wizardchen c65ffa3d9c fix(api-keys): enforce scope from request context after attach ...

Use c.Request.Context() in authenticateAPIKeyRequest so scoped keys are
actually restricted, update dto tests for removed tenant.api_key, and add
a regression test for the attach-context contract.

2026-07-07 12:00:13 +08:00

..

dto

fix(api-keys): enforce scope from request context after attach

2026-07-07 12:00:13 +08:00

session

feat: add scoped tenant api keys

2026-07-07 12:00:13 +08:00

audit_log_test.go

test(system): cover ListSystemAuditLog handler contract

2026-05-26 21:13:56 +08:00

audit_log.go

feat(system): expose platform audit log + polish audit drawers

2026-05-26 21:13:56 +08:00

auth_register_by_invite.go

fix(security): redact secrets in login and tenant KV update responses

2026-07-02 14:41:42 +08:00

auth_register_invite_only_test.go

feat(rbac): add multi-use share-link invitations for invite_only mode (#1504)

2026-05-27 19:42:01 +08:00

auth.go

fix(security): block refresh tokens as bearer and sandbox MCP uploads

2026-07-02 17:08:17 +08:00

chunk.go

feat: Support filtering chunks by multiple chunk_type params

2026-05-25 19:14:46 +08:00

chunker_debug_test.go

fix(chunker): post-review fixes for preview endpoint robustness

2026-05-06 17:17:07 +08:00

chunker_debug.go

docs(api): add and fix swag annotations on handlers

2026-05-12 13:16:58 +08:00

custom_agent.go

feat(chat): add @Skill/@MCP mentions with scoped agent runtime

2026-06-29 18:09:44 +08:00

datasource_credentials.go

fix(datasource): harden RSS connector and editor UX after review

2026-06-23 17:30:38 +08:00

datasource_test.go

Validate sync log limit parameter

2026-06-12 22:52:25 +08:00

datasource.go

feat(datasource): reveal pre-existing selections in lazily-loaded picker

2026-06-22 19:24:08 +08:00

embed_channel_exchange_test.go

feat(embed): add backend embed channels with auth and rate limiting (#1657)

2026-06-12 23:10:39 +08:00

embed_channel.go

feat(embed): scope OAuth and sessions per visitor principal

2026-06-30 20:01:05 +08:00

embed_flow_test.go

fix(api-keys): harden scoped key auth after code review

2026-07-07 12:00:13 +08:00

embed_session_test.go

feat(embed): scope OAuth and sessions per visitor principal

2026-06-30 20:01:05 +08:00

evaluation.go

feat: 新增API Key认证支持，优化Swagger文档安全配置

2025-12-22 15:01:09 +08:00

faq.go

fix(security): enforce KB access on wiki reads and related IDOR paths

2026-07-02 12:06:22 +08:00

im.go

fix(security): redact IM list credentials and harden MinerU SSRF

2026-07-02 17:58:20 +08:00

initialization_config_redaction_test.go

fix(security): close init config and parser-check redaction gaps

2026-07-02 14:41:42 +08:00

initialization.go

fix(security): close init config and parser-check redaction gaps

2026-07-02 14:41:42 +08:00

knowledge_api_key_scope_test.go

fix(api-keys): close KB scope gaps in handlers and CloneContext

2026-07-07 12:00:13 +08:00

knowledge_move_gate_test.go

fix: reject cross-store reuse_vectors knowledge move

2026-06-05 15:00:41 +08:00

knowledge_preview_security_test.go

fix(security): harden outbound requests and file previews

2026-07-02 19:15:46 +08:00

knowledge_spans_test.go

fix(knowledge): infer synthesized stage status from parse_status

2026-05-28 15:14:45 +08:00

knowledge_tag_ids_test.go

fix(knowledge): harden multi-tag data integrity and UX follow-ups

2026-06-26 10:52:52 +08:00

knowledge.go

fix(api-keys): close KB scope gaps in handlers and CloneContext

2026-07-07 12:00:13 +08:00

knowledgebase_copy_preflight_test.go

feat(knowledge-base): validate vector store bindings on create, copy, and delete

2026-05-18 15:58:46 +08:00

knowledgebase_not_found_test.go

fix(kb): map ErrKnowledgeBaseNotFound to 404 across handler helpers

2026-05-14 20:12:41 +08:00

knowledgebase_pr3_response_test.go

feat(knowledge-base): validate vector store bindings on create, copy, and delete

2026-05-18 15:58:46 +08:00

knowledgebase_pr5_list_test.go

feat: expose KB ↔ vector store binding in list, editor, and detail UI

2026-05-22 17:40:10 +08:00

knowledgebase_request_test.go

feat(knowledge-base): validate vector store bindings on create, copy, and delete

2026-05-18 15:58:46 +08:00

knowledgebase.go

fix(api-keys): close KB scope gaps in handlers and CloneContext

2026-07-07 12:00:13 +08:00

list_pagination.go

feat(invitations): implement pending invitations feature with polling and dialog

2026-05-18 17:28:58 +08:00

mcp_credentials.go

refactor(credentials): introduce /credentials subresource pattern

2026-05-17 15:27:52 +08:00

mcp_oauth.go

feat(embed): scope OAuth and sessions per visitor principal

2026-06-30 20:01:05 +08:00

mcp_service.go

fix(security): harden secret redaction follow-ups for PR #1884

2026-07-02 14:41:42 +08:00

message_session_not_found_test.go

fix(chat): stabilize history pagination and keep message order

2026-05-20 21:03:39 +08:00

message.go

fix(server): case-insensitive doc keyword search + not-found classification

2026-07-06 22:53:01 +08:00

model_credentials.go

refactor(credentials): introduce /credentials subresource pattern

2026-05-17 15:27:52 +08:00

model_test.go

feat(models): add model test debugger for saved model configs

2026-06-25 17:05:33 +08:00

model.go

fix(security): harden secret redaction follow-ups for PR #1884

2026-07-02 14:41:42 +08:00

organization.go

fix(security): close six open GHSA findings from security triage

2026-07-02 15:03:53 +08:00

rbac_lookups_test.go

fix(rbac): wire chunk-id ownership chain for generated-question delete

2026-05-18 17:28:58 +08:00

rbac_lookups.go

fix(security): close six open GHSA findings from security triage

2026-07-02 15:03:53 +08:00

skill_handler.go

feat: update sandbox service configuration in Docker Compose files

2026-02-04 21:34:07 +08:00

storage_allowlist.go

feat(obs): 支持华为云obs存储

2026-05-18 19:38:23 +08:00

system_admin_audit_test.go

test(system): cover system.* audit constants + emitAdminAudit contract

2026-05-26 21:13:56 +08:00

system_parser_check_test.go

fix(security): close init config and parser-check redaction gaps

2026-07-02 14:41:42 +08:00

system_storage_ssrf_test.go

fix(security): close remaining GHSA gaps from security triage

2026-07-02 15:03:53 +08:00

system.go

fix(security): close remaining GHSA gaps from security triage

2026-07-02 15:03:53 +08:00

tag.go

refactor(rbac): KB-access guard at the route layer (no helper in handlers)

2026-05-18 17:28:58 +08:00

task_progress_auth_test.go

fix(security): enforce KB access on wiki reads and related IDOR paths

2026-07-02 12:06:22 +08:00

task_progress_auth.go

fix(security): enforce KB access on wiki reads and related IDOR paths

2026-07-02 12:06:22 +08:00

tenant_invitation.go

fix(security): close six open GHSA findings from security triage

2026-07-02 15:03:53 +08:00

tenant_invite_link.go

feat(rbac): add multi-use share-link invitations for invite_only mode (#1504)

2026-05-27 19:42:01 +08:00

tenant_member_test.go

feat(invitations): implement pending invitations feature with polling and dialog

2026-05-18 17:28:58 +08:00

tenant_member.go

feat(invitations): implement pending invitations feature with polling and dialog

2026-05-18 17:28:58 +08:00

tenant_parser_ssrf_test.go

fix(security): redact IM list credentials and harden MinerU SSRF

2026-07-02 17:58:20 +08:00

tenant_secret_disclosure_test.go

fix(api-keys): harden scoped key auth after code review

2026-07-07 12:00:13 +08:00

tenant.go

fix(api-keys): harden scoped key auth after code review

2026-07-07 12:00:13 +08:00

user_resource_favorite.go

feat(favorites): implement user favorites and recents functionality

2026-05-18 17:28:58 +08:00

vectorstore.go

fix: validate vector store connection addresses against SSRF policy

2026-06-04 15:26:56 +08:00

web_search_provider_credentials.go

refactor(credentials): introduce /credentials subresource pattern

2026-05-17 15:27:52 +08:00

web_search_provider.go

fix(security): harden secret redaction follow-ups for PR #1884

2026-07-02 14:41:42 +08:00

web_search.go

docs(api): add and fix swag annotations on handlers

2026-05-12 13:16:58 +08:00

wechat_qrcode.go

docs(api): add and fix swag annotations on handlers

2026-05-12 13:16:58 +08:00

weknoracloud.go

docs(api): add and fix swag annotations on handlers

2026-05-12 13:16:58 +08:00

wiki_page.go

feat(wiki): implement folder management features in wiki API

2026-06-16 23:51:29 +08:00