OpenSource/dify - dify - 浩瀚星图

目录树: 874406d934

作者	SHA1	备注	提交日期
QuantumGhost	874406d934	security(api): fix privilege escalation vulnerability in model config and chat message APIs (#25518) The `ChatMessageApi` (`POST /console/api/apps/{app_id}/chat-messages`) and `ModelConfigResource` (`POST /console/api/apps/{app_id}/model-config`) endpoints do not properly validate user permissions, allowing users without `editor` permission to access restricted functionality. This PR addresses this issue by adding proper permission check.	1 个月前
Asuka Minato	2b91ba2411	example: limit current user usage (#24470) Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>	2 个月前
-LAN-	b7466f8b65	feat: API docs for service api (#24425) Signed-off-by: -LAN- <laipz8200@outlook.com>	2 个月前
Asuka Minato	18dce66443	try flask_restful -> flask_restx (#24310) Signed-off-by: -LAN- <laipz8200@outlook.com> Co-authored-by: -LAN- <laipz8200@outlook.com>	2 个月前
Zhehao Peng	c0702aacac	Use typing.Literal to replace str places (#24099) Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>	2 个月前
Asuka Minato	a189d293f8	make logging not use f-str, change others to f-str (#22882)	3 个月前
quicksand	2d4f8f1377	fix: apps/annotation missing 1 required positional argument: 'end_user' (#20428)	5 个月前
-LAN-	b357eca307	fix: Copy request context and current user in app generators. (#20240) Signed-off-by: -LAN- <laipz8200@outlook.com>	5 个月前
Bowen Liang	8537abfff8	chore: avoid repeated type ignore noqa by adding flask_restful and flask_login in mypy import exclusions (#19224)	6 个月前
小马哥	e5bdc1438a	fix: annotation update need use http put method and annotation-reply api doc parms wrong (#18891)	6 个月前
devxing	136995d2a1	fix: change delete app status code from 204 to 200 (#18398) Co-authored-by: devxing <devxing@gmail.com> Co-authored-by: crazywoola <427733928@qq.com>	6 个月前
Jasonfish	0afad94378	fix: Correct "The job is not exist" to "The job does not exist" (#17516)	7 个月前
Jasonfish	fd443941a2	feat(improve-api-endpoints): Added Datasets and Annotation APIs (#12237)	7 个月前

13 次代码提交 (874406d93436863c59b70b204e8775c4a2da6490)