2b8e40af32
fix(auth): validate account before accepting invitations ( #39438 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-23 03:56:32 +00:00
林玮 (Jade Lin) and GitHub
a3654d6a7d
fix(oauth): reauth after accepting invitation ( #39366 )
2026-07-22 05:59:04 +00:00
wangxiaolei and GitHub
7dfd84472f
fix: fix miss create rbac binding ( #39023 )
2026-07-16 02:25:42 +00:00
ab3e4daa95
refactor: explicit DB session propagation across backend paths ( #38559 )
...
Co-authored-by: WH-2099 <wh2099@pm.me >
2026-07-15 06:48:28 +00:00
82ff93cbdd
feat(oauth): preserve redirect_url through OAuth state for post-login… ( #38900 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-14 08:23:39 +00:00
28a036066a
feat(enterprise): enforce licensed seats cap at account creation ( #38883 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-14 06:51:19 +00:00
68d8328b9c
chore: clean Db session from service ( #38227 )
...
Co-authored-by: chariri <w@chariri.moe >
Co-authored-by: WH-2099 <wh2099@pm.me >
2026-07-08 03:07:27 +00:00
fc01d112a0
refactor(api): Stop masking refresh-token service errors as 401 ( #38463 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-06 18:14:54 +00:00
5aae5c15b3
refactor(api): migrate web auth endpoints to BaseModel ( #37961 )
...
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
2026-07-06 07:53:21 +00:00
2112115962
chore: make AccountService.load_user use passed session ( #37764 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-24 07:29:12 +00:00
2cde7e4a94
fix: resolve DetachedInstanceError via session management refactoring ( #37847 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-24 05:33:12 +00:00
d0b2239c60
refactor: accept db.session explicitly in ApiKeyAuthService ( #37832 )
...
Co-authored-by: kunalj1-arch <kunal.j1@turing.com >
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-24 01:20:47 +00:00
wangxiaolei and GitHub
ef54229d6f
chore: add ENTERPRISE_RBAC_API_URL check and update permission key ( #37777 )
2026-06-23 03:26:06 +00:00
a7b53b33ee
chore: move one db.session ( #37656 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-19 19:52:59 +00:00
+11
33edf97f81
feat: RBAC ( #37107 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: fatelei <fatelei@gmail.com >
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: 盐粒 Yanli <yanli@dify.ai >
Co-authored-by: Charles Yao <chongbinyao33@gmail.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
Co-authored-by: yunlu.wen <yunlu.wen@dify.ai >
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com >
Co-authored-by: Jingyi <jingyi.qi@dify.ai >
Co-authored-by: yyh <yuanyouhuilyz@gmail.com >
Co-authored-by: Joel <iamjoel007@gmail.com >
Co-authored-by: hjlarry <hjlarry@163.com >
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xiyuan Chen <52963600+GareArc@users.noreply.github.com >
Co-authored-by: gigglewang <gigglewang@dify.ai >
Co-authored-by: chariri <w@chariri.moe >
Co-authored-by: Evan <2869018789@qq.com >
Co-authored-by: zyssyz123 <916125788@qq.com >
2026-06-18 16:35:29 +00:00
26b0137c83
chore: improve invite member flow ( #37479 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Jingyi <jingyi.qi@dify.ai >
2026-06-18 06:30:01 +00:00
5d77c0af08
refactor: fix OpenAPI contract generation schemas ( #37387 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-12 14:25:53 +00:00
e0c6ca9930
fix: GET query parameter OpenAPI contracts ( #37378 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-12 09:01:22 +00:00
非法操作 and GitHub
6658a7c5e7
fix: block frozen deleted accounts during invite activation ( #37281 )
2026-06-10 10:21:05 +00:00
157ba6f5a0
chore(api): Fix several typing errors ( #37119 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-06 01:44:32 +00:00
0a3005701f
refactor: inject current user into user-only controllers ( #36754 )
...
