bitloi ea3a5dba11 fix: validate custom model inputs (#15200) ...

### What problem does this PR solve?

Closes #15199.

The add-custom-model endpoint is routed through
`/api/v1/providers/:provider_name/instances/:instance_name/models`, but
the handler previously trusted `provider_name` and `instance_name` from
the JSON body instead of the path target. A request could therefore hit
one provider/instance URL while operating on a different body
provider/instance.

The same handler only rejected `model_types` when the slice was nil. An
empty array passed validation and reached
`ModelProviderService.AddCustomModel`, where `request.ModelTypes[0]`
could panic.

This PR makes the path provider/instance authoritative, rejects
mismatched body values, rejects missing or empty `model_types`, and adds
a service-level guard so direct service callers cannot hit the same
panic path.

### Type of change

- [x] Bug Fix (non-breaking change which fixes an issue)

2026-05-29 10:15:01 +08:00

..

agent_test.go

feat(go-api): implement GET /api/v1/agents list endpoint (issue #15328) (#15329)

2026-05-28 19:40:54 +08:00

agent.go

feat(go-api): implement GET /api/v1/agents list endpoint (issue #15328) (#15329)

2026-05-28 19:40:54 +08:00

api_token.go

Go: remove unused API route (#14028)

2026-04-10 18:00:41 +08:00

auth.go

Go: move logger to common module (#14545)

2026-05-06 10:41:58 +08:00

chat_session.go

Go: fix auth issue in hybrid mode (#14611)

2026-05-07 17:14:22 +08:00

chat.go

Go: add parameter parsing of list chats (#14026)

2026-04-10 14:33:32 +08:00

chunk.go

Implement Elasticsearch functions in GO (#15160)

2026-05-25 19:15:07 +08:00

common.go

Add rename model directory to entity to avoid name misunderstanding (#13829)

2026-03-27 19:25:18 +08:00

connector_test.go

feat[Go]: implement /api/v1/system/status GET (#15348)

2026-05-29 10:12:12 +08:00

connector.go

feat[Go]: implement /api/v1/system/status GET (#15348)

2026-05-29 10:12:12 +08:00

datasets.go

Update chunk/metadata cli (#15055)

2026-05-20 20:32:06 +08:00

document.go

Implement Elasticsearch functions in GO (#15160)

2026-05-25 19:15:07 +08:00

error.go

Go: move logger to common module (#14545)

2026-05-06 10:41:58 +08:00

file.go

Fix IDOR: Add permission checks to file ancestry endpoints (#14725)

2026-05-09 16:03:23 +08:00

kb.go

Fix(kb): enforce tenant authorization on UpdateMetadataSetting (#15268) (#15270)

2026-05-29 10:08:55 +08:00

llm.go

Fix Gitee embedding model URL error (#13553)

2026-03-12 13:13:06 +08:00

mcp.go

feat: add Go MCP server create API (#15260)

2026-05-28 16:43:21 +08:00

memory.go

Go: add file parse command (#14892)

2026-05-15 12:29:52 +08:00

providers_test.go

fix: validate custom model inputs (#15200)

2026-05-29 10:15:01 +08:00

providers.go

fix: validate custom model inputs (#15200)

2026-05-29 10:15:01 +08:00

search.go

Go: update search (#14023)

2026-04-13 15:07:04 +08:00

skill_search.go

Go: move logger to common module (#14545)

2026-05-06 10:41:58 +08:00

system.go

feat[Go]: implement /api/v1/system/status GET (#15348)

2026-05-29 10:12:12 +08:00

tenant.go

feat(go-api): implement tenant member management (issue #15294) (#15295)

2026-05-29 10:13:09 +08:00

user.go

fix: include user model settings in /user/me response (#15320)

2026-05-28 13:31:16 +08:00