Jin Hai 844e3ea64d Go and Python: fix IDOR issue of search completions (#16864) ...

### Summary

In Go and python implementation, the dataset / KB id isn't validated if
it is accessible by this user.

---------

Signed-off-by: Jin Hai <haijin.chn@gmail.com>

2026-07-13 21:00:19 +08:00

..

chunk

Implement builtin chunk method as ingestion pipeline in GO (#16822)

2026-07-13 13:51:40 +08:00

graph

Go: refactor (#16602)

2026-07-03 17:00:43 +08:00

nlp

refactor: use slices.Contains to simplify code (#16680)

2026-07-07 11:12:38 +08:00

admin_client.go

Go: refactor and add version type (#16863)

2026-07-13 18:00:35 +08:00

agent_dbcheck.go

Port 14 upstream agent security / correctness fixes to Go canvas (#16455)

2026-06-30 16:28:48 +08:00

agent_run_e2e_test.go

feat(agent): align Go agent behavior with Python (except retrieval component) (#16225)

2026-06-22 11:58:29 +08:00

agent_sessions.go

Go: refactor UUID functions (#16695)

2026-07-07 17:22:08 +08:00

agent_test.go

fixed(go-agent): agent-publish (#16713)

2026-07-08 18:47:01 +08:00

agent.go

Go: Update response message (#16803)

2026-07-10 14:26:54 +08:00

api_token.go

Go: refactor UUID functions (#16695)

2026-07-07 17:22:08 +08:00

ask_service_test.go

fix: return call failed when LLM not available (#16518)

2026-07-01 20:10:42 +08:00

ask_service.go

Go and Python: fix IDOR issue of search completions (#16864)

2026-07-13 21:00:19 +08:00

bot_completion_history_test.go

fix: agent chat completions can not use (#16570)

2026-07-03 13:25:14 +08:00

bot_completion.go

Go: refactor UUID functions (#16695)

2026-07-07 17:22:08 +08:00

bot.go

feat[Go]: port agent attachment download, chatbot + agentbot completion/info endpoints from Python (#16405)

2026-06-29 09:45:16 +08:00

canvas_decode_test.go

feat(agent): align Go agent behavior with Python (except retrieval component) (#16225)

2026-06-22 11:58:29 +08:00

canvas_decode.go

Align Go ingestion boundaries with Python (#16647)

2026-07-05 20:43:52 +08:00

chat_channel_test.go

feat(go-api): complete chat channel API migration with tests (#16139)

2026-06-22 18:16:15 +08:00

chat_channel.go

Go: refactor UUID functions (#16695)

2026-07-07 17:22:08 +08:00

chat_delete_test.go

feat(go-api): Implement BulkDeleteChats Go API and fix ListChats (#16157)

2026-06-22 18:16:52 +08:00

chat_pipeline_test.go

fix(go-document): add document and file access checks (#16592)

2026-07-06 10:13:46 +08:00

chat_pipeline.go

GO: improve model info parsing and add model_id/tenant context to list response (#16804)

2026-07-10 13:29:01 +08:00

chat_rest_update_test.go

Go: Update response message (#16803)

2026-07-10 14:26:54 +08:00

chat_session_test.go

fix(go-document): add document and file access checks (#16592)

2026-07-06 10:13:46 +08:00

chat_session.go

Go: merge duplicate codes (#16783)

2026-07-10 11:58:32 +08:00

chat.go

Go: Update response message (#16803)

2026-07-10 14:26:54 +08:00

chunk_types_test.go

fix(go): chunk stats after chunk deletion (#16553)

2026-07-02 19:54:42 +08:00

chunk_types.go

Refactor: refactor dataflow_service.go and guard nats message re-delivery (#16826)

2026-07-13 11:08:04 +08:00

citation_test.go

feat: implement POST /api/v1/searchbots/ask — streaming RAG with citations and think-tag processing (#15825)

2026-06-09 22:48:50 +08:00

citation.go

Implement OpenAI chat completions in GO (#16177)

