Files
xiaoxia-saas/apps/api
xiaoxia 855220fae5
Deploy / Staging E2E Tests (push) Has been skipped
Deploy / Build Production Runtime Images (push) Has been skipped
Deploy / Deploy Production (push) Has been skipped
Deploy / Production Browser E2E (push) Has been skipped
Deploy / Deploy Staging (push) Failing after 124h22m3s
CI/CD Pipeline / Frontend Lint (push) Failing after 124h22m11s
CI/CD Pipeline / Validate Code Quality And Tests (push) Failing after 124h22m11s
fix(api): 项目详情接口增加权限校验 + 新增删除项目接口
1. GET /projects/{id} 增加权限校验:非项目所有者且未被共享时返回403
   (此前任何登录用户都可查看任意项目,存在越权访问漏洞)

2. 新增 DELETE /projects/{id} 接口:仅项目所有者可删除,返回403/404
   - 新增 DeleteProjectUseCase(application层)
   - 仓储层 delete 方法已存在,直接复用
   - 与素材库等模块的权限校验模式保持一致
2026-07-04 08:32:15 +08:00
..
2026-06-15 15:17:40 +08:00
2026-06-15 15:17:40 +08:00
2026-06-15 15:17:40 +08:00

xiaoxia-saas API

结构

  • app/core/:配置与基础能力
  • app/api/:路由组织
  • app/schemas/:请求响应模型
  • app/dependencies.py:依赖注入入口
  • main.pyFastAPI 启动入口

当前可用接口

  • GET /api/health
  • GET /api/projects?workspace_id=...
  • POST /api/projects