QuantumGhost
874406d934
security(api): fix privilege escalation vulnerability in model config and chat message APIs ( #25518 )
...
The `ChatMessageApi` (`POST /console/api/apps/{app_id}/chat-messages`) and
`ModelConfigResource` (`POST /console/api/apps/{app_id}/model-config`)
endpoints do not properly validate user permissions, allowing users without `editor`
permission to access restricted functionality.
This PR addresses this issue by adding proper permission check.
2025-09-11 14:53:35 +08:00
-LAN-
08dd3f7b50
Fix basedpyright type errors ( #25435 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-10 01:54:26 +08:00
-LAN-
9d5956cef8
[Chore/Refactor] Switch from MyPy to Basedpyright for type checking ( #25047 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
2025-09-03 11:52:26 +08:00
Bowen Liang
7b379e2a61
chore: apply ty checks on api code with script and ci action ( #24653 )
2025-09-02 16:05:13 +08:00
Yongtao Huang
fa753239ad
Refactor: use logger = logging.getLogger(__name__) in logging ( #24515 )
...
Co-authored-by: Yongtao Huang <99629139+hyongtao-db@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2025-08-26 18:10:31 +08:00
Asuka Minato
2b91ba2411
example: limit current user usage ( #24470 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-08-26 00:23:29 +08:00
-LAN-
b7466f8b65
feat: API docs for service api ( #24425 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
2025-08-25 09:26:54 +08:00
Asuka Minato
18dce66443
try flask_restful -> flask_restx ( #24310 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
2025-08-24 13:45:47 +08:00
Zhehao Peng
c0702aacac
Use typing.Literal to replace str places ( #24099 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-08-18 21:34:13 +08:00
Alex Chim
4a2e6af9b5
Fixes #23921 ( #23924 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-08-14 15:54:25 +08:00
Yongtao Huang
bf2f03f911
Restructure the File errors in controller ( #23801 )
...
Co-authored-by: Yongtao Huang <99629139+hyongtao-db@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-08-13 17:06:07 +08:00
lyzno1
d98071a088
feat: add Service API file preview endpoint ( #23534 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-08-07 21:44:29 +08:00
Yongtao Huang
e072b7dafa
Chore: remove unused variable pruned_memory ( #23514 )
2025-08-07 09:06:17 +08:00
qiaofenlin
20f0238aab
feat: support workflow version specification in workflow and chat APIs ( #23188 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-08-03 16:27:12 +08:00
Alex Chim
8ab3fda5a8
[Enhancement] Allow modify conversation variable via api ( #23112 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-08-01 09:34:56 +08:00
Shaun
00cb1c26a1
refactor: pass external_trace_id to message trace ( #23089 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-07-29 19:34:46 +08:00
Yongtao Huang
57e0a12ccd
Refactor: remove redundant full module paths in exception handlers ( #23076 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-07-29 09:40:51 +08:00
Asuka Minato
a189d293f8
make logging not use f-str, change others to f-str ( #22882 )
2025-07-25 10:32:48 +08:00
Asuka Minato
ef51678c73
orm filter -> where ( #22801 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: Claude <noreply@anthropic.com>
2025-07-24 00:57:45 +08:00
qfl
841e53dbbe
feat(trace): support external trace id propagation ( #22623 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-07-22 15:17:43 +08:00
-LAN-
6eb155ae69
feat(api/repo): Allow to config repository implementation ( #21458 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: QuantumGhost <obelisk.reg+git@gmail.com>
2025-07-14 14:54:38 +08:00
jiangbo721
31eb8548ef
fix: Before publish the app, preview the voice of tts, it raise an er… ( #21821 )
...
Co-authored-by: 刘江波 <jiangbo721@163.com>
2025-07-03 10:53:14 +08:00
Ganondorf
e99861d4fe
Add Filter of Get Workflow Logs ( #21172 )
...
Co-authored-by: lizb <lizb@sugon.com>
2025-06-19 10:10:16 +08:00
quicksand
3a628bc671
chore: app info add author_name ( #20973 )
2025-06-13 10:17:35 +02:00
-LAN-
482e50aae9
Refactor/remove db from cycle manager ( #20455 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
2025-05-30 04:34:13 +08:00
quicksand
2d4f8f1377
fix: apps/annotation missing 1 required positional argument: 'end_user' ( #20428 )
2025-05-29 16:10:28 +08:00
-LAN-
b357eca307
fix: Copy request context and current user in app generators. ( #20240 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
2025-05-27 10:56:23 +08:00
lexmin0412
ff20b56074
Add /site API ( #19631 )
2025-05-14 10:43:36 +08:00
Ganondorf
c76d763639
add endpoint of get feedbacks ( #18697 )
...
