gcgj-dify-1.7.0

Commit Graph

Author	SHA1	Message	Date
k-brahma-dify	623d1f7adf	feat: implement Multi-Factor Authentication (MFA) with TOTP and backup codes - Add AccountMFASettings model as separate table for non-breaking changes - Implement TOTP authentication using PyOTP with QR code generation - Add backup codes for account recovery scenarios - Integrate MFA verification into login flow with proper error handling - Create comprehensive API endpoints for MFA management: * POST /console/auth/mfa/setup/init - Initialize MFA setup * POST /console/auth/mfa/setup/complete - Complete MFA setup with TOTP * POST /console/auth/mfa/disable - Disable MFA with password verification * GET /console/auth/mfa/status - Get current MFA status * POST /console/auth/mfa/verify - Verify MFA token - Add database migration for account_mfa_settings table - Implement 100% test coverage with 27 unit tests covering: * All 12 MFAService methods * API endpoint functionality * Login flow integration * Edge cases and error scenarios * Security validations - Add dependencies: pyotp~=2.9.0, qrcode~=8.0.1 Security features: - TOTP tokens with 30-second validity window - One-time backup codes that are consumed after use - Password verification required for MFA disable - Separate table design for easy rollback - Google Authenticator compatible QR codes 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com> feat: implement Multi-Factor Authentication (MFA) with TOTP and backup codes - Add TOTP-based 2FA with QR code setup - Support backup codes for account recovery - Fix UI click blocking issues (Dialog → Modal) - Add comprehensive error handling for binascii.Error - Support 4 languages (EN/JA/ZH/DE) - Include complete API endpoints for MFA management - Add detailed MFA.md documentation 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com> fix: resolve MFA implementation issues and add test infrastructure - Fixed MFA API routes - moved from /console/api/mfa/* to /console/api/account/mfa/* - Fixed password verification in MFA disable using compare_password instead of non-existent method - Fixed i18n translation keys to use proper namespace (common.operation.cancel) - Fixed MenuDialog structure to prevent click-blocking issues - Added MFA section to Account page with proper modal integration - Removed all debug console.log statements and styling - Added comprehensive test files for both frontend (Jest) and backend (pytest) - Added MFA implementation handover documentation - Fixed db.session.query pattern in MFA verify endpoint This completes the MFA implementation with all known issues resolved. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com> feat: add MFA frontend unit tests and improve test infrastructure - Add comprehensive unit tests for MFA components - Implement Jest configuration for Next.js environment - Add test mocks and utilities - Create development Dockerfile for testing Note: MFA component tests execution has technical challenges due to Jest/Next.js integration issues. Simplified tests work, but full MFA component testing requires environment improvements. Manual testing confirmed all MFA functionality works correctly in browser. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com> docs: reorganize MFA documentation into docs/ directory - Move MFA_IMPLEMENTATION_HANDOVER.md to docs/MFA_IMPLEMENTATION.md - Move MFA_TEST_SUMMARY.md to docs/MFA_TESTING.md - Improve documentation structure for better organization	11 months ago
-LAN-	3196dc2d61	refactor: Use typed SQLAlchemy base model and fix type errors (#19980 ) Signed-off-by: -LAN- <laipz8200@outlook.com>	1 year ago
NFish	d186daa131	E-300 (#19726 ) Signed-off-by: -LAN- <laipz8200@outlook.com> Co-authored-by: Hash Brown <hi@xzd.me> Co-authored-by: crazywoola <427733928@qq.com> Co-authored-by: GareArc <chen4851@purdue.edu> Co-authored-by: Byron.wang <byron@dify.ai> Co-authored-by: Joel <iamjoel007@gmail.com> Co-authored-by: -LAN- <laipz8200@outlook.com> Co-authored-by: Garfield Dai <dai.hai@foxmail.com> Co-authored-by: KVOJJJin <jzongcode@gmail.com> Co-authored-by: Alexi.F <654973939@qq.com> Co-authored-by: Xiyuan Chen <52963600+GareArc@users.noreply.github.com> Co-authored-by: kautsar_masuara <61046989+izon-masuara@users.noreply.github.com> Co-authored-by: achmad-kautsar <achmad.kautsar@insignia.co.id> Co-authored-by: Xin Zhang <sjhpzx@gmail.com> Co-authored-by: kelvintsim <83445753+kelvintsim@users.noreply.github.com> Co-authored-by: zxhlyh <jasonapring2015@outlook.com> Co-authored-by: Zixuan Cheng <61724187+Theysua@users.noreply.github.com>	1 year ago
Bowen Liang	8537abfff8	chore: avoid repeated type ignore noqa by adding flask_restful and flask_login in mypy import exclusions (#19224 )	1 year ago
Xiyuan Chen	4247a6b807	fix: reset_password security issue (#18363 )	1 year ago
Xiyuan Chen	74d3320519	feat: account delete (#11829 ) Co-authored-by: NFish <douxc512@gmail.com>	1 year ago
yihong	56e15d09a9	feat: mypy for all type check (#10921 )	1 year ago
Garfield Dai	c49efc0c22	Feat/account not found (#10804 )	2 years ago
-LAN-	9ac2bb30f4	Feat/add-remote-file-upload-api (#9906 )	2 years ago
Joe	ed96a6b6c0	fix: remove email code login redirect (#9698 )	2 years ago
Joe	4fd2743efa	Feat/new login (#8120 ) Co-authored-by: douxc <douxc512@gmail.com> Co-authored-by: Garfield Dai <dai.hai@foxmail.com>	2 years ago
-LAN-	f73751843f	Feat/implement-refresh-tokens (#9233 )	2 years ago
-LAN-	13be84e4d4	chore(api/controllers): Apply Ruff Formatter. (#7645 )	2 years ago
-LAN-	a98284b1ef	refactor(api): Switch to `dify_config` (#6750 ) Signed-off-by: -LAN- <laipz8200@outlook.com>	2 years ago
-LAN-	4d105d7bd7	feat(*): Swtich to dify_config. (#6025 )	2 years ago
-LAN-	1336b844fd	feat(api/auth): switch-to-stateful-authentication (#5438 )	2 years ago
Garfield Dai	4481906be2	Feat/enterprise sso (#3602 )	2 years ago
takatost	e6d22fc3a0	fix: account has no owner workspace by member inviting (#2435 )	2 years ago
Bowen Liang	063191889d	chore: apply ruff's pyupgrade linter rules to modernize Python code with targeted version (#2419 )	2 years ago
Bowen Liang	843280f82b	enhancement: introduce Ruff for Python linter for reordering and removing unused imports with automated pre-commit and sytle check (#2366 )	2 years ago
crazywoola	a8f23ed712	Feat/move tenant id into db (#2341 )	2 years ago
Bowen Liang	cc9e74123c	improve: introduce isort for linting Python imports (#1983 )	2 years ago
zxhlyh	227f9fb77d	Feat/api jwt (#1212 )	3 years ago
Matri	fc7e4ac75b	fix: automatically create tenant for user (#793 )	3 years ago
John Wang	db896255d6	Initial commit	3 years ago

25 Commits (623d1f7adfdf06813762fe51c3cf56d0b11712d3)