ragflow

AI/ragflow

mirror of https://git.mirrors.martin98.com/https://github.com/infiniflow/ragflow.git synced 2025-08-03 16:40:40 +08:00

History

Feat: Add OAuth state parameter for CSRF protection (#7709 )

### What problem does this PR solve?

Add OAuth `state` parameter for CSRF protection:
- Updated `get_authorization_url()` to accept an optional state
parameter
- Generated a unique state value during OAuth login and stored in
session
- Verified state parameter in callback to ensure request legitimacy

This PR follows OAuth 2.0 security best practices by ensuring that the
authorization request originates from the same user who initiated the
flow.

### Type of change

- [x] New Feature (non-breaking change which adds functionality)

2025-05-20 09:40:31 +08:00

auth

Feat: Add OAuth state parameter for CSRF protection (#7709 )

2025-05-20 09:40:31 +08:00

sdk

Fix:Fail to get list_sessions (#7678 )

2025-05-16 10:58:28 +08:00

__init__.py

Fix:When you create a new API module named xxxa_api, the access route will become xxx instead of xxxa. For example, when I create a new API module named 'data_api', the access route will become 'dat' instead of 'data (#7325 )

2025-05-20 09:39:26 +08:00

api_app.py

FIX:ZeroDivisionError when using large page_size in client.retrieve() (#7595 )