opensource
/
dify
mirror of https://github.com/langgenius/dify.git
2
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
8,856 Commits 366 Branches 164 Tags 834 MiB
Commit Graph

278 Commits

Author SHA1 Message Date
Wu Tianwei 84e3571ec3
fix: delete get upload file endpoint (#25543) 
Co-authored-by: jyong <718720800@qq.com>
 2025-09-12 09:36:53 +08:00
QuantumGhost 874406d934
security(api): fix privilege escalation vulnerability in model config and chat message APIs (#25518) 
The `ChatMessageApi` (`POST /console/api/apps/{app_id}/chat-messages`) and 
`ModelConfigResource` (`POST /console/api/apps/{app_id}/model-config`) 
endpoints do not properly validate user permissions, allowing users without `editor` 
permission to access restricted functionality.

This PR addresses this issue by adding proper permission check.
 2025-09-11 14:53:35 +08:00
Guangdong Liu b51c724a94
refactor: Migrate part of the console basic API module to Flask-RESTX (#24732) 
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
 2025-09-10 12:15:47 +08:00
-LAN- 08dd3f7b50
Fix basedpyright type errors (#25435) 
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-09-10 01:54:26 +08:00
Asuka Minato 38057b1b0e
add typing to all wraps (#25405) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-09-09 16:48:33 +08:00
Yongtao Huang 4aba570fa8
Fix flask response: 200 -> {}, 200 (#25404) 2025-09-09 15:06:18 +08:00
Yeuoly 720ecea737
fix: tenant_id was not specific when retrieval end-user in plugin backwards invocation wraps (#25377) 
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
 2025-09-09 09:49:35 +08:00
ZalterCitty 4ee49f3550
chore: remove weird account login (#22247) 
Co-authored-by: zhuqingchao <zhuqingchao@xiaomi.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
 2025-09-08 10:44:36 +08:00
Asuka Minato f6059ef389
add more typing (#24949) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-09-08 10:40:00 +08:00
kenwoodjw 1ba69b8abf
fix: child chunk API 404 due to UUID type comparison (#25234) 
Signed-off-by: kenwoodjw <blackxin55+@gmail.com>
 2025-09-05 14:00:28 +08:00
-LAN- 9d5956cef8
[Chore/Refactor] Switch from MyPy to Basedpyright for type checking (#25047) 
Signed-off-by: -LAN- <laipz8200@outlook.com>
 2025-09-03 11:52:26 +08:00
Will d33dfee8a3
fix: EndUser is not bound to a Session (#25010) 2025-09-02 21:37:21 +08:00
Bowen Liang 7b379e2a61
chore: apply ty checks on api code with script and ci action (#24653) 2025-09-02 16:05:13 +08:00
Asuka Minato d41d4deaac
example enum to StrEnum (#24877) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-09-01 15:40:26 +08:00
kenwoodjw e4383d6167
Chore: remove dupliacte logic in DatasetApi.get() (#24769) 
Signed-off-by: kenwoodjw <blackxin55+@gmail.com>
 2025-08-29 14:25:36 +08:00
Bowen Liang 39064197da
chore: cleanup unnecessary mypy suppressions on imports (#24712) 2025-08-28 23:17:25 +08:00
Yongtao Huang fa753239ad
Refactor: use logger = logging.getLogger(__name__) in logging (#24515) 
Co-authored-by: Yongtao Huang <99629139+hyongtao-db@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
 2025-08-26 18:10:31 +08:00
Asuka Minato 2b91ba2411
example: limit current user usage (#24470) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-08-26 00:23:29 +08:00
quicksand 424fdf4b52
fix: flask_restx namespace path wrong (#24456) 2025-08-25 14:56:20 +08:00
-LAN- b7466f8b65
feat: API docs for service api (#24425) 
Signed-off-by: -LAN- <laipz8200@outlook.com>
 2025-08-25 09:26:54 +08:00
