mirror of
https://github.com/langgenius/dify.git
synced 2026-02-13 07:01:23 -05:00
14 lines
417 B
Markdown
14 lines
417 B
Markdown
Summary:
|
|
- App assets upload proxy endpoint (signed URL verification, upload to storage).
|
|
|
|
Invariants:
|
|
- Validates AssetPath fields (UUIDs, asset_type allowlist).
|
|
- Verifies tenant-scoped signature and expiration before writing storage.
|
|
- URL uses expires_at/nonce/sign query params.
|
|
|
|
Edge Cases:
|
|
- Invalid signature or expired link returns Forbidden.
|
|
|
|
Tests:
|
|
- Verify signature validation and invalid/expired cases.
|