Co-authored-by: lizb <lizb@sugon.com>
2025-05-13 10:35:14 +08:00
Good Wood
0b44791eae
feat: add mode for /info api ( #19264 )
2025-05-06 13:24:53 +08:00
Bowen Liang
8537abfff8
chore: avoid repeated type ignore noqa by adding flask_restful and flask_login in mypy import exclusions ( #19224 )
2025-05-06 11:58:49 +08:00
小马哥
e5bdc1438a
fix: annotation update need use http put method and annotation-reply api doc parms wrong ( #18891 )
2025-04-27 16:13:36 +08:00
devxing
136995d2a1
fix: change delete app status code from 204 to 200 ( #18398 )
...
Co-authored-by: devxing <devxing@gmail.com>
Co-authored-by: crazywoola <427733928@qq.com>
2025-04-27 12:12:46 +08:00
1betatsu
9a3ecc1ac8
fix: Allow advanced chat app to get workflow run detail ( #18753 ) ( #18758 )
2025-04-25 16:48:38 +08:00
Alex Chim
12836f9db9
Resolves #18536 Retreive conversation variables ( #18581 )
2025-04-25 11:52:25 +08:00
Yeuoly
358fd28c28
feat: fetch app info in plugins ( #18202 )
2025-04-16 20:27:29 +08:00
jiangbo721
18f98f4fe1
fix: ruff check isoparse ( #18033 )
...
Co-authored-by: 刘江波 <jiangbo721@163.com>
2025-04-16 19:21:18 +08:00
crazywoola
63ba607738
fix: 17712-get-messages-api-encountered-internal-server-error ( #17716 )
2025-04-10 11:09:38 +08:00
Jasonfish
0afad94378
fix: Correct "The job is not exist" to "The job does not exist" ( #17516 )
2025-04-07 12:32:25 +08:00
Jasonfish
fd443941a2
feat(improve-api-endpoints): Added Datasets and Annotation APIs ( #12237 )
2025-04-07 10:36:58 +08:00
liguochuan
11e95d2a61
Fix (api): Fix the processing logic of the retriever_resources field. ( #17304 )
...
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-04-02 12:44:29 +08:00
jiangbo721
a1aa325ce3
Chore/code format and Repair commit_id 3254018d more deleted codes and Fix naming error ambiguity between workflow_run_id and workflow_id ( #17075 )
...
Co-authored-by: 刘江波 <jiangbo721@163.com>
2025-03-29 14:15:53 +08:00
過世秋風
377d11d13b
fix: WorkflowRunDetailApi created_at、finished_at types changed to timestamps ( #16821 )
2025-03-27 17:23:30 +08:00
Yeuoly
c07af5a1a3
feat: tenant app invocations limiter ( #16221 )
2025-03-19 17:24:02 +08:00
Mars
1fab02c25a
fix:message api doc ( #15568 )
...
Co-authored-by: mars <linjx2@by-health.com>
2025-03-12 12:38:23 +08:00
KVOJJJin
78d460a6d1
Feat: time period filter for workflow logs ( #14271 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
2025-03-10 14:02:58 +08:00
Mars
126202648f
fix message sort ( #15231 )
2025-03-07 19:36:44 +08:00
Hundredwz
284707c3a8
perf(message): optimize message loading and reduce SQL queries ( #13720 )
2025-02-15 12:19:01 +08:00
jiangbo721
4e7e172ff3
Chore/format code ( #13691 )
...
Co-authored-by: 刘江波 <jiangbo721@163.com>
2025-02-14 13:38:17 +08:00
Yingchun Lai
c135967e59
refactor: simplify some exception catch code ( #12246 )
2025-01-02 14:25:12 +08:00
-LAN-
4bd8df1fd3
fix: update MessageService.create_feedback to use keyword arguments f… ( #12134 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
2024-12-26 23:26:44 +08:00
yihong
1d3f218662
fix: like failed close #12057 ( #12058 )
...
