Paul Y Hui 3e702c6265 fix: guard against missing/malformed Authorization header in apikey_required (#13860) ...

### What problem does this PR solve?

Previously, `apikey_required` called
`request.headers.get('Authorization').split()[1]` without checking for
None or insufficient parts, causing an unhandled AttributeError or
IndexError (500) instead of a proper 403 JSON response.

This applies the same guarding pattern already used by `token_required`
in the same file.

### Type of change

- [x] Bug Fix (non-breaking change which fixes an issue)
- [x] Refactoring

2026-03-31 15:25:00 +08:00

..

__init__.py

Remove 'get_lan_ip' and add common misc_utils.py (#10880)

2025-10-31 16:42:01 +08:00

api_utils.py

fix: guard against missing/malformed Authorization header in apikey_required (#13860)

2026-03-31 15:25:00 +08:00

base64_image.py

Move base64_image related functions to common directory (#10957)

2025-11-03 15:20:46 +08:00

commands.py

Feat: Alter flask to Quart for async API serving. (#11275)

2025-11-18 17:05:16 +08:00

common.py

Feat: Hash doc id to avoid duplicate name. (#12573)

2026-01-15 14:02:15 +08:00

configs.py

Introduce common/config_utils.py (#10968)

2025-11-03 17:25:06 +08:00

crypt.py

fix: use context managers for file handles to prevent resource leaks (#13514)

2026-03-11 16:47:06 +08:00

email_templates.py

Feat: Add box connector (#11845)

2025-12-12 10:23:40 +08:00

file_utils.py

Feat: support epub parsing (#13650)

2026-03-17 20:14:06 +08:00

health_utils.py

fix(api): MinIO health check use dynamic scheme and verify (Closes #13159 and #13158) (#13197)

2026-02-25 09:47:12 +08:00

image_utils.py

Feat: add_chunk supports add image (#13629)

2026-03-16 20:15:36 +08:00

json_encode.py

Minor tweats (#11271)

2025-11-16 19:29:20 +08:00

log_utils.py

Refactor log utils (#10973)

2025-11-03 20:25:02 +08:00

memory_utils.py

Feat/memory (#11812)

2025-12-10 13:34:08 +08:00

tenant_utils.py

Fix: /file2document/convert blocks event loop on large folders causing 504 timeout (#13784)

2026-03-26 16:45:10 +08:00

validation_utils.py

Fix: create dataset with chunk_method or pipeline (#13814)

2026-03-26 20:43:53 +08:00

web_utils.py

Fix: stored XSS via HTML File upload and inline Rendering in file get (#13202)

2026-02-25 09:46:48 +08:00