dify/api/services/enterprise
GareArc 41af72449d
fix: address PR review feedback on enterprise license enforcement
- Cache invalid license statuses with 30s TTL to prevent DoS amplification
- Return LicenseStatus enum (not raw str) from get_cached_license_status
- Flatten nested try/except into _read_cached_license_status / _fetch_and_cache_license_status helpers
- Escalate log levels from debug to warning with exc_info for cache failures
- Switch before_request license check from fail-open to fail-closed
- Remove dead raise_for_status parameter from BaseRequest.send_request
- Gate license expired_at behind is_authenticated; only expose status to unauthenticated callers (CVE-2025-63387)
- Remove redundant 'not is_console_api' guard in before_request
- Add 8 unit tests for get_cached_license_status
2026-03-08 17:00:12 -07:00
..
__init__.py Feat/enterprise sso (#3602) 2024-04-18 17:33:32 +08:00
account_deletion_sync.py feat: account delete cleanup (#31519) 2026-02-04 17:59:41 -08:00
base.py fix: address PR review feedback on enterprise license enforcement 2026-03-08 17:00:12 -07:00
enterprise_service.py fix: address PR review feedback on enterprise license enforcement 2026-03-08 17:00:12 -07:00
plugin_manager_service.py feat: knowledge pipeline (#25360) 2025-09-18 12:49:10 +08:00
workspace_sync.py feat: credential sync fix for enterprise edition (#30626) 2026-01-14 23:33:24 -08:00