GareArc 04ebf8a92f feat(openapi): /apps/permitted — external-subject app discovery (EE) ...

Split route for dfoe_ external-SSO discovery, separate from /apps
(dfoa_-only workspace catalog). Cross-tenant allow-list query: server
calls Enterprise inner-API POST /inner/api/webapp/permitted-apps and
hydrates app/tenant rows locally. New scope apps:read:permitted (no
dual-meaning with apps:read). Route gated by @enterprise_only — 404
on CE — and validate_bearer(accept=ACCEPT_USER_EXT_SSO) — 403 on dfoa_.
Query validator rejects workspace_id and tag (cross-tenant
unresolvable); mode/name supported.

EE inner-API wire-up depends on ee-2; the service-layer stub raises
ServiceUnavailable until that endpoint ships. CLI dispatches between
/apps and /apps/permitted client-side based on the bearer prefix in
hosts.yml — see docs/specs/v1.0/apps.md §Subject dispatch.

Verified via unit tests on AppPermittedListQuery and Scope wiring;
HTTP integration tests deferred to ee-2 once the inner-API ships.

2026-05-05 20:20:22 -07:00

..

fixtures/workflow

fix(api): defer streaming response until referenced variables are updated (#30832)

2026-01-12 16:23:18 +08:00

integration_tests

chore(test): consolidate /openapi/v1 integration fixtures

2026-05-05 18:08:31 -07:00

test_containers_integration_tests

fix: accept icon type in app icon updates (#35360)

2026-04-20 02:33:49 +00:00

unit_tests

feat(openapi): /apps/permitted — external-subject app discovery (EE)

2026-05-05 20:20:22 -07:00

__init__.py

refactor: move vdb implementations to workspaces (#34900)

2026-04-13 08:56:43 +00:00

conftest.py

refactor(workflow-file): move core.file to core.workflow.file (#32252)

2026-02-16 22:38:19 +08:00

workflow_test_utils.py

chore: reorg imports (#35308)

2026-04-16 08:50:02 +00:00