林玮 (Jade Lin)
0a10d02a9f
refactor(api): pass session explicitly through recommended app service chain
2026-07-15 15:57:49 +08:00
wangxiaolei and Xiyuan Chen
e0b910d43d
feat: create app init rbac scope to all and add workspace members. ( #38636 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 7e05f28a46
2026-07-14 03:52:24 -07:00
Xin Zhang and Xiyuan Chen
7570427f51
feat(enterprise): enforce licensed seats cap at account creation ( #38883 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 28a036066a
2026-07-14 00:22:05 -07:00
wangxiaolei and Xiyuan Chen
4332023806
feat: support dataset permission migrate to rbac ( #38166 )
...
(cherry picked from commit 528bf95d1b
2026-07-12 21:53:31 -07:00
40119fef44
feat: update monitor permission key and plugin permission key ( #37937 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-25 09:41:38 +00:00
d87764b0f8
feat: filter dataset operator and add miss permission key ( #37867 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-24 09:56:28 +00:00
2112115962
chore: make AccountService.load_user use passed session ( #37764 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-24 07:29:12 +00:00
2cde7e4a94
fix: resolve DetachedInstanceError via session management refactoring ( #37847 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-24 05:33:12 +00:00
wangxiaolei and GitHub
ef54229d6f
chore: add ENTERPRISE_RBAC_API_URL check and update permission key ( #37777 )
2026-06-23 03:26:06 +00:00
wangxiaolei and GitHub
c83dcce1f7
chore: remove duplicate code ( #37724 )
2026-06-22 06:57:56 +00:00
+11
33edf97f81
feat: RBAC ( #37107 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: fatelei <fatelei@gmail.com >
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: 盐粒 Yanli <yanli@dify.ai >
Co-authored-by: Charles Yao <chongbinyao33@gmail.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
Co-authored-by: yunlu.wen <yunlu.wen@dify.ai >
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com >
Co-authored-by: Jingyi <jingyi.qi@dify.ai >
Co-authored-by: yyh <yuanyouhuilyz@gmail.com >
Co-authored-by: Joel <iamjoel007@gmail.com >
Co-authored-by: hjlarry <hjlarry@163.com >
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xiyuan Chen <52963600+GareArc@users.noreply.github.com >
Co-authored-by: gigglewang <gigglewang@dify.ai >
Co-authored-by: chariri <w@chariri.moe >
Co-authored-by: Evan <2869018789@qq.com >
Co-authored-by: zyssyz123 <916125788@qq.com >
2026-06-18 16:35:29 +00:00
26b0137c83
chore: improve invite member flow ( #37479 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Jingyi <jingyi.qi@dify.ai >
2026-06-18 06:30:01 +00:00
4304044905
chore: example of make db.session pass from parameter. ( #37561 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-18 02:16:09 +00:00
+5
9b74df21d0
feat(web): refine onboarding UI ( #37433 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: yyh <yuanyouhuilyz@gmail.com >
Co-authored-by: Joel <iamjoel007@gmail.com >
Co-authored-by: hjlarry <hjlarry@163.com >
Co-authored-by: fatelei <fatelei@gmail.com >
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xiyuan Chen <52963600+GareArc@users.noreply.github.com >
Co-authored-by: gigglewang <gigglewang@dify.ai >
Co-authored-by: Yunlu Wen <yunlu.wen@dify.ai >
Co-authored-by: chariri <w@chariri.moe >
Co-authored-by: Evan <2869018789@qq.com >
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com >
2026-06-15 08:47:15 +00:00
5d77c0af08
refactor: fix OpenAPI contract generation schemas ( #37387 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-12 14:25:53 +00:00
e0c6ca9930
fix: GET query parameter OpenAPI contracts ( #37378 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-12 09:01:22 +00:00
chariri and GitHub
2a46a7d91d
refactor(api): migrate remaining console APIs to use injected user/tenant ( #37288 )
2026-06-11 01:30:31 +00:00
9ac71329a4
fix(plugin): align plugin list endpoint counts with live endpoint state ( #37179 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-10 08:11:11 +00:00
4fb3210f9a
fix: validate conversation variable description length to prevent varchar(255) truncation error ( #33038 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: 非法操作 <hjlarry@163.com >
Co-authored-by: -LAN- <laipz8200@outlook.com >
2026-06-10 07:28:12 +00:00
chariri and GitHub
d849d60822
refactor(api): migrate tenant/user via DI for several endpoints ( #37240 )
2026-06-10 04:11:53 +00:00
37e1d452b8
feat(api): add MCP user-identity forwarding ( #36839 )
...