Signed-off-by: yihong0618 <zouzou0208@gmail.com>
2024-12-25 10:57:52 +08:00
yihong
56e15d09a9
feat: mypy for all type check ( #10921 )
2024-12-24 18:38:51 +08:00
liuhaoran
6b49889041
fix: messagefeedbackapi support content ( #11716 )
...
Signed-off-by: weiyang <24080293@smb956101.com>
Co-authored-by: weiyang <24080293@smb956101.com>
2024-12-22 10:45:55 +08:00
-LAN-
3d07a94bd7
fix: refactor conversation pagination to use SQLAlchemy session manag… ( #11956 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
2024-12-22 10:39:29 +08:00
Hiroshi Fujita
858db2f239
feat(api): include tags in app information response ( #11242 )
2024-12-02 10:25:01 +08:00
-LAN-
06d2520db2
fix(api): replace Raw field with FilesContainedField in MessageListApi inputs ( #10472 )
2024-11-08 19:48:34 +08:00
Benjamin
919275cc58
Fix conversation response issue ( #10450 )
2024-11-08 17:04:43 +08:00
Benjamin
6e23903c63
Conversation delete issue ( #10423 )
2024-11-07 21:13:23 +08:00
Benjamin
a5558f8fcc
fix(conversation-service): return success response after conversation… ( #10416 )
2024-11-07 18:07:05 +08:00
-LAN-
1dae1a71fc
fix(api): remove fixed source attribute from FileApi ( #10353 )
2024-11-06 12:29:58 +08:00
-LAN-
6452342222
feat(workflow): add configurable workflow file upload limit ( #10176 )
...
Co-authored-by: JzoNg <jzongcode@gmail.com>
2024-11-04 15:55:34 +08:00
-LAN-
9ac2bb30f4
Feat/add-remote-file-upload-api ( #9906 )
2024-11-01 15:51:22 +08:00
-LAN-
dd17506078
feat(api): add generic file size limit parameter ( #9812 )
2024-10-25 09:02:06 +08:00
-LAN-
22bb0414a1
feat(parameters): standardize system parameter field types and values ( #9797 )
2024-10-24 21:52:57 +08:00
crazywoola
98bf7710e4
fix: fields.Nested(message_file_fields) ( #9632 )
2024-10-22 15:37:53 +08:00
-LAN-
e61752bd3a
feat/enhance the multi-modal support ( #8818 )
2024-10-21 10:43:49 +08:00
Hash Brown
fa47f0c707
chore: disable chat service API passing parent_message_id ( #8984 )
2024-10-14 19:13:16 +08:00
Hash Brown
5f8a27074e
fix: chat API is not bringing the conversation/session history ( #8965 )
2024-10-01 12:10:36 +08:00
Hash Brown
8c51d06222
feat: regenerate in Chat, agent and Chatflow app ( #7661 )
2024-09-22 03:15:11 +08:00
Bowen Liang
a1104ab97e
chore: refurish python code by applying Pylint linter rules ( #8322 )
2024-09-13 22:42:08 +08:00
fanlia
5f03e66489
Feature/service api workflow logs ( #8323 )
2024-09-13 11:03:57 +08:00
Bowen Liang
40fb4d16ef
chore: refurbish Python code by applying refurb linter rules ( #8296 )
2024-09-12 15:50:49 +08:00
-LAN-
13be84e4d4
chore(api/controllers): Apply Ruff Formatter. ( #7645 )
2024-08-26 15:29:10 +08:00
Shota Totsuka
47919983bf
fix: typo in comment ( #7606 )
2024-08-25 09:56:08 +08:00
KinWang
e35e251863
feat: Sort conversations by updated_at desc ( #7348 )
...
Co-authored-by: wangpj <wangpj@hundsunc.om>
Co-authored-by: JzoNg <jzongcode@gmail.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
2024-08-20 17:55:44 +08:00
lichao
13d061911b
Error Exception Message Of "Message Not Exists.", Should be "Suggested Questions Is Disabled." ( #7219 )
2024-08-13 15:17:18 +08:00
crazywoola
7ab04e17e7
fix: return code in service api ( #6911 )
2024-08-02 15:48:58 +08:00
crazywoola
3c371a6cb0
fix: workflow api ( #6810 )
2024-07-30 23:51:48 +08:00
非法操作
afe95fa780
feat: support get workflow task execution status ( #6411 )
2024-07-18 15:06:14 +08:00
Charlie.Wei
06fcc0c650
Fix tts api err ( #6349 )
...
