写此功能请求！
 
-        - **提交功能请求前**：请检查 [已有 Issues](https://github.com/linux-do/pay/issues) 列表和讨论区，了解是否有类似功能已被讨论或请求。这有助于我们避免重复工作，并高效地专注于改进项目。
+        - **提交功能请求前**：请检查 [已有 Issues](https://github.com/linux-do/credit/issues) 列表和讨论区，了解是否有类似功能已被讨论或请求。这有助于我们避免重复工作，并高效地专注于改进项目。
   - type: checkboxes
     id: check-existing
     attributes:
@@ -18,7 +18,7 @@ body:
       options:
         - label: 我已经搜索了现有问题和讨论。
           required: true
-        - label: 我正在使用最新版本或 cdk.linux.do 上的此应用。
+        - label: 我正在使用最新版本或 credit.linux.do 上的此应用。
           required: true
   - type: textarea
     id: feature-description
@@ -65,7 +65,7 @@ body:
       options:
         - label: 我已阅读并遵循了 `README.md` 中的所有说明。
           required: true
-        - label: 我正在使用 linux-do/cdk 的最新版本。
+        - label: 我正在使用 linux-do/credit 的最新版本。
           required: true
         - label: 我已提供我能够提供的尽可能多的相关信息，包括用例和场景。
           required: true
@@ -76,4 +76,4 @@ body:
       value: |
         ## 注意
         如果功能请求不完整或不遵循说明，则可能不会得到处理。请确保您已提供所有必要信息以便我们理解您的建议。
-        感谢您为 linux-do/cdk 做出贡献！
+        感谢您为 linux-do/credit 做出贡献！

.github/pull_request_template.md

@@ -2,9 +2,9 @@
 
 <!-- 请在下面的 [ ] 中删除空格并打 x ，表示已完成相关检查 -->
 
-- [ ] 我已阅读并理解 [贡献者公约](https://github.com/linux-do/pay/blob/master/CODE_OF_CONDUCT.md)，  
-- [ ] 我已阅读并同意 [贡献者许可协议 (CLA)](https://github.com/linux-do/pay/blob/master/CLA.md)，确认我的贡献将根据项目的 MIT 许可证进行许可，  
-- [ ] 我知晓如果此 PR 并不做出实质性更改，或可被认为是*为了PR被合并而提交PR*的，则可能不会被合并，
+- [ ] 我已阅读并理解 [贡献者公约](https://github.com/linux-do/credit/blob/master/CODE_OF_CONDUCT.md) 
+- [ ] 我已阅读并同意 [贡献者许可协议 (CLA)](https://github.com/linux-do/credit/blob/master/CLA.md)，确认我的贡献将根据项目的 Apache2.0 许可证进行许可
+- [ ] 我知晓如果此 PR 并不做出实质性更改，或可被认为是*为了PR被合并而提交PR*的，则可能不会被合并
 
 **关联信息**
 

.github/workflows/build_backend.yml

@@ -10,20 +10,21 @@ on:
 
 jobs:
   go_build:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
 
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: "1.25.4"
+          go-version: "1.26"
+          check-latest: true
 
       - name: Install dependencies
         run: |
           go mod download
-          go install github.com/swaggo/swag/cmd/swag@latest
+          go install github.com/swaggo/swag/cmd/swag@v1.16.6
 
       - name: Make Swagger
         run: make swagger

.github/workflows/build_frontend.yml

@@ -10,27 +10,27 @@ on:
 
 jobs:
   nextjs_build:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
-      
+
       - name: Install pnpm
         uses: pnpm/action-setup@v4
         with:
           version: 10.10.0
-      
+
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
           node-version: "20"
           cache: 'pnpm'
           cache-dependency-path: frontend/pnpm-lock.yaml
-      
+
       - name: Install dependencies
         working-directory: frontend
         run: pnpm install --frozen-lockfile
-      
+
       - name: Build
         working-directory: frontend
         run: pnpm build

.github/workflows/build_image.yml

@@ -10,6 +10,7 @@ on:
 env:
   REGISTRY: ghcr.io
   IMAGE_NAME: ${{ github.repository }}
+  FRONTEND_IMAGE_NAME: ${{ github.repository }}-web
 
 # add permission for package publishing
 permissions:
@@ -18,12 +19,19 @@ permissions:
 
 jobs:
   build_image:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       # checkout code
       - name: Checkout repository
         uses: actions/checkout@v4
 
+      # set up go
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: "1.26"
+          check-latest: true
+
       # download Go modules
       - name: Download Go modules
         run: go mod download
@@ -32,13 +40,13 @@ jobs:
       - name: Build Go Binary (multi-arch)
         run: |
           # build amd64 binary
-          GOOS=linux GOARCH=amd64 CGO_ENABLED=0 go build -o pay-server-amd64 main.go
+          GOOS=linux GOARCH=amd64 CGO_ENABLED=0 go build -o credit-server-amd64 main.go
 
           # build arm64 binary
-          GOOS=linux GOARCH=arm64 CGO_ENABLED=0 go build -o pay-server-arm64 main.go
+          GOOS=linux GOARCH=arm64 CGO_ENABLED=0 go build -o credit-server-arm64 main.go
 
