dify/api/controllers/console/app
hjlarry 6b7574023e fix(workflow): enforce tenant access in online users query
Validate requested workflow_ids against current tenant before reading collaboration online-user state from Redis.

Move workflow access-id lookup into WorkflowService to keep controller thin and aligned with layering.

Limit query size, and stop exposing sid in REST response fields.

Add unit tests for inaccessible workflow filtering and workflow_ids limit checks.
2026-04-12 16:05:29 +08:00
..
__init__.py FEAT: NEW WORKFLOW ENGINE (#3160) 2024-04-08 18:51:46 +08:00
advanced_prompt_template.py refactor: port reqparse to Pydantic model (#28913) 2025-11-30 16:09:42 +09:00
agent.py refactor: port reqparse to Pydantic model (#28949) 2025-12-05 13:05:53 +09:00
annotation.py refactor: port api/controllers/console/app/annotation.py api/controllers/console/explore/trial.py api/controllers/console/workspace/account.py api/controllers/console/workspace/members.py api/controllers/service_api/app/annotation.py to basemodel (#31833) 2026-02-03 09:59:00 +08:00
app_import.py refactor(api): deduplicate DSL shared entities into dsl_entities.py (#34762) 2026-04-09 06:04:18 +00:00
app.py refactor(api): deduplicate DSL shared entities into dsl_entities.py (#34762) 2026-04-09 06:04:18 +00:00
audio.py refactor(api): use standalone graphon package (#34209) 2026-03-27 21:05:32 +00:00
completion.py refactor(api): use standalone graphon package (#34209) 2026-03-27 21:05:32 +00:00
conversation_variables.py refactor: use sessionmaker().begin() in console app controllers (#34282) 2026-03-31 13:10:16 +00:00
conversation.py refactor: select in remaining console app controllers (#33969) 2026-03-24 02:53:05 +09:00
error.py feat: optimize http status code (#31430) 2026-01-24 10:16:16 +08:00
generator.py refactor(api): use standalone graphon package (#34209) 2026-03-27 21:05:32 +00:00
mcp_server.py refactor: select in remaining console app controllers (#33969) 2026-03-24 02:53:05 +09:00
message.py refactor(api): deduplicate Pydantic models across fields and controllers (#34718) 2026-04-08 05:20:00 +00:00
model_config.py refactor(api): continue decoupling dify_graph from API concerns (#33580) 2026-03-25 20:32:24 +08:00
ops_trace.py refactor: port reqparse to Pydantic model (#28949) 2025-12-05 13:05:53 +09:00
site.py refactor: select in remaining console app controllers (#33969) 2026-03-24 02:53:05 +09:00
statistic.py refactor: port reqparse to Pydantic model (#28913) 2025-11-30 16:09:42 +09:00
workflow_app_log.py refactor: use sessionmaker().begin() in console app controllers (#34282) 2026-03-31 13:10:16 +00:00
workflow_comment.py chore: improve workflowComment schema define 2026-04-11 20:21:09 +08:00
workflow_draft_variable.py Merge remote-tracking branch 'myori/main' into feat/collaboration2 2026-04-09 11:31:09 +08:00
workflow_run.py refactor(api): use standalone graphon package (#34209) 2026-03-27 21:05:32 +00:00
workflow_statistic.py refactor: port reqparse to Pydantic model (#28913) 2025-11-30 16:09:42 +09:00
workflow_trigger.py refactor: migrate session.query to select API in console controllers (#34607) 2026-04-07 04:19:30 +00:00
workflow.py fix(workflow): enforce tenant access in online users query 2026-04-12 16:05:29 +08:00
wraps.py refactor(api): tighten login and wrapper typing (#34447) 2026-04-02 09:36:58 +00:00