dify/api/controllers
hjlarry 6b7574023e fix(workflow): enforce tenant access in online users query
Validate requested workflow_ids against current tenant before reading collaboration online-user state from Redis.

Move workflow access-id lookup into WorkflowService to keep controller thin and aligned with layering.

Limit query size, and stop exposing sid in REST response fields.

Add unit tests for inaccessible workflow filtering and workflow_ids limit checks.
2026-04-12 16:05:29 +08:00
..
common refactor(api): deduplicate workflow controller schemas into controller_schemas.py (#34755) 2026-04-08 23:49:04 +00:00
console fix(workflow): enforce tenant access in online users query 2026-04-12 16:05:29 +08:00
files refactor(api): continue decoupling dify_graph from API concerns (#33580) 2026-03-25 20:32:24 +08:00
inner_api refactor(api): deduplicate DSL shared entities into dsl_entities.py (#34762) 2026-04-09 06:04:18 +00:00
mcp refactor: migrate session.query to select API in console controllers (#34607) 2026-04-07 04:19:30 +00:00
service_api refactor(api): deduplicate shared controller request schemas into controller_schemas.py (#34700) 2026-04-08 03:10:04 +00:00
trigger refactor(api): type webhook data extraction with RawWebhookDataDict TypedDict (#34486) 2026-04-03 02:24:17 +00:00
web fix: fix orm_exc.DetachedInstanceError (#34904) 2026-04-10 07:13:59 +00:00
__init__.py chore(api/controllers): Apply Ruff Formatter. (#7645) 2024-08-26 15:29:10 +08:00
fastopenapi.py feat: init fastopenapi (#30453) 2026-01-23 21:07:52 +09:00