mirror of
https://github.com/langgenius/dify.git
synced 2026-02-02 00:51:49 +08:00
61f8647f37
Some checks are pending
autofix.ci / autofix (push) Waiting to run
Build and Push API & Web / build (api, DIFY_API_IMAGE_NAME, linux/amd64, build-api-amd64) (push) Waiting to run
Build and Push API & Web / build (api, DIFY_API_IMAGE_NAME, linux/arm64, build-api-arm64) (push) Waiting to run
Build and Push API & Web / build (web, DIFY_WEB_IMAGE_NAME, linux/amd64, build-web-amd64) (push) Waiting to run
Build and Push API & Web / build (web, DIFY_WEB_IMAGE_NAME, linux/arm64, build-web-arm64) (push) Waiting to run
Build and Push API & Web / create-manifest (api, DIFY_API_IMAGE_NAME, merge-api-images) (push) Blocked by required conditions
Build and Push API & Web / create-manifest (web, DIFY_WEB_IMAGE_NAME, merge-web-images) (push) Blocked by required conditions
Main CI Pipeline / Check Changed Files (push) Waiting to run
Main CI Pipeline / API Tests (push) Blocked by required conditions
Main CI Pipeline / Web Tests (push) Blocked by required conditions
Main CI Pipeline / Style Check (push) Waiting to run
Main CI Pipeline / VDB Tests (push) Blocked by required conditions
Main CI Pipeline / DB Migration Test (push) Blocked by required conditions
The `/console/api/system-features` is required for the dashboard initialization. Authentication would create circular dependency (can't login without dashboard loading). ref: CVE-2025-63387 Related: #31368
52 lines
1.8 KiB
Python
52 lines
1.8 KiB
Python
from flask_restx import Resource, fields
|
|
|
|
from libs.login import current_account_with_tenant, login_required
|
|
from services.feature_service import FeatureService
|
|
|
|
from . import console_ns
|
|
from .wraps import account_initialization_required, cloud_utm_record, setup_required
|
|
|
|
|
|
@console_ns.route("/features")
|
|
class FeatureApi(Resource):
|
|
@console_ns.doc("get_tenant_features")
|
|
@console_ns.doc(description="Get feature configuration for current tenant")
|
|
@console_ns.response(
|
|
200,
|
|
"Success",
|
|
console_ns.model("FeatureResponse", {"features": fields.Raw(description="Feature configuration object")}),
|
|
)
|
|
@setup_required
|
|
@login_required
|
|
@account_initialization_required
|
|
@cloud_utm_record
|
|
def get(self):
|
|
"""Get feature configuration for current tenant"""
|
|
_, current_tenant_id = current_account_with_tenant()
|
|
|
|
return FeatureService.get_features(current_tenant_id).model_dump()
|
|
|
|
|
|
@console_ns.route("/system-features")
|
|
class SystemFeatureApi(Resource):
|
|
@console_ns.doc("get_system_features")
|
|
@console_ns.doc(description="Get system-wide feature configuration")
|
|
@console_ns.response(
|
|
200,
|
|
"Success",
|
|
console_ns.model(
|
|
"SystemFeatureResponse", {"features": fields.Raw(description="System feature configuration object")}
|
|
),
|
|
)
|
|
def get(self):
|
|
"""Get system-wide feature configuration
|
|
|
|
NOTE: This endpoint is unauthenticated by design, as it provides system features
|
|
data required for dashboard initialization.
|
|
|
|
Authentication would create circular dependency (can't login without dashboard loading).
|
|
|
|
Only non-sensitive configuration data should be returned by this endpoint.
|
|
"""
|
|
return FeatureService.get_system_features().model_dump()
|