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-08 04:32:11 +00:00
00ac937934
feat: snippet ( #37046 )
...
Co-authored-by: JzoNg <jzongcode@gmail.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-05 09:38:42 +00:00
chariri and GitHub
b67c3a5f76
refactor(api): migrate tenant/user via DI for several endpoints ( #37026 )
2026-06-04 05:52:59 +00:00
chariri and GitHub
57b573d02b
refactor(api): migrate tenant/user via DI for several endpoints ( #37004 )
2026-06-03 08:59:00 +00:00
b96ea94505
chore: add :str to <path: parameter ( #36913 )
...
Co-authored-by: 99 <wh2099@pm.me >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-03 05:25:11 +00:00
1b972c4e09
refactor(api): migrate tenant/user via DI for several endpoints ( #36971 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-03 04:24:17 +00:00
dea4e66456
fix(web): use generated account-profile contracts ( #36927 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-02 07:28:05 +00:00
079af312c6
fix(contracts): include account avatar url in profile schema ( #36924 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-02 04:30:47 +00:00
86497045c9
feat: per-credential visibility control for plugin credentials ( #35468 )
...
Co-authored-by: Yang <yang@Yangs-MacBook-Pro.local >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-06-01 05:56:18 +00:00
0a3005701f
refactor: inject current user into user-only controllers ( #36754 )
...
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
2026-05-31 15:03:15 +00:00
20f62b9919
fix(web): use generated current workspace query ( #36843 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-31 13:04:18 +00:00
Tianle and GitHub
0e1f19a380
refactor: inject tenant id in tenant-only console handlers ( #36751 )
2026-05-28 03:50:28 +00:00
f5d664887b
chore: backend feature api exclude_vector_space ( #36642 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-26 08:50:54 +00:00
林玮 (Jade Lin) and GitHub
3a467d1d63
fix: member invite limits with dedup, locking, and accurate new-member counting ( #36512 )
2026-05-25 08:58:42 +00:00
Lillian and GitHub
6133c2ab6a
chore: add UUID/str type annotations to api endpoints for files in api/controllers/console ( #36563 )
2026-05-24 07:59:56 +00:00
8d99326fb3
feat(plugin): cache plugin model providers by tenant ( #36449 )
...
Co-authored-by: WH-2099 <wh2099@pm.me >
2026-05-23 09:12:09 +00:00
chariri and GitHub
ea5e487d3c
fix(api): stop returning 204 with response body and add CI check ( #36489 )
2026-05-21 16:20:34 +00:00
QuantumGhost and GitHub
f04d809426
fix(api): fix invalid token error while changing email ( #36412 )
2026-05-20 05:51:15 +00:00
b04b4449db
chore(api): annotate simple contract responses ( #36331 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
2026-05-19 06:13:20 +00:00
NeatGuyCoding and GitHub
1cee1a25b6
fix(console): require admin/owner to set default builtin tool credential ( #36264 )
...
Signed-off-by: NeatGuyCoding <15627489+NeatGuyCoding@users.noreply.github.com >
2026-05-18 10:15:51 +00:00
chariri and GitHub
a35b28dbef
refactor: cleanup duplicate code ( #36173 )
2026-05-14 10:34:31 +00:00
680ef077ae
chore: admin also has the permission of changing role ( #36069 )
...
Co-authored-by: Yansong Zhang <916125788@qq.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-12 10:15:05 +00:00
7b5c371b9d
chore: api para type ( #35985 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-10 06:04:42 +00:00
c67ce6f66d
chore: unify api && clean some type ignore ( #35984 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-10 04:16:29 +00:00
Xiyuan Chen and GitHub
29f34848cd
fix(tools): scope builtin tool default-credential clear to tenant ( #35887 )
2026-05-08 05:08:23 +00:00
NeatGuyCoding and GitHub
7ba408eebe
fix: IDOR on console GET /account/avatar ( #35771 )
...
Signed-off-by: NeatGuyCoding <15627489+NeatGuyCoding@users.noreply.github.com >
2026-05-03 14:42:56 +00:00
8b1533438f
chore: update 3 api ( #35481 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-04-22 08:53:53 +00:00
zyssyz123 and GitHub
e561788809
fix(auth): enforce phase-bound change-email token flow (GHSA-4q3w-q5mc-45rq) ( #35425 )
2026-04-20 10:10:03 +00:00
97bb338e7d
fix: prevent double /v1 in MCP server URL causing 404 authorization failure ( #34596 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-04-20 02:42:59 +00:00
3193e8a712
chore: reorg imports ( #35308 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-04-16 08:50:02 +00:00
林玮 (Jade Lin)