feat(plugin): report deferred response delivery failures (#2287 )

* feat(plugin): report deferred response delivery failures * style: fix ruff format issues in plugin_diagnostics and test_handler_actions --------- Co-authored-by: RockChinQ <45992437+RockChinQ@users.noreply.github.com>
fix(api): guard /set-password with allow_modify_login_info (#2288 )
2026-06-26 23:44:19 +00:00 · 2026-06-26 23:45:10 +08:00 · 2026-06-26 16:35:50 +08:00
1 changed files with 7 additions and 0 deletions
@@ -195,6 +195,13 @@ class UserRouterGroup(group.RouterGroup):
        @self.route('/set-password', methods=['POST'], auth_type=group.AuthType.USER_TOKEN)
        async def _(user_email: str) -> str:
            """Set password for Space account (first time) or change password"""
+            # Check if modifying login info is allowed
+            allow_modify_login_info = self.ap.instance_config.data.get('system', {}).get(
+                'allow_modify_login_info', True
+            )
+            if not allow_modify_login_info:
+                return self.http_status(403, -1, 'Modifying login info is disabled')
+
            json_data = await quart.request.json
            new_password = json_data.get('new_password')
            current_password = json_data.get('current_password')