GareArc 501c0b8746 feat(api): add require_scope decorator (Phase A.4) ... Route-level scope gate; pairs with validate_bearer. Bearer holding the catch-all SCOPE_FULL ('full', carried by dfoa_) passes any check; narrower bearers (dfoe_, future PATs) need the exact scope listed in the route decorator. No v1.0 route applies it yet — apps/datasets controllers will be the first consumers when those plans land. Programming-error guard: if @require_scope runs without @validate_bearer above it, raises RuntimeError instead of silently allowing. Plan: docs/superpowers/plans/2026-04-26-openapi-migration.md (in difyctl repo).		2026-04-26 23:27:48 -07:00
..
broadcast_channel	feat: support configurable redis key prefix (#35139)	2026-04-14 09:31:41 +00:00
__init__.py	chore: apply ruff rules on tests and app.py (#3605)	2024-04-18 20:24:05 +08:00
archive_storage.py	feat: archive workflow run logs backend (#31310)	2026-01-23 13:11:56 +08:00
collection_utils.py	chore: normalize frozenset literals and myscale typing (#34327)	2026-03-31 08:21:22 +00:00
custom_inputs.py	Feat/add status filter to workflow runs (#26850)	2025-10-18 12:15:29 +08:00
datetime_utils.py	refactor(api): continue decoupling dify_graph from API concerns (#33580)	2026-03-25 20:32:24 +08:00
db_migration_lock.py	feat: support configurable redis key prefix (#35139)	2026-04-14 09:31:41 +00:00
device_flow_security.py	fix(api,web): post-review hardening for OAuth device flow	2026-04-26 23:05:07 -07:00
email_i18n.py	feat: collaboration (#30781)	2026-04-16 02:21:04 +00:00
email_template_renderer.py	feat: Human Input Node (#32060)	2026-02-09 14:57:23 +08:00
encryption.py	fix: Login secret text transmission (#29659)	2025-12-16 16:55:51 +08:00
exception.py	refactor: replace bare dict with dict[str, Any] in VDB providers and libs (#35123)	2026-04-14 03:02:29 +00:00
external_api.py	refactor(api): enable reportUntypedFunctionDecorator in pyright config (#26412) (#35031)	2026-04-13 03:28:23 +00:00
file_utils.py	refactor: define the Dify project version in pyproject.toml (#20910)	2025-07-01 12:07:24 +08:00
flask_utils.py	chore(api): align Python support with 3.12 (#34419)	2026-04-02 05:07:32 +00:00
gmpy2_pkcs10aep_cipher.py	chore(typing): reduce ty excludes for A1 (#31721)	2026-01-30 02:38:57 +08:00
helper.py	chore: reorg imports (#35308)	2026-04-16 08:50:02 +00:00
infinite_scroll_pagination.py	chore(api/libs): Apply ruff format. (#7301)	2024-08-15 17:53:12 +08:00
json_in_md_parser.py	Fix json in md when use quesion classifier node (#26992)	2025-10-18 11:58:40 +08:00
jws.py	feat(api,web): OAuth 2.0 device flow + bearer auth (RFC 8628)	2026-04-26 20:06:43 -07:00
login.py	refactor(api): tighten login and wrapper typing (#34447)	2026-04-02 09:36:58 +00:00
module_loading.py	refactor(api): tighten phase 1 shared type contracts (#33453)	2026-03-17 17:50:51 +08:00
oauth_bearer.py	feat(api): add require_scope decorator (Phase A.4)	2026-04-26 23:27:48 -07:00
oauth_data_source.py	chore(api): migrate mail task and OAuth data source to use Session(db… (#35235)	2026-04-17 08:52:27 +00:00
oauth.py	chore(api): align Python support with 3.12 (#34419)	2026-04-02 05:07:32 +00:00
orjson.py	chore: add ast-grep rule to convert Optional[T] to T | None (#25560)	2025-09-15 13:06:33 +08:00
passport.py	chore: apply ty checks on api code with script and ci action (#24653)	2025-09-02 16:05:13 +08:00
password.py	Feat/new login (#8120)	2024-10-21 10:03:40 +08:00
pyrefly_diagnostics.py	fix(ci): make pyrefly diff comments focus on diagnostics (#32778)	2026-03-02 10:11:23 +08:00
pyrefly_type_coverage.py	feat(ci): add pyrefly type coverage reporting to CI (#34754)	2026-04-10 07:43:29 +00:00
rate_limit.py	feat(api,web): OAuth 2.0 device flow + bearer auth (RFC 8628)	2026-04-26 20:06:43 -07:00
rsa.py	fix: resolve Windows path separator issue in Huawei OBS operations (#23475)	2025-08-07 21:17:46 +08:00
schedule_utils.py	refactor(api): continue decoupling dify_graph from API concerns (#33580)	2026-03-25 20:32:24 +08:00
sendgrid.py	refactor: replace bare dict with dict[str, Any] in VDB providers and libs (#35123)	2026-04-14 03:02:29 +00:00
smtp.py	refactor: replace bare dict with dict[str, Any] in VDB providers and libs (#35123)	2026-04-14 03:02:29 +00:00
time_parser.py	Feat/add status filter to workflow runs (#26850)	2025-10-18 12:15:29 +08:00
token.py	refactor(api): flatten nested conditionals and clean up token helpers (#34835)	2026-04-20 03:39:54 +00:00
typing.py	feat: knowledge pipeline (#25360)	2025-09-18 12:49:10 +08:00
url_utils.py	fix: prevent double /v1 in MCP server URL causing 404 authorization failure (#34596)	2026-04-20 02:42:59 +00:00
uuid_utils.py	feat(api): add UUIDv7 implementation in SQL and Python (#22058)	2025-07-16 13:07:08 +08:00
validators.py	Exclude tests directory from pyright type checking (#26496)	2025-10-02 18:51:36 +08:00
workspace_permission.py	feat: implement workspace permission checks for member invitations an… (#31202)	2026-01-18 19:35:50 -08:00