mirror of
https://github.com/langgenius/dify.git
synced 2026-05-20 08:46:57 +08:00
62 lines
2.4 KiB
Python
62 lines
2.4 KiB
Python
from flask_restx import Resource
|
|
from werkzeug.exceptions import Unauthorized
|
|
|
|
from controllers.common.schema import register_response_schema_models
|
|
from libs.login import current_account_with_tenant, current_user, login_required
|
|
from services.feature_service import FeatureModel, FeatureService, SystemFeatureModel
|
|
|
|
from . import console_ns
|
|
from .wraps import account_initialization_required, cloud_utm_record, setup_required
|
|
|
|
register_response_schema_models(console_ns, FeatureModel, SystemFeatureModel)
|
|
|
|
|
|
@console_ns.route("/features")
|
|
class FeatureApi(Resource):
|
|
@console_ns.doc("get_tenant_features")
|
|
@console_ns.doc(description="Get feature configuration for current tenant")
|
|
@console_ns.response(
|
|
200,
|
|
"Success",
|
|
console_ns.models[FeatureModel.__name__],
|
|
)
|
|
@setup_required
|
|
@login_required
|
|
@account_initialization_required
|
|
@cloud_utm_record
|
|
def get(self):
|
|
"""Get feature configuration for current tenant"""
|
|
_, current_tenant_id = current_account_with_tenant()
|
|
|
|
return FeatureService.get_features(current_tenant_id).model_dump()
|
|
|
|
|
|
@console_ns.route("/system-features")
|
|
class SystemFeatureApi(Resource):
|
|
@console_ns.doc("get_system_features")
|
|
@console_ns.doc(description="Get system-wide feature configuration")
|
|
@console_ns.response(
|
|
200,
|
|
"Success",
|
|
console_ns.models[SystemFeatureModel.__name__],
|
|
)
|
|
def get(self):
|
|
"""Get system-wide feature configuration
|
|
|
|
NOTE: This endpoint is unauthenticated by design, as it provides system features
|
|
data required for dashboard initialization.
|
|
|
|
Authentication would create circular dependency (can't login without dashboard loading).
|
|
|
|
Only non-sensitive configuration data should be returned by this endpoint.
|
|
"""
|
|
# NOTE(QuantumGhost): ideally we should access `current_user.is_authenticated`
|
|
# without a try-catch. However, due to the implementation of user loader (the `load_user_from_request`
|
|
# in api/extensions/ext_login.py), accessing `current_user.is_authenticated` will
|
|
# raise `Unauthorized` exception if authentication token is not provided.
|
|
try:
|
|
is_authenticated = current_user.is_authenticated
|
|
except Unauthorized:
|
|
is_authenticated = False
|
|
return FeatureService.get_system_features(is_authenticated=is_authenticated).model_dump()
|