QuantumGhost
874406d934
security(api): fix privilege escalation vulnerability in model config and chat message APIs (#25518)
The `ChatMessageApi` (`POST /console/api/apps/{app_id}/chat-messages`) and
`ModelConfigResource` (`POST /console/api/apps/{app_id}/model-config`)
endpoints do not properly validate user permissions, allowing users without `editor`
permission to access restricted functionality.
This PR addresses this issue by adding proper permission check.
1 kuukausi sitten
-LAN-
08dd3f7b50
Fix basedpyright type errors (#25435)
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
1 kuukausi sitten
Asuka Minato
24e2b72b71
Update ast-grep pattern for session.query (#24828)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2 kuukautta sitten
Eric Guo
ecf74d91e2
✨fix: has_more logic in ChatMessageListApi to ensure correct on behavior when no more messages are available. (#24661)
2 kuukautta sitten
Yongtao Huang
2a29c61041
Refactor: replace count() > 0 check with exists() (#24583)
Co-authored-by: Yongtao Huang <99629139+hyongtao-db@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2 kuukautta sitten
Yongtao Huang
fa753239ad
Refactor: use logger = logging.getLogger(__name__) in logging (#24515)
Co-authored-by: Yongtao Huang <99629139+hyongtao-db@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2 kuukautta sitten
Asuka Minato
18dce66443
try flask_restful -> flask_restx (#24310)
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
2 kuukautta sitten
QuantumGhost
7286b4ad06
fix(api): resolve "Message not exists" error in admin feedback creation (#23232)
Fix regression introduced in PR #22580 where admin users encountered
"Message not exists" errors when creating feedback on messages created
by other users.
The issue was caused by `MessageService.create_feedback()` incorrectly
filtering messages by the current user's ID, preventing admins from
accessing messages created by end users.
Reverts: #22580
2 kuukautta sitten
Yongtao Huang
57e0a12ccd
Refactor: remove redundant full module paths in exception handlers (#23076)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
3 kuukautta sitten
Asuka Minato
ef51678c73
orm filter -> where (#22801)
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: Claude <noreply@anthropic.com>
3 kuukautta sitten
jiangbo721
ffee6f3288
fix: admin feedback uses the same method create_feedback (#22580)
Co-authored-by: 刘江波 <jiangbo721@163.com>
3 kuukautta sitten
Bowen Liang
8537abfff8
chore: avoid repeated type ignore noqa by adding flask_restful and flask_login in mypy import exclusions (#19224)
6 kuukautta sitten
yihong
56e15d09a9
feat: mypy for all type check (#10921)
10 kuukautta sitten
-LAN-
9ac2bb30f4
Feat/add-remote-file-upload-api (#9906)
1 vuosi sitten
Hash Brown
57ec12eb6b
feat: regenerate history switch navigation (#8749)
1 vuosi sitten
Hash Brown
8c51d06222
feat: regenerate in `Chat`, `agent` and `Chatflow` app (#7661)
1 vuosi sitten
-LAN-
13be84e4d4
chore(api/controllers): Apply Ruff Formatter. (#7645)
1 vuosi sitten
liuzhenghua
ef616c604a
fix: The permissions issue of the editor role accessing some backend … (#6945)
Co-authored-by: liuzhenghua-jk <liuzhenghua-jk@360shuke.com>
1 vuosi sitten
takatost
7753ba2d37
FEAT: NEW WORKFLOW ENGINE (#3160)
Co-authored-by: Joel <iamjoel007@gmail.com>
Co-authored-by: Yeuoly <admin@srmxy.cn>
Co-authored-by: JzoNg <jzongcode@gmail.com>
Co-authored-by: StyleZhang <jasonapring2015@outlook.com>
Co-authored-by: jyong <jyong@dify.ai>
Co-authored-by: nite-knite <nkCoding@gmail.com>
Co-authored-by: jyong <718720800@qq.com>
1 vuosi sitten
Bowen Liang
063191889d
chore: apply ruff's pyupgrade linter rules to modernize Python code with targeted version (#2419)
1 vuosi sitten
Bowen Liang
843280f82b
enhancement: introduce Ruff for Python linter for reordering and removing unused imports with automated pre-commit and sytle check (#2366)
1 vuosi sitten
crazywoola
828822243a
fix: multiple rows were found correctly (#2219)
1 vuosi sitten
takatost
1a6ad05a23
feat: service api add llm usage (#2051)
1 vuosi sitten
Bowen Liang
cc9e74123c
improve: introduce isort for linting Python imports (#1983)
1 vuosi sitten
takatost
b88a8f7bb1
feat: optimize invoke errors (#1922)
1 vuosi sitten
takatost
d069c668f8
Model Runtime (#1858)
Co-authored-by: StyleZhang <jasonapring2015@outlook.com>
Co-authored-by: Garfield Dai <dai.hai@foxmail.com>
Co-authored-by: chenhe <guchenhe@gmail.com>
Co-authored-by: jyong <jyong@dify.ai>
Co-authored-by: Joel <iamjoel007@gmail.com>
Co-authored-by: Yeuoly <admin@srmxy.cn>
1 vuosi sitten
Jyong
a71f2863ac
Annotation management (#1767)
Co-authored-by: jyong <jyong@dify.ai>
1 vuosi sitten
Yeuoly
d3a2c0ed34
fix wrong syntax of type definitions (#1678)
1 vuosi sitten
Charlie.Wei
298ad6782d
Add Message Suggested Api (#1326)
Co-authored-by: luowei <glpat-EjySCyNjWiLqAED-YmwM>
2 vuotta sitten
Garfield Dai
42a5b3ec17
feat: advanced prompt backend (#1301)
Co-authored-by: takatost <takatost@gmail.com>
2 vuotta sitten
takatost
024250803a
feat: move login_required wrapper outside (#1281)
2 vuotta sitten
Jyong
46154c6705
Feat/dataset service api (#1245)
Co-authored-by: jyong <jyong@dify.ai>
Co-authored-by: StyleZhang <jasonapring2015@outlook.com>
2 vuotta sitten
Jyong
4b53bb1a32
Feat/token support (#909)
Co-authored-by: StyleZhang <jasonapring2015@outlook.com>
Co-authored-by: jyong <jyong@dify.ai>
2 vuotta sitten
takatost
5fa2161b05
feat: server multi models support (#799)
2 vuotta sitten
John Wang
7599f79a17
feat: claude api support (#572)
2 vuotta sitten
John Wang
d680fca996
fix: provider_response_latency type error (#45)
2 vuotta sitten
John Wang
db896255d6
Initial commit
2 vuotta sitten