2026-06-18 18:07:27 +08:00

components_service_test.go

Implement builtin chunk method as ingestion pipeline in GO (#16822)

2026-07-13 13:51:40 +08:00

components_service.go

Align Go ingestion boundaries with Python (#16647)

2026-07-05 20:43:52 +08:00

connector_box_oauth_test.go

feat(go-api): Migrate Box web OAuth connector APIs to Go (#16480)

2026-06-30 18:10:36 +08:00

connector.go

Go: merge duplicate codes (#16783)

2026-07-10 11:58:32 +08:00

dataset_aggregate_tags_test.go

feat(go-api): migrate datasets tags aggregation API to Go (#16181)

2026-06-24 14:42:10 +08:00

dataset_delete_index_test.go

feat[Go] implement datasets/<dataset_id>/<index_type> DELETE (#16257)

2026-06-24 14:47:55 +08:00

dataset_document_metadata_config_test.go

feat[Go]: api datasets/<dataset_id>/documents/<document_id>/metadata/… (#15846)

2026-06-10 09:57:11 +08:00

dataset_list_tags_test.go

feat(go-api): add dataset tags endpoints (#16231)

2026-06-24 17:05:58 +08:00

dataset_rename_tag_test.go

feat(go-api): add dataset tags endpoints (#16231)

2026-06-24 17:05:58 +08:00

dataset_search_test.go

feat(go-api): add dataset search endpoint (#16304)

2026-06-25 13:32:22 +08:00

dataset_task_cleanup_test.go

feat[Go]: implement datasets/<dataset_id>/index P/G (#16153)

2026-06-18 17:57:24 +08:00

dataset_update_test.go

GO: improve model info parsing and add model_id/tenant context to list response (#16804)

2026-07-10 13:29:01 +08:00

dataset.go

Implement builtin chunk method as ingestion pipeline in GO (#16822)

2026-07-13 13:51:40 +08:00

deep_researcher.go

Fix: provider name (#16733)

2026-07-09 10:19:10 +08:00

document_test.go

Refactor: refactor dataflow_service.go and guard nats message re-delivery (#16826)

2026-07-13 11:08:04 +08:00

document_upload_helpers.go

feat(go-api): implement dataset document upload API (#16295)

2026-06-25 13:36:49 +08:00

document.go

Implement builtin chunk method as ingestion pipeline in GO (#16822)

2026-07-13 13:51:40 +08:00

enrich_metadata_test.go

feat: add EnrichChunksWithDocMetadata function to attach document metadata to chunks (#15659)

2026-06-05 11:42:23 +08:00

file2document.go

Go: refactor UUID functions (#16695)

2026-07-07 17:22:08 +08:00

file_commit.go

Go: refactor UUID functions (#16695)

2026-07-07 17:22:08 +08:00

file_test.go

Go: add more commands and GCS supports (#16741)

2026-07-08 17:49:02 +08:00

file.go

Go: merge duplicate codes (#16783)

2026-07-10 11:58:32 +08:00

generator.go

GO: improve model info parsing and add model_id/tenant context to list response (#16804)

2026-07-10 13:29:01 +08:00

ingestion_task_service_test.go

Refactor: message processing (#16852)

2026-07-13 16:32:34 +08:00

ingestion_task_service.go

Refactor: message processing (#16852)

2026-07-13 16:32:34 +08:00

ingestion_task_transition_test.go

Refactor: Refine ingestion task state transitions (#16814)

2026-07-10 22:47:51 +08:00

kb_prompt_test.go

Implement OpenAI chat completions in GO (#16177)

2026-06-18 18:07:27 +08:00

kb_prompt.go

Implement OpenAI chat completions in GO (#16177)

2026-06-18 18:07:27 +08:00

langfuse_service_test.go

feat(go-api): Langfuse API key migration behavior (#16356)

2026-06-25 19:25:55 +08:00

langfuse_service.go

feat(go-api): Langfuse API key migration behavior (#16356)

2026-06-25 19:25:55 +08:00

langfuse.go

fix(codeql): close remaining 44 CodeQL alerts post-merge (#16408)

