LangBot

mirror of https://github.com/langbot-app/LangBot.git synced 2026-08-02 01:26:07 +00:00

Files

T

dadachann 5ba5e60002 fix(security): require authentication for image file endpoint (H-2)

- Changed /api/v1/files/image from AuthType.NONE to USER_TOKEN_OR_API_KEY
- Added Permission.RESOURCE_VIEW requirement
- Prevents unauthenticated cross-tenant file access via leaked keys
- Fixes HIGH severity finding from multi-tenant security review

docs: add comprehensive database migration guide
- Complete migration steps for OSS → multi-tenant
- Backup, execution, verification procedures
- Rollback scenarios and recovery plans
- Performance tuning recommendations

2026-07-30 04:31:49 +00:00

assets/pr-2336

fix(aiocqhttp): correct listener lifecycle handling (#2336 )

2026-07-13 13:50:08 +08:00

multi-tenant

fix(security): require authentication for image file endpoint (H-2)

2026-07-30 04:31:49 +00:00

platforms

feat(platform): standalone HTTP Bot adapter (server-to-server) (#2274 )

2026-06-22 13:38:00 +08:00

review

feat(mcp): support mcp resources (#2215 )