GareArc f903b980ea fix(device-flow): bound user_code in error redirect + split compound assert ...

Validate user_code against a [A-Z0-9-] charset before placing it in the
/device redirect, closing the CodeQL url-redirection finding (the value
can no longer carry path/scheme separators). Split the compound assert
flagged by ruff PT018.

2026-06-29 20:14:52 -07:00

..

auth

feat: guard openapi with rbac (#37752)

2026-06-22 09:35:33 +00:00

_mode_constants.py

fix(app): derive get-app --mode whitelist from listable app types (#37761)

2026-06-23 04:40:05 +00:00

conftest.py

feat: guard openapi with rbac (#37752)

2026-06-22 09:35:33 +00:00

test_account.py

chore: add Type to test (#37191)

2026-06-19 16:44:20 +00:00

test_app_describe_builder.py

refactor(openapi/cli): split app usage-face from studio-app build-face (#37641)

2026-06-22 07:46:59 +00:00

test_app_describe_query.py

feat: adding dify cli (#36348)

2026-05-26 01:12:36 +00:00

test_app_list_query.py

fix(app): derive get-app --mode whitelist from listable app types (#37761)

2026-06-23 04:40:05 +00:00

test_app_payloads.py

fix(app): derive get-app --mode whitelist from listable app types (#37761)

2026-06-23 04:40:05 +00:00

test_app_run_dispatch.py

feat: adding dify cli (#36348)

2026-05-26 01:12:36 +00:00

test_app_run_rate_limit.py

feat: 429 rate-limit handling on the unified ErrorBody contract (openapi + difyctl) (#37313)

2026-06-12 06:35:15 +00:00

test_app_run_streaming.py

refactor(api): migrate response contract tooling to BaseModel (#37950)

2026-06-26 00:11:04 +00:00

test_apps_permitted_external_query.py

fix(app): derive get-app --mode whitelist from listable app types (#37761)

2026-06-23 04:40:05 +00:00

test_audit_app_run.py

chore: Caplog type (#37603)

2026-06-18 18:53:13 +00:00

test_contract.py

refactor(api): migrate response contract tooling to BaseModel (#37950)

2026-06-26 00:11:04 +00:00

test_cors.py

feat: adding dify cli (#36348)

2026-05-26 01:12:36 +00:00

test_device_approve_deny.py

feat: adding dify cli (#36348)

2026-05-26 01:12:36 +00:00

test_device_code.py

feat: adding dify cli (#36348)

2026-05-26 01:12:36 +00:00

test_device_lookup.py

feat: adding dify cli (#36348)

2026-05-26 01:12:36 +00:00

test_device_sso.py

fix(device-flow): bound user_code in error redirect + split compound assert

2026-06-29 20:14:52 -07:00

test_device_token.py

feat: adding dify cli (#36348)

2026-05-26 01:12:36 +00:00

test_error_contract.py

fix(hitl): stop confusing 404 when resuming forms via CLI (#37556)

2026-06-22 06:11:27 +00:00

test_health.py

feat: adding dify cli (#36348)

2026-05-26 01:12:36 +00:00

test_human_input_form.py

fix(hitl): stop confusing 404 when resuming forms via CLI (#37556)

2026-06-22 06:11:27 +00:00

test_input_schema.py

feat: adding dify cli (#36348)

2026-05-26 01:12:36 +00:00

test_meta_version.py

chore: add Type to test (#37191)

2026-06-19 16:44:20 +00:00

test_models.py

feat: adding dify cli (#36348)

2026-05-26 01:12:36 +00:00

test_oauth_sso_claims.py

feat(device-flow): redirect sso-complete failures to device page

2026-06-29 19:18:15 -07:00

test_oauth_sso_csrf.py

feat: adding dify cli (#36348)

2026-05-26 01:12:36 +00:00

test_oauth_sso_host_header.py

feat: adding dify cli (#36348)

2026-05-26 01:12:36 +00:00

test_pagination_envelope.py

refactor(openapi/cli): split app usage-face from studio-app build-face (#37641)

2026-06-22 07:46:59 +00:00

test_supported_app_type.py

fix(app): derive get-app --mode whitelist from listable app types (#37761)

2026-06-23 04:40:05 +00:00

test_workflow_events_openapi.py

chore: add Type to test (#37191)

2026-06-19 16:44:20 +00:00

test_workspaces_members.py

chore: add Type to test (#37191)

2026-06-19 16:44:20 +00:00

test_workspaces.py

feat: adding dify cli (#36348)

2026-05-26 01:12:36 +00:00