Asuka Minato 18dce66443
try flask_restful -> flask_restx (#24310) 
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
 2025-08-24 13:45:47 +08:00
kenwoodjw 8a348bea21
fix child-chunk ownership validation (#24374) 
Signed-off-by: kenwoodjw <blackxin55+@gmail.com>
 2025-08-23 20:17:44 +08:00
Zhehao Peng c0702aacac
Use typing.Literal to replace str places (#24099) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-08-18 21:34:13 +08:00
Alex Chim 4a2e6af9b5
Fixes #23921 (#23924) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-08-14 15:54:25 +08:00
Yongtao Huang bf2f03f911
Restructure the File errors in controller (#23801) 
Co-authored-by: Yongtao Huang <99629139+hyongtao-db@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-08-13 17:06:07 +08:00
lyzno1 2edd32fdea
fix: resolve AppCard description overlap with tag area (#23585) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-08-08 09:05:55 +08:00
lyzno1 d98071a088
feat: add Service API file preview endpoint (#23534) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-08-07 21:44:29 +08:00
Yongtao Huang e072b7dafa
Chore: remove unused variable pruned_memory (#23514) 2025-08-07 09:06:17 +08:00
Yongtao Huang 146d870098
Fix: avoid Flask route conflict by merging `DocumentDetailApi` and `DocumentDeleteApi` (#23333) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-08-04 14:37:36 +08:00
qiaofenlin 20f0238aab
feat: support workflow version specification in workflow and chat APIs (#23188) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-08-03 16:27:12 +08:00
Alex Chim 8ab3fda5a8
[Enhancement] Allow modify conversation variable via api (#23112) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-08-01 09:34:56 +08:00
lyzno1 0ea010d7ee
fix: metadata API nullable validation consistency issue (#23133) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-07-30 10:33:24 +08:00
Shaun 00cb1c26a1
refactor: pass external_trace_id to message trace (#23089) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-07-29 19:34:46 +08:00
Yongtao Huang 57e0a12ccd
Refactor: remove redundant full module paths in exception handlers (#23076) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-07-29 09:40:51 +08:00
Asuka Minato a189d293f8
make logging not use f-str, change others to f-str (#22882) 2025-07-25 10:32:48 +08:00
Asuka Minato ef51678c73
orm filter -> where (#22801) 
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: Claude <noreply@anthropic.com>
 2025-07-24 00:57:45 +08:00
qfl 841e53dbbe
feat(trace): support external trace id propagation (#22623) 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-07-22 15:17:43 +08:00
Aryan Raj ce794335e9
Fix/replace datetime patterns with naive utc now (#22654) 2025-07-20 11:05:53 +08:00
yihong d2933c2bfe
fix: drop dead code phase2 unused class (#22042) 
Signed-off-by: yihong0618 <zouzou0208@gmail.com>
 2025-07-17 09:33:07 +08:00
-LAN- 6eb155ae69
feat(api/repo): Allow to config repository implementation (#21458) 
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: QuantumGhost <obelisk.reg+git@gmail.com>
 2025-07-14 14:54:38 +08:00
cutiechi 47954aa284
feat(api): validate and reject external datasets in document update (#21783) 2025-07-03 14:50:53 +08:00
jiangbo721 31eb8548ef
fix: Before publish the app, preview the voice of tts, it raise an er… (#21821) 
Co-authored-by: 刘江波 <jiangbo721@163.com>
 2025-07-03 10:53:14 +08:00
Bowen Liang 1a7ad195f0
