mirror of
https://github.com/langgenius/dify.git
synced 2026-02-12 22:01:20 -05:00
af17e20f99
- Added sandbox archive upload and download proxy endpoints with signed URL verification. - Introduced security helpers for generating and verifying signed URLs. - Updated file-related API routes to include sandbox archive functionality. - Refactored app asset storage methods to streamline download/upload URL generation.
15 lines
447 B
Markdown
15 lines
447 B
Markdown
Summary:
|
|
- Sandbox archive upload/download proxy endpoints (signed URL verification, stream to storage).
|
|
|
|
Invariants:
|
|
- Validates tenant_id and sandbox_id UUIDs.
|
|
- Verifies tenant-scoped signature and expiration before storage access.
|
|
- URL uses expires_at/nonce/sign query params.
|
|
|
|
Edge Cases:
|
|
- Missing archive returns NotFound.
|
|
- Invalid signature or expired link returns Forbidden.
|
|
|
|
Tests:
|
|
- Add unit tests for signature validation if needed.
|