2026-06-29 09:45:16 +08:00

llm.go

feat: migrate DELETE /api/v1/datasets/:dataset_id/documents to Go (#15577)

2026-06-03 20:55:53 +08:00

load_prompt_test.go

Refine handling of POST /api/v1/datasets/search in GO (#15583)

2026-06-08 11:49:37 +08:00

load_prompt.go

Implement builtin chunk method as ingestion pipeline in GO (#16822)

2026-07-13 13:51:40 +08:00

mcp_test.go

feat(go-api): migrate MCP server detail and download API to Go (#16113)

2026-06-18 11:09:22 +08:00

mcp.go

Go: refactor UUID functions (#16695)

2026-07-07 17:22:08 +08:00

memory_message_service_test.go

feat[Go]: implement Add messages for Go (#16375)

2026-06-26 19:21:52 +08:00

memory_message_service.go

GO: improve model info parsing and add model_id/tenant context to list response (#16804)

2026-07-10 13:29:01 +08:00

memory_message_test.go

feat[Go]: implemet api: Search/Get/Update-Messages (#16307)

2026-06-25 19:07:34 +08:00

memory.go

GO: improve model info parsing and add model_id/tenant context to list response (#16804)

2026-07-10 13:29:01 +08:00

metadata_filter_test.go

feat(go-api): add RAG retrieval to chat completions (#15739)

2026-06-10 11:07:45 +08:00

metadata_filter.go

Implement OpenAI chat completions in GO (#16177)

2026-06-18 18:07:27 +08:00

metadata.go

feat(go-api): Align document metadata batch APIs and upload_info with Python (#16269)

2026-06-24 14:52:47 +08:00

model_chat.go

[Go] Add API /api/v1/chat/recommendation and consolidate with /api/v1/searchbots/related_questions (#16500)

2026-07-01 13:17:16 +08:00

model_service_test.go

GO: improve model info parsing and add model_id/tenant context to list response (#16804)

2026-07-10 13:29:01 +08:00

model_service.go

Fix: Align part of Go provider APIs with Python APIs (#16823)

2026-07-13 11:20:02 +08:00

oauth_login.go

fix(go): add missing 'resume' chunk method for new tenants (#16660)

2026-07-06 19:21:14 +08:00

openai_chat_test.go

Implement OpenAI chat completions in GO (#16177)

2026-06-18 18:07:27 +08:00

openai_chat.go

Port agent PRs to GO - 5 (#16667)

2026-07-08 19:54:29 +08:00

plugin.go

feat[Go]: implement GET /plugin/tools (issue #15240) (#15570)

2026-06-08 11:53:19 +08:00

related_question_test.go

[Go] Add API /api/v1/chat/recommendation and consolidate with /api/v1/searchbots/related_questions (#16500)

2026-07-01 13:17:16 +08:00

related_question.go

[Go] Add API /api/v1/chat/recommendation and consolidate with /api/v1/searchbots/related_questions (#16500)

2026-07-01 13:17:16 +08:00

search_share_detail_test.go

feat(go-api): migrate searchbot share detail endpoint to go (#16124)

2026-06-22 18:17:37 +08:00

search.go

Go and Python: fix IDOR issue of search completions (#16864)

2026-07-13 21:00:19 +08:00

skill_indexer.go

Refact functions in engine in GO (#14981)

2026-05-19 17:34:59 +08:00

skill_search.go

Go: refactor UUID functions (#16695)

2026-07-07 17:22:08 +08:00

skill_space.go

Go: refactor UUID functions (#16695)

2026-07-07 17:22:08 +08:00

stats.go

feat[Go]: implement /system/stats and refactor /system/config/log (#15407)

2026-05-29 19:32:21 +08:00

system_test.go

Go: fix nats and go command (#16828)

2026-07-11 19:37:57 +08:00

system.go

Go: refactor and add version type (#16863)

2026-07-13 18:00:35 +08:00

tag.go

Implement OpenAI chat completions in GO (#16177)

2026-06-18 18:07:27 +08:00

task_publisher.go

Refactor: