bc68e02711
feat(openapi): distinguish expired OAuth bearer from invalid token
...
Previously an expired OAuth bearer and an unknown/invalid one both
surfaced as an indistinguishable generic 401 (and an invalid token
actually leaked a 500), so a client could not tell "session expired,
re-authenticate" apart from "never authenticated."
The resolver now raises a distinct TokenExpiredError for expired DB
rows and records a separate `expired` negative-cache marker, so a
retry within the negative-cache TTL still reports expiry instead of
collapsing into a generic miss. The auth pipeline maps the two domain
errors to unified OpenApiError responses: SessionExpired (code
`token_expired`) and InvalidBearer (code `unauthorized`), both 401.
This also fixes the latent 500 on invalid bearers.
The `token_expired` code is synced through the contract codegen into
the generated types/zod, and the difyctl error mapper branches the
401 on it. The CLI `expired_token` taxonomy member (RFC 8628
device-flow code expiry) is merged into `token_expired`; the RFC 8628
wire value is unchanged.
Closes WTA-1062
2026-06-28 21:45:13 -07:00
eb4ec93cea
chore: migrate account role test to testcontainers ( #38010 )
2026-06-26 05:51:14 +00:00
fa6f4b0ea5
refactor(api): enforce enums over string literals on openapi surface ( #38009 )
2026-06-26 05:48:21 +00:00
267b34caaf
fix(web): keep HITL input-field save button visible in the edit dialog ( #38007 )
...
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-26 05:40:51 +00:00
6ab1dd06ac
fix: isolate node selector keyboard events ( #37998 )
2026-06-26 05:38:10 +00:00
113d6d7e00
refactor: align deployment detail state ownership ( #38008 )
2026-06-26 05:37:21 +00:00
a66b1de477
refactor: Use pytest caplog instead of logger patching in test_spec.py ( #37997 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-26 04:48:22 +00:00
16b698b54d
refactor: simplify deployment access ownership ( #37994 )
2026-06-26 04:10:56 +00:00
4cd8b8c733
fix(web): make marketplace URL builder SSR-safe ( #37944 )
2026-06-26 03:35:22 +00:00
677ab01806
refactor(tests): use caplog in workflow collaboration service tests ( #37468 ) ( #37991 )
...
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-26 03:14:06 +00:00
f4e832f35c
fix: decouple deployment access control dialog ( #37936 )
2026-06-26 02:16:29 +00:00
1c5e1280cb
feat(webapp): display app description on chat and text-generation app screens ( #37345 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-26 02:03:16 +00:00
0035d90e36
fix(api): require edit access for trace config changes ( #37973 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-26 00:51:39 +00:00
2047e0dc12
fix(cli): use a(n) article in difyctl prerelease warning ( #37976 )
2026-06-26 00:49:42 +00:00
2e9c0a3c7a
refactor(api): migrate response contract tooling to BaseModel ( #37950 )
2026-06-26 00:11:04 +00:00
a246dc8b17
ci: emit pyrefly diagnostics as GitHub workflow commands ( #37974 )
2026-06-25 18:27:46 +00:00
bb921bcc45
test: replace logger mock with caplog in workflow collaboration test ( #37971 )
2026-06-25 16:45:59 +00:00
4f4ac27de2
chore(api): surface pyrefly output on type-check failures ( #37934 )
2026-06-25 13:47:10 +00:00
3aa26fb637
chore: bump versions to 1.15.0 ( #37929 )
2026-06-25 12:02:38 +00:00
1d2cc1e475
feat: add hydration support and fallback for Countdown component ( #37943 )
2026-06-25 10:40:48 +00:00
aa37c1d833
fix(api): tongyi credential compatibility ( #37942 )
2026-06-25 10:25:24 +00:00
48dfbd60d6
fix: polish tool provider selection and detail drawer ( #37940 )
2026-06-25 10:07:32 +00:00
e90c7ab8a7
refactor(tests): replace logger mocks with caplog ( #37468 ) ( #37922 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-25 09:48:43 +00:00
40119fef44
feat: update monitor permission key and plugin permission key ( #37937 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-25 09:41:38 +00:00
72a03c2d6a
refactor(test): replace SimpleNamespace with real UploadFile model in test_dataset_models.py ( #37935 )
...
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-25 09:35:24 +00:00
affdc89f84
feat: enhance app permissions and access controls ( #37933 )
2026-06-25 09:28:58 +00:00
b33e8f0ddb
fix: improve error handling for workflow execution ( #37919 )
2026-06-25 07:36:34 +00:00
8f74e176ca
fix: remove redundant snippets permissions ( #37921 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-06-25 07:27:16 +00:00
b9bcf31c72
chore(i18n): sync translations with en-US ( #37916 )
...
Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com >
2026-06-25 07:07:23 +00:00
abf2986299
build(deps): update Bleach sanitizer security fix ( #37860 )
2026-06-25 06:32:48 +00:00
599d92ef6b
fix: Fix frontend rbac issues ( #37872 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-25 05:51:39 +00:00
93dd955deb
docs: add Dify Cloud support contact ( #37913 )
2026-06-25 05:19:31 +00:00
75909ce10e
chore(i18n): sync translations with en-US ( #37891 )
...
Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com >
2026-06-25 03:24:37 +00:00
d93989bfc0
chore: add type to test ( #37876 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-25 03:01:09 +00:00
31a50a3b20
fix: eagerly validate conversation before generator to prevent hanging ( #37224 )
...
Co-authored-by: yunlu.wen <yunlu.wen@dify.ai >
2026-06-25 02:57:33 +00:00
3d8316333f
fix: keep body background consistent on overscroll ( #37909 )
2026-06-25 02:20:39 +00:00
9fc2925b00
feat: delete member delete rbac binding ( #37904 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-25 02:08:07 +00:00
d349e892f4
fix: respect legacy plugin permissions without RBAC ( #37903 )
2026-06-25 01:18:40 +00:00
2483c091aa
refactor: replace logger patches with pytest caplog in tests ( #37890 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
2026-06-24 21:40:06 +00:00
a421362847
chore(web): prune unused i18n translations ( #37888 )
2026-06-24 16:13:22 +00:00
4964359961
refactor(tests): use caplog in web login tests ( #37889 )
...
Co-authored-by: lin-hongkuan <lin-hongkuan@users.noreply.github.com >
2026-06-24 14:44:01 +00:00
1b81ac033f
chore(knip): add mdx support clean unused code ( #37882 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-24 12:30:11 +00:00
2eb564696e
fix: banner has ui problem in small screen ( #37879 )
2026-06-24 11:19:33 +00:00
d87764b0f8
feat: filter dataset operator and add miss permission key ( #37867 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-24 09:56:28 +00:00
d135dab241
fix: Lindorm vector store errors caused by the update of opensearch-py ( #37862 )
2026-06-24 09:54:06 +00:00
ea1aa2fecd
chore(web): remove unused frontend code ( #37866 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-24 09:25:52 +00:00
86b73ba205
fix: align switch focus outline ( #37870 )
2026-06-24 09:16:40 +00:00
fe62177ba5
fix: add is_cloud_only for templates ( #37846 )
...
Co-authored-by: Joel <iamjoel007@gmail.com >
2026-06-24 08:29:54 +00:00
ce6297bed2
chore(deps): bump dep versions for CVE fixes ( #37861 )
...
Co-authored-by: QuantumGhost <obelisk.reg+git@gmail.com >
2026-06-24 08:22:55 +00:00
94d365ea5e
feat: surface separated-mode LLM reasoning in CLI and workflow run preview ( #37828 )
2026-06-24 08:02:28 +00:00
GareArc