opensource/dify
3
0
Fork 0
mirror of https://github.com/langgenius/dify.git synced 2026-09-24 23:22:26 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): harden self-hosted SECRET_KEY bootstrap (#36049)

Browse Source 
Co-authored-by: EndlessLucky <66432853+EndlessLucky@users.noreply.github.com>
This commit is contained in:
-LAN-
2026-05-12 05:35:24 +00:00
committed by GitHub
co-authored by EndlessLucky
parent 1a93af5cd0
commit cbedcd2882
16 changed files with 209 additions and 84 deletions
Download Patch File Download Diff File Expand all files Collapse all files
api/core/app/workflow/file_runtime.py
+1 -1
View File
@@ -128,7 +128,7 @@ class DifyWorkflowFileRuntime(WorkflowFileRuntimeProtocol):
@staticmethod
def _secret_key() -> bytes:
return dify_config.SECRET_KEY.encode() if dify_config.SECRET_KEY else b""
return dify_config.SECRET_KEY.encode()
def _sign_query(self, *, payload: str) -> dict[str, str]:
timestamp = str(int(time.time()))