mirror of
https://github.com/langgenius/dify.git
synced 2026-05-10 14:14:17 +08:00
41af72449d
- Cache invalid license statuses with 30s TTL to prevent DoS amplification - Return LicenseStatus enum (not raw str) from get_cached_license_status - Flatten nested try/except into _read_cached_license_status / _fetch_and_cache_license_status helpers - Escalate log levels from debug to warning with exc_info for cache failures - Switch before_request license check from fail-open to fail-closed - Remove dead raise_for_status parameter from BaseRequest.send_request - Gate license expired_at behind is_authenticated; only expose status to unauthenticated callers (CVE-2025-63387) - Remove redundant 'not is_console_api' guard in before_request - Add 8 unit tests for get_cached_license_status |
||
|---|---|---|
| .. | ||
| commands | ||
| configs | ||
| controllers | ||
| core | ||
| extensions | ||
| factories | ||
| fields | ||
| libs | ||
| models | ||
| oss | ||
| repositories | ||
| services | ||
| tasks | ||
| tools | ||
| utils | ||
| __init__.py | ||
| .gitignore | ||
| conftest.py | ||