           # show binaries
-          ls -alh pay-server-*
+          ls -alh credit-server-*
 
       # set up docker buildx
       - name: Set up Docker Buildx
@@ -74,3 +82,119 @@ jobs:
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
           platforms: linux/amd64,linux/arm64
+
+  build_frontend_image:
+    runs-on: ubuntu-24.04
+    steps:
+      # checkout code
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      # set up docker buildx
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      # login to registry
+      - name: Log into registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      # extract metadata for docker (frontend)
+      - name: Extract Docker metadata (frontend)
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.FRONTEND_IMAGE_NAME }}
+          tags: |
+            type=raw,value=latest,enable=${{ github.ref == 'refs/heads/master' }}
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=ref,event=tag
+            type=sha,format=short,prefix=
+
+      # generate frontend build date in utc
+      - name: Generate frontend build date
+        id: frontend_build_meta
+        run: echo "build_date=$(date -u +'%Y/%m/%d UTC')" >> "$GITHUB_OUTPUT"
+
+      # build and push frontend docker image with version argument
+      - name: Build Frontend Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: ./frontend
+          push: ${{ github.ref_type == 'tag' || (github.ref == 'refs/heads/master' && github.event_name == 'push') }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          platforms: linux/amd64
+          build-args: |
+            VERSION=${{ github.ref_type == 'tag' && github.ref_name || '' }}
+            BUILD_DATE=${{ steps.frontend_build_meta.outputs.build_date }}
+
+  update_helm_values:
+    runs-on: ubuntu-24.04
+    needs: [build_image, build_frontend_image]
+    if: github.ref_type == 'tag'
+    steps:
+      # configure SSH agent with deploy key
+      - name: Setup SSH agent
+        uses: webfactory/ssh-agent@v0.9.0
+        with:
+          ssh-private-key: ${{ secrets.DEPLOY_KEY }}
+
+      # add github.com to known_hosts to avoid host verification prompt
+      - name: Add GitHub to known_hosts
+        run: ssh-keyscan github.com >> ~/.ssh/known_hosts
+
+      # clone the helm charts repository
+      - name: Clone Helm Charts repository
+        run: git clone ${{ vars.HELM_CHARTS_REPO }} helm-charts
+
+      # install yq for yaml editing
+      - name: Install yq
+        run: |
+          sudo wget -qO /usr/local/bin/yq https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64
+          sudo chmod +x /usr/local/bin/yq
+
+      # determine helm values file based on tag type (production or test)
+      - name: Determine Helm values file
+        id: helm_config
+        run: |
+          TAG="${{ github.ref_name }}"
+          if [[ $TAG =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+            echo "values_file=values/credit/credit.yaml" >> "$GITHUB_OUTPUT"
+            echo "branch_prefix=update/credit" >> "$GITHUB_OUTPUT"
+          else
+            echo "values_file=values/credit_test/credit.yaml" >> "$GITHUB_OUTPUT"
+            echo "branch_prefix=update/credit_test" >> "$GITHUB_OUTPUT"
+          fi
+
+      # update image tags in helm values file
+      - name: Update image tags in helm values file
+        run: |
+          cd helm-charts
+          yq -i '.image.tag = "${{ github.ref_name }}"' ${{ steps.helm_config.outputs.values_file }}
+          yq -i '.image.webTag = "${{ github.ref_name }}"' ${{ steps.helm_config.outputs.values_file }}
+
+      # commit and push to a new branch, then open a PR for review
+      - name: Commit, push and create PR
+        env:
+          GH_TOKEN: ${{ secrets.GH_TOKEN }}
+        run: |
+          cd helm-charts
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          BRANCH_NAME="${{ steps.helm_config.outputs.branch_prefix }}-${{ github.ref_name }}"
+          git checkout -b "$BRANCH_NAME"
+          git add ${{ steps.helm_config.outputs.values_file }}
+          git commit -m "chore: update credit image tag to ${{ github.ref_name }}"
+          git push origin "$BRANCH_NAME"
+          HELM_REPO=$(echo "${{ vars.HELM_CHARTS_REPO }}" | sed 's/git@github.com://;s/\.git$//')
+          gh pr create \
+            --repo "${HELM_REPO}" \
+            --title "chore: update credit image tag to ${{ github.ref_name }}" \
+            --body "Automated PR: update \`${{ steps.helm_config.outputs.values_file }}\` image tags to \`${{ github.ref_name }}\` after Docker image build." \
+            --base main \
+            --head "$BRANCH_NAME"

.github/workflows/check_license.yml

@@ -9,7 +9,7 @@ on:
 
 jobs:
   check_license:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: checkout code
         uses: actions/checkout@v4

.github/workflows/close_ticket.yml

@@ -6,7 +6,7 @@ on:
 
 jobs:
   close_ticket:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       issues: write
       pull-requests: write

.github/workflows/codeql.yml

@@ -11,7 +11,7 @@ on:
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       security-events: write
       packages: read

.github/workflows/copilot-setup-steps.yml

@@ -11,7 +11,7 @@ on:
 
 jobs:
   copilot-setup-steps:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
 
     permissions:
       contents: read
@@ -39,9 +39,10 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: "1.24"
+          go-version: "1.26"
+          check-latest: true
 
       - name: Install dependencies
         run: |
           go mod download
-          go install github.com/swaggo/swag/cmd/swag@latest
+          go install github.com/swaggo/swag/cmd/swag@v1.16.6

.github/workflows/eslint.yml

@@ -10,7 +10,7 @@ on:
 
 jobs:
   lint:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
 

.github/workflows/pr-template-check.yml

@@ -6,7 +6,7 @@ on:
 
 jobs:
   check-pr-template:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: check all checklist items are checked
         uses: actions/github-script@v7

.gitignore

@@ -1,7 +1,9 @@
 # IDE
 .idea/*
+.idea
 !.idea/icon.png
 .vscode
+.pnpm-store/
 
 # logs
 logs
@@ -34,5 +36,12 @@ Thumbs.db
 # go workspace
 go.work
 go.work.sum
-cdk
+/credit
 main
+
+# upload
+uploads/*
+
+s3_cache
+
+.gocache