 Yansong Zhang
|
d07e2d23b5
|
refactor(api): type network access control plane boundaries
|
2026-09-23 10:58:03 +08:00 |
|
|
Yansong Zhang
|
af693a7222
|
fix(api): isolate MCP body parsing from database sessions
|
2026-09-23 10:49:19 +08:00 |
|
|
Yansong Zhang
|
4e1b63cda1
|
fix(api): skip unrelated bodies in app access error hook
|
2026-09-23 10:42:33 +08:00 |
|
|
Yansong Zhang
|
388e663a30
|
fix(api): require published apps before public web admission
|
2026-09-22 16:50:07 +08:00 |
|
|
Yansong Zhang
|
b3fb4e7560
|
fix(api): align access failures with native endpoint contracts
|
2026-09-21 16:48:09 +08:00 |
|
|
Yansong Zhang
|
04f3ed744b
|
fix(api): include trusted client IP in app access 404 errors
Refs SNP-837. Preserve existing error semantics and restrict request-local, non-cacheable IP metadata to Web/Console app access errors.
|
2026-09-20 19:00:55 +08:00 |
|
|
Yansong Zhang
|
f01cdb35cd
|
fix(api): expose trusted current IP before policy creation
Refs SNP-835. Support the first Policy without relaxing trusted-proxy or persisted workspace-role checks.
|
2026-09-20 15:52:36 +08:00 |
|
|
Yansong Zhang
|
9e985c2112
|
fix: complete network access control backend contracts
|
2026-09-11 17:01:55 +08:00 |
|
 hjlarry
|
e8b965a3c3
|
refactor: migrate network access group APIs
|
2026-09-10 14:25:38 +08:00 |
|
|
Yansong Zhang
|
77525902ba
|
Merge remote-tracking branch 'origin/main' into song/snp-682-ip-allowlist
# Conflicts:
# api/controllers/console/wraps.py
# api/tests/unit_tests/controllers/console/test_wraps.py
# packages/contracts/generated/api/console/apps/orpc.gen.ts
# packages/contracts/generated/api/console/workspaces/orpc.gen.ts
|
2026-09-09 18:22:47 +08:00 |
|
  Asuka Minatoandautofix-ci[bot]
|
f71047f31a
|
test: migrate console workflow sessions and ORM models to SQLite (#40563)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-09-09 08:50:02 +00:00 |
|
|
Asuka Minato
|
a062155841
|
test: migrate console app response sessions and ORM models to SQLite (#40562)
|
2026-09-09 08:47:46 +00:00 |
|
|
Yansong Zhang
|
5ec3f43bb7
|
fix: align paid plan entitlement contract
|
2026-09-09 16:46:02 +08:00 |
|
|
Yansong Zhang
|
49b8284345
|
fix: normalize app access points by mode
|
2026-09-09 16:34:35 +08:00 |
|
|
Yansong Zhang
|
c0bd864139
|
fix: harden network access policy compatibility
|
2026-09-09 16:31:13 +08:00 |
|
|
Yansong Zhang
|
7e3ceaba82
|
feat: align network access BFF with app policies
|
2026-09-09 15:44:23 +08:00 |
|
 Wu Tianweiandautofix-ci[bot]
|
f89c3e6ec7
|
feat: add agent resource permissions (#41940)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-09-09 07:30:39 +00:00 |
|
 
|
3f76dbe67a
|
refactor(controllers/console): inject saved-message query with @model_validate (#41819)
Co-authored-by: 几一奥 <2481680240@qq.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-09-09 05:41:53 +00:00 |
|
 L1nSn0w
|
8a69aa2884
|
fix(console): stop advertising the education plan outside Dify Cloud (#41898)
|
2026-09-09 04:38:50 +00:00 |
|
 Stephen Zhou
|
2f00e647ef
|
fix(api): correct service api rate limit descriptions (#41975)
|
2026-09-08 09:33:46 +00:00 |
|
 Keith
|
f3e5f41a3c
|
refactor(models): pass session into WorkflowNodeExecutionModel accessors (#41968)
|
2026-09-08 09:31:08 +00:00 |
|
 yyh
|
8acdb1538b
|
refactor(api): trim workspace features response contract (#41948)
|
2026-09-08 05:42:22 +00:00 |
|
  Pranav Agarwalandyunlu.wen
|
a67f62e9aa
|
fix(api): enforce RBAC permission on MCP tool provider GET endpoint (#41547) (#41548)
Co-authored-by: yunlu.wen <yunlu.wen@dify.ai>
|
2026-09-08 04:43:24 +00:00 |
|
|
Stephen Zhou
|
7ba2cfb30b
|
