WeKnora

mirror of https://github.com/Tencent/WeKnora.git synced 2026-09-19 10:28:49 +08:00

Files

T

wizardchen f27a1e083c fix(im): prefer tenant ID from context, shorten presigned URL TTL

Addresses review feedback on the IM storage URL rewrite:

- localFileService.GetFileURL now reads tenant ID from request context
  first, falling back to ParseTenantIDFromStoragePath only when context
  is absent. Fixes ambiguity for cloud providers whose paths embed
  numeric bucket/region names before the tenant segment, which could
  mint presigned URLs bound to the wrong tenant ID.
- Shorten presigned URL default TTL from 24h to 2h. A leaked HMAC key
  authorizes cross-tenant file reads, so URLs should expire quickly;
  IM clients fetch referenced images within seconds anyway.
- Document ParseTenantIDFromStoragePath as a best-effort fallback.
- Add unit tests covering context-first, path-fallback, and the
  no-external-URL backward-compat path.

2026-04-30 11:40:30 +08:00

crypto_test.go

fix(tenant): prevent api_key encryption loss on tenant settings update

2026-03-25 21:25:21 +08:00

crypto.go

feat(security): add AES-256-GCM encryption for API keys at rest

2026-03-09 10:35:07 +08:00

debug.go

feat: 使用增强的任务ID生成器替换UUID

2026-01-14 17:09:19 +08:00

extraheaders_test.go

feat(models): support custom HTTP headers across all remote model calls