Co-authored-by: luowei <glpat-EjySCyNjWiLqAED-YmwM>
Co-authored-by: crazywoola <427733928@qq.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2024-07-16 21:53:57 +08:00
天魂
1df71ec64d
refactor(api): switch to dify_config with Pydantic in controllers and schedule ( #6237 )
2024-07-12 16:51:43 +08:00
liuzhenghua
9622fbb62f
feat: app rate limit ( #5844 )
...
Co-authored-by: liuzhenghua-jk <liuzhenghua-jk@360shuke.com>
Co-authored-by: takatost <takatost@gmail.com>
2024-07-10 21:31:35 +08:00
chenxu9741
6ef401a9f0
feat:add tts-streaming config and future ( #5492 )
2024-07-09 11:33:58 +08:00
crazywoola
16fec084f5
Fix/4630 bug api suggested ( #4633 )
2024-05-24 11:11:12 +08:00
呆萌闷油瓶
5102430a68
feat:add 'name' field return ( #3152 )
2024-04-10 22:34:43 +08:00
takatost
f599f41336
fix: empty conversation list of explore chatbot ( #3235 )
2024-04-09 17:04:48 +08:00
takatost
7753ba2d37
FEAT: NEW WORKFLOW ENGINE ( #3160 )
...
Co-authored-by: Joel <iamjoel007@gmail.com>
Co-authored-by: Yeuoly <admin@srmxy.cn>
Co-authored-by: JzoNg <jzongcode@gmail.com>
Co-authored-by: StyleZhang <jasonapring2015@outlook.com>
Co-authored-by: jyong <jyong@dify.ai>
Co-authored-by: nite-knite <nkCoding@gmail.com>
Co-authored-by: jyong <718720800@qq.com>
2024-04-08 18:51:46 +08:00
Charlie.Wei
fd7aade26b
Fix tts api err ( #2809 )
...
Co-authored-by: luowei <glpat-EjySCyNjWiLqAED-YmwM>
Co-authored-by: crazywoola <427733928@qq.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2024-03-13 15:38:10 +08:00
Charlie.Wei
6a6133c102
Fix voice selection ( #2664 )
...
Co-authored-by: luowei <glpat-EjySCyNjWiLqAED-YmwM>
Co-authored-by: crazywoola <427733928@qq.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2024-03-04 17:50:06 +08:00
takatost
0828873b52
fix: missing default user for APP service api ( #2606 )
2024-02-28 16:09:56 +08:00
Charlie.Wei
300d9892a5
tts add voice choose ( #2391 )
...
Co-authored-by: luowei <glpat-EjySCyNjWiLqAED-YmwM>
Co-authored-by: crazywoola <427733928@qq.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2024-02-15 22:41:18 +08:00
Bowen Liang
063191889d
chore: apply ruff's pyupgrade linter rules to modernize Python code with targeted version ( #2419 )
2024-02-09 15:21:33 +08:00
Bowen Liang
14a19a3da9
chore: apply ruff's pyflakes linter rules ( #2420 )
2024-02-08 14:11:10 +08:00
Bowen Liang
843280f82b
enhancement: introduce Ruff for Python linter for reordering and removing unused imports with automated pre-commit and sytle check ( #2366 )
2024-02-06 13:21:13 +08:00
takatost
9f637ead38
bump version to 0.5.3 ( #2306 )
2024-02-01 18:11:57 +08:00
takatost
5a6cb69951
fix: user handling in stop api ( #2254 )
2024-01-27 19:05:37 +08:00
Charlie.Wei
fd5c45ae10
Add tts document&fix bug ( #2156 )
...
Co-authored-by: luowei <glpat-EjySCyNjWiLqAED-YmwM>
Co-authored-by: crazywoola <427733928@qq.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: Yeuoly <45712896+Yeuoly@users.noreply.github.com>
2024-01-24 23:04:14 +08:00
Yeuoly
7cb75cb2e7
feat: add tool labels ( #2178 )
2024-01-24 20:14:45 +08:00
Charlie.Wei
6355e61eb8
tts models support ( #2033 )
...
Co-authored-by: luowei <glpat-EjySCyNjWiLqAED-YmwM>
Co-authored-by: crazywoola <427733928@qq.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: Yeuoly <45712896+Yeuoly@users.noreply.github.com>
2024-01-24 01:05:37 +08:00
