4 Commits

Include renames

Author	SHA1	Message	Date
GareArc	bc68e02711	feat(openapi): distinguish expired OAuth bearer from invalid token ... Previously an expired OAuth bearer and an unknown/invalid one both surfaced as an indistinguishable generic 401 (and an invalid token actually leaked a 500), so a client could not tell "session expired, re-authenticate" apart from "never authenticated." The resolver now raises a distinct TokenExpiredError for expired DB rows and records a separate `expired` negative-cache marker, so a retry within the negative-cache TTL still reports expiry instead of collapsing into a generic miss. The auth pipeline maps the two domain errors to unified OpenApiError responses: SessionExpired (code `token_expired`) and InvalidBearer (code `unauthorized`), both 401. This also fixes the latent 500 on invalid bearers. The `token_expired` code is synced through the contract codegen into the generated types/zod, and the difyctl error mapper branches the 401 on it. The CLI `expired_token` taxonomy member (RFC 8628 device-flow code expiry) is merged into `token_expired`; the RFC 8628 wire value is unchanged. Closes WTA-1062	2026-06-28 21:45:13 -07:00
+1121 people	33edf97f81	feat: RBAC (#37107) ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: fatelei <[email protected]> Co-authored-by: Copilot <[email protected]> Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com> Co-authored-by: 盐粒 Yanli <[email protected]> Co-authored-by: Charles Yao <[email protected]> Co-authored-by: Claude Opus 4.8 <[email protected]> Co-authored-by: yunlu.wen <[email protected]> Co-authored-by: yyh <[email protected]> Co-authored-by: Jingyi <[email protected]> Co-authored-by: yyh <[email protected]> Co-authored-by: Joel <[email protected]> Co-authored-by: hjlarry <[email protected]> Co-authored-by: Asuka Minato <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Xiyuan Chen <[email protected]> Co-authored-by: gigglewang <[email protected]> Co-authored-by: chariri <[email protected]> Co-authored-by: Evan <[email protected]> Co-authored-by: zyssyz123 <[email protected]>	2026-06-18 16:35:29 +00:00
3 people	d2788d7aba	feat(openapi): redesign auth pipeline with per-token-type routing (#36693) ... Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>	2026-05-27 12:45:30 +00:00
10 people	a728e0ac69	feat: adding dify cli (#36348) ... Co-authored-by: GareArc <[email protected]> Co-authored-by: Copilot Autofix powered by AI <[email protected]> Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com> Co-authored-by: L1nSn0w <[email protected]> Co-authored-by: Claude Opus 4.7 (1M context) <[email protected]> Co-authored-by: gigglewang <[email protected]> Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Co-authored-by: Xiyuan Chen <[email protected]>	2026-05-26 01:12:36 +00:00