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
2026-05-31 15:03:15 +00:00
chariri and GitHub
eed8d659d1
refactor(api): migrate tenant/user via DI: apikey, extension, data_source_bearer, oauth_server ( #36660 )
2026-05-26 08:22:35 +00:00
Lillian and GitHub
6133c2ab6a
chore: add UUID/str type annotations to api endpoints for files in api/controllers/console ( #36563 )
2026-05-24 07:59:56 +00:00
chariri and GitHub
ea5e487d3c
fix(api): stop returning 204 with response body and add CI check ( #36489 )
2026-05-21 16:20:34 +00:00
b04b4449db
chore(api): annotate simple contract responses ( #36331 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
2026-05-19 06:13:20 +00:00
a252fbddfa
feat: initialize user timezone and language from browser ( #36170 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-15 08:12:52 +00:00
c67ce6f66d
chore: unify api && clean some type ignore ( #35984 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-10 04:16:29 +00:00
3193e8a712
chore: reorg imports ( #35308 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-04-16 08:50:02 +00:00
7e7b27fdec
refactor: replace bare dict with dict[str, Any] in response converter… ( #35212 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-04-14 19:45:04 +00:00
-LAN- and GitHub
8dd4473432
refactor(auth): standardize failed login audit logging ( #35054 )
2026-04-13 12:26:13 +00:00
e37aaa482d
refactor: migrate apikey from marshal_with/api.model to Pydantic BaseModel ( #34932 )
...
Co-authored-by: ai-hpc <ai-hpc@users.noreply.github.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-04-13 05:18:42 +00:00
bcd738d2e6
fix: fix orm_exc.DetachedInstanceError ( #34904 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-04-10 07:13:59 +00:00
corevibe555 and GitHub
f8f7b0ec1a
refactor(api): deduplicate shared auth request payloads into auth_entities.py ( #34694 )
2026-04-07 22:51:11 +00:00
89e23456f0
refactor(api): type invitation detail with InvitationDetailDict TypedDict ( #34613 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-04-07 01:03:31 +00:00
8f9dbf269e
chore(api): align Python support with 3.12 ( #34419 )
...
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
2026-04-02 05:07:32 +00:00
40591a7c50
refactor(api): use standalone graphon package ( #34209 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-27 21:05:32 +00:00
99 and GitHub
52e7492cbc
refactor(api): rename dify_graph to graphon ( #34095 )
2026-03-25 21:58:56 +08:00
Desel72 and GitHub
ceb2e10179
refactor: use sessionmaker().begin() in console auth controllers ( #33966 )
2026-03-24 23:59:21 +09:00
244f9e0c11
fix: handle null email/name from GitHub API for private-email users ( #33882 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com >
Co-authored-by: QuantumGhost <obelisk.reg+git@gmail.com >
2026-03-23 14:53:03 +08:00
-LAN- and GitHub
4fd6b52808
refactor(api): move model_runtime into dify_graph ( #32858 )
2026-03-02 20:15:32 +08:00
Asuka Minato and GitHub
ac222a4dd4
refactor: port api/controllers/console/app/audio.py api/controllers/console/app/message.py api/controllers/console/auth/data_source_oauth.py api/controllers/console/auth/forgot_password.py api/controllers/console/workspace/endpoint.py ( #30680 )
2026-02-02 18:03:07 +09:00
3216b67bfa
refactor: examples of use match case ( #31312 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-02-01 19:25:54 +09:00
Xiyuan Chen and GitHub
72ce6ca437
feat: implement workspace permission checks for member invitations an… ( #31202 )
2026-01-18 19:35:50 -08:00
491e1fd6a4
chore: case insensitive email ( #29978 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com >
2026-01-13 15:42:44 +08:00
lif and GitHub
f3ca8be9f9
refactor: clean type: ignore comments in login.py and template_transformer.py ( #30510 )
...
Signed-off-by: majiayu000 <1835304752@qq.com >
2026-01-06 14:33:27 +08:00
3a59ae9617
feat: add oauth_new_user flag for frontend when user oauth login ( #30370 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: hj24 <mambahj24@gmail.com >
2025-12-31 10:10:58 +08:00
非法操作 and GitHub
d005689d0a
chore: remove unused login call from activation flow ( #30017 )
2025-12-23 12:26:52 +08:00
b7649f61f8
fix: Login secret text transmission ( #29659 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Joel <iamjoel007@gmail.com >
Co-authored-by: -LAN- <laipz8200@outlook.com >
2025-12-16 16:55:51 +08:00
7396eba1af
refactor: port reqparse to Pydantic model ( #28949 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-12-05 13:05:53 +09:00
e0824c2d93
api -> console_ns ( #28246 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-11-24 10:04:11 +08:00
