855220fae5
Deploy / Staging E2E Tests (push) Has been skipped
Deploy / Build Production Runtime Images (push) Has been skipped
Deploy / Deploy Production (push) Has been skipped
Deploy / Production Browser E2E (push) Has been skipped
Deploy / Deploy Staging (push) Failing after 124h22m3s
CI/CD Pipeline / Frontend Lint (push) Failing after 124h22m11s
CI/CD Pipeline / Validate Code Quality And Tests (push) Failing after 124h22m11s
1. GET /projects/{id} 增加权限校验:非项目所有者且未被共享时返回403
(此前任何登录用户都可查看任意项目,存在越权访问漏洞)
2. 新增 DELETE /projects/{id} 接口:仅项目所有者可删除,返回403/404
- 新增 DeleteProjectUseCase(application层)
- 仓储层 delete 方法已存在,直接复用
- 与素材库等模块的权限校验模式保持一致
xiaoxia-saas API
结构
app/core/:配置与基础能力app/api/:路由组织app/schemas/:请求响应模型app/dependencies.py:依赖注入入口main.py:FastAPI 启动入口
当前可用接口
GET /api/healthGET /api/projects?workspace_id=...POST /api/projects