fix(api): align service api schemas with runtime behavior (#41943)
|
2026-09-08 03:59:02 +00:00 |
|
|
非法操作
|
146b193ef7
|
refactor(api): extract plugin file upload application service (#41808)
|
2026-09-08 03:42:32 +00:00 |
|
|
非法操作
|
d43a23d8f5
|
refactor(api): extract tool file download service (#41790)
|
2026-09-08 02:51:11 +00:00 |
|
|
非法操作
|
749d1f8d04
|
refactor(api): extract upload file delivery service (#41772)
|
2026-09-08 02:03:24 +00:00 |
|
|
非法操作
|
c17a96f02f
|
refactor(service-api): extract file preview application service (#41732)
|
2026-09-07 08:59:18 +00:00 |
|
|
yyh
|
eba589db89
|
refactor(api): remove legacy billing enabled state (#41917)
|
2026-09-07 08:29:57 +00:00 |
|
 yuki.uix
|
5e51fe2640
|
refactor(controllers): adopt with_session in web saved_message (#41859)
|
2026-09-07 05:43:29 +00:00 |
|
 Charles
|
2df92204e9
|
refactor(models): pass session into CustomizedSnippet accessors (#40379)
|
2026-09-07 05:37:43 +00:00 |
|
 Kiveiru3
|
d91672c6d3
|
refactor(controllers): inject message request models (#41884)
|
2026-09-07 05:14:18 +00:00 |
|
 Eddy ZHANG
|
56a31bab8d
|
refactor(inner_api): dep-inject workspace payloads with @model_validate (#41540)
|
2026-09-07 05:13:09 +00:00 |
|
 Xiyuan Chenandautofix-ci[bot]
|
86134ea99e
|
feat(rbac): agent RBAC/ACL scenes and resource-locator check bundles (#41768)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-09-07 04:39:43 +00:00 |
|
|
非法操作
|
4c124174c9
|
refactor(api): extract human input file upload persistence (#41716)
|
2026-09-07 03:21:33 +00:00 |
|
|
非法操作
|
4b0e260ac5
|
refactor(console): decouple app tracing configuration (#41576)
|
2026-09-07 02:47:00 +00:00 |
|
|
Eddy ZHANG
|
d69b19b567
|
refactor(web): dep-inject the passport query with @model_validate (#41845)
|
2026-09-05 10:31:05 +00:00 |
|
|
非法操作
|
e6c9846726
|
refactor(api): isolate workflow app log queries (#41509)
|
2026-09-04 10:06:46 +00:00 |
|
|
Pranav AgarwalandYunlu Wen
|
067a60e0ac
|
fix(api): enforce admin and RBAC permissions on model provider model credential GET endpoint (#41599) (#41600)
Co-authored-by: Yunlu Wen <yunlu.wen@dify.ai>
|
2026-09-04 09:17:41 +00:00 |
|
|
非法操作
|
b15fb30ff5
|
refactor(api): extract app statistic queries from console controllers (#41557)
|
2026-09-04 09:15:51 +00:00 |
|
|
非法操作
|
f8930aba34
|
refactor(api): extract console workflow run application service (#41336)
|
2026-09-04 08:16:49 +00:00 |
|
 Zhu Lei
|
949f6c4ad4
|
fix(api): correct Service API segments has_more pagination (#41776)
|
2026-09-04 08:00:53 +00:00 |
|
 Byron.wang
|
09f301d969
|
refactor(api): move OpenAPI account access behind application services (#41308)
|
2026-09-04 07:38:01 +00:00 |
|
|
Zhu Lei
|
5355edefe3
|
fix(api): correct dataset and document list has_more pagination (#41784)
|
2026-09-04 07:19:33 +00:00 |
|
|
非法操作
|
cea89f784f
|
refactor: make explore localization request-driven (#41798)
|
2026-09-04 06:03:46 +00:00 |
|
|
550196e3b8
|
feat: app deployment v2 (#41444)
Co-authored-by: zhangx1n <zhangxin@dify.ai>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-09-04 02:01:35 +00:00 |
|
|
非法操作
|
8e2058a962
|
refactor: pass notification language explicitly (#41770)
|
2026-09-04 01:52:30 +00:00 |
|
|
Byron.wangandautofix-ci[bot]
|
692010f0fc
|
refactor(api): decouple console OAuth flow from legacy account services (#41188)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-09-03 08:47:14 +00:00 |
|
|
Byron.wang
|
b015aa416f
|
refactor(api): extract account login service and consolidate adapters (#41184)
|
2026-09-03 06:20:21 +00:00 |
|
|
非法操作
|
ba1d5ba172
|
refactor(api): centralize remote file handling (#41627)
|
2026-09-03 06:00:13 +00:00 |
|