refactor: define the Dify project version in pyproject.toml (#20910) 2025-07-01 12:07:24 +08:00
Ganondorf 55a6b330ec
Add get document detail service api (#21700) 
Co-authored-by: lizb <lizb@sugon.com>
 2025-06-30 22:13:56 +08:00
Khoa a06af88b26
Feat/api validate model provider (#21582) 
Co-authored-by: crazywoola <427733928@qq.com>
 2025-06-27 09:59:44 +08:00
GuanMu 870e73c03b
Knowledge base API supports status updates #18147 (#18235) 2025-06-21 11:18:48 +08:00
Ganondorf e99861d4fe
Add Filter of Get Workflow Logs (#21172) 
Co-authored-by: lizb <lizb@sugon.com>
 2025-06-19 10:10:16 +08:00
Jyong 787a556bd7
add service api ratelimit check (#20878) 2025-06-18 14:05:28 +08:00
quicksand 3a628bc671
chore: app info add author_name (#20973) 2025-06-13 10:17:35 +02:00
Abdullah AlOsaimi ad8e79c440
assign dataset indexing_technique to args if not explicitly provided (#20597) 2025-06-05 09:47:57 +08:00
Abdullah AlOsaimi 006496f24e
raise error when process_rule is required but missing (#20599) 2025-06-04 14:19:35 +08:00
Novice 4ac3600f81
fix: update app tag error (#20618) 2025-06-04 13:55:00 +08:00
Ganondorf 51f64797cd
Add APIs for Knowledge Base Tag Management and Dataset Binding (#20023) 
Co-authored-by: lizb <lizb@sugon.com>
 2025-05-30 14:48:00 +08:00
Dongyu Li 1ea4459d9f
update knowledge base api (#20426) 2025-05-30 14:45:30 +08:00
-LAN- 482e50aae9
Refactor/remove db from cycle manager (#20455) 
Signed-off-by: -LAN- <laipz8200@outlook.com>
 2025-05-30 04:34:13 +08:00
quicksand 2d4f8f1377
fix: apps/annotation missing 1 required positional argument: 'end_user' (#20428) 2025-05-29 16:10:28 +08:00
-LAN- b357eca307
fix: Copy request context and current user in app generators. (#20240) 
Signed-off-by: -LAN- <laipz8200@outlook.com>
 2025-05-27 10:56:23 +08:00
-LAN- 3196dc2d61
refactor: Use typed SQLAlchemy base model and fix type errors (#19980) 
Signed-off-by: -LAN- <laipz8200@outlook.com>
 2025-05-21 15:38:03 +08:00
GuanMu 17b929124f
refactor: simplify success response in dataset API endpoints by returning status code 204 directly (#19685) 2025-05-14 18:44:35 +08:00
lexmin0412 ff20b56074
Add `/site` API (#19631) 2025-05-14 10:43:36 +08:00
Ganondorf c76d763639
add endpoint of get feedbacks (#18697) 
Co-authored-by: lizb <lizb@sugon.com>
 2025-05-13 10:35:14 +08:00
非法操作 b00f94df64
fix: replace all dataset.Model.query to db.session.query(Model) (#19509) 2025-05-12 13:52:33 +08:00
Good Wood 0b44791eae
feat: add mode for /info api (#19264) 2025-05-06 13:24:53 +08:00
Bowen Liang 8537abfff8
chore: avoid repeated type ignore noqa by adding flask_restful and flask_login in mypy import exclusions (#19224) 2025-05-06 11:58:49 +08:00
小马哥 e5bdc1438a
fix: annotation update need use http put method and annotation-reply api doc parms wrong (#18891) 2025-04-27 16:13:36 +08:00
devxing 136995d2a1
fix: change delete app status code from 204 to 200 (#18398) 
Co-authored-by: devxing <devxing@gmail.com>
Co-authored-by: crazywoola <427733928@qq.com>
 2025-04-27 12:12:46 +08:00
1betatsu 9a3ecc1ac8
fix: Allow advanced chat app to get workflow run detail (#18753) (#18758) 2025-04-25 16:48:38 +08:00
Alex Chim 12836f9db9
Resolves #18536 Retreive conversation variables (#18581) 2025-04-25 11:52:25 +08:00
Yeuoly 358fd28c28
feat: fetch app info in plugins (#18202) 2025-04-16 20:27:29 +08:00
jiangbo721 18f98f4fe1
fix: ruff check isoparse (#18033) 
Co-authored-by: 刘江波 <jiangbo721@163.com>
 2025-04-16 19:21:18 +08:00
诗浓 4166f73d9d
fix: page/limit param not effective (#18196) 2025-04-16 17:26:47 +08:00
kenwoodjw b247ef85bf
fix dataset api retrieval model null handling (#18151) 
Signed-off-by: kenwoodjw <blackxin55+@gmail.com>
 2025-04-16 15:50:06 +08:00
Jasonfish 1f722cde22
fix(api): Some params were ignored when creating empty Datasets through API (#17932) 2025-04-14 10:24:01 +08:00
Yongtao Huang 5d72003ebb
Remove dead code (#17899) 2025-04-11 20:33:52 +08:00
crazywoola 63ba607738
fix: 17712-get-messages-api-encountered-internal-server-error (#17716) 2025-04-10 11:09:38 +08:00
crazywoola eb8584613b
fix: Account.query => db.session.query(Account) (#17667) 2025-04-09 14:07:32 +08:00
Jasonfish 0afad94378
fix: Correct "The job is not exist" to "The job does not exist" (#17516) 2025-04-07 12:32:25 +08:00
Jasonfish fd443941a2
feat(improve-api-endpoints): Added Datasets and Annotation APIs (#12237) 2025-04-07 10:36:58 +08:00
Jyong 0bf816f2e8
fix duplicate documents returned by Get document list service API (#17351) 2025-04-02 21:39:28 +08:00
liguochuan 11e95d2a61
Fix (api): Fix the processing logic of the retriever_resources field. (#17304) 
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-04-02 12:44:29 +08:00
非法操作 44f911a0a8
chore: docstring not match the function parameter (#17162) 2025-03-31 13:19:15 +08:00
jiangbo721 a1aa325ce3
Chore/code format and Repair commit_id 3254018d more deleted codes and Fix naming error ambiguity between workflow_run_id and workflow_id (#17075) 
Co-authored-by: 刘江波 <jiangbo721@163.com>
 2025-03-29 14:15:53 +08:00
過世秋風 377d11d13b
fix: WorkflowRunDetailApi created_at、finished_at types changed to timestamps (#16821) 2025-03-27 17:23:30 +08:00
GuanMu 360986f38d
Feat add childchunk api (#16094) 2025-03-24 20:58:28 +08:00
L8ng 83cd14104d
feat: datasets openapi list segements support paged resp (#16603) 2025-03-24 14:27:31 +08:00
L8ng 727caccfc9
fix: knowledge base openapi cannot delete metadata (#16365) 2025-03-20 21:36:09 +08:00
Jyong 2c9af712a2
Fix/create document by api with metadata (#16307) 
Co-authored-by: zxhlyh <jasonapring2015@outlook.com>
 2025-03-20 14:33:32 +08:00
Yeuoly c07af5a1a3
feat: tenant app invocations limiter (#16221) 2025-03-19 17:24:02 +08:00
Jyong 732c506e27
add metadata service api (#16211) 2025-03-19 17:12:48 +08:00
Jyong 3f44b690c2
check high-quality dataset with empty embedding model provider (#16181) 2025-03-19 15:16:05 +08:00
Mars 1fab02c25a
fix:message api doc (#15568) 
Co-authored-by: mars <linjx2@by-health.com>
 2025-03-12 12:38:23 +08:00
Jyong 9b2a9260ef
Feat/new saas billing (#14996) 2025-03-10 19:50:11 +08:00
KVOJJJin 78d460a6d1
Feat: time period filter for workflow logs (#14271) 
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
 2025-03-10 14:02:58 +08:00
Mars 126202648f
fix message sort (#15231) 2025-03-07 19:36:44 +08:00
Yeuoly 9a417bfc5e
fix: update database query and model definitions (#14415) 2025-02-26 18:45:12 +08:00
L8ng b15ff4eb8c
fix: datasets documents update-by-file api missing assign field 'indexing_technique' internally (#14243) 2025-02-24 20:14:36 +08:00
Hundredwz 284707c3a8
perf(message): optimize message loading and reduce SQL queries (#13720) 2025-02-15 12:19:01 +08:00
jiangbo721 4e7e172ff3
Chore/format code (#13691) 
Co-authored-by: 刘江波 <jiangbo721@163.com>
 2025-02-14 13:38:17 +08:00
aplio 1b6fd9dfe8
fix: set indexing technique from dataset during update-by-text (#13155) 2025-02-03 11:06:03 +08:00
aplio d73d191f99
feature. add feat to modify metadata via dataset api (#13116) 2025-02-02 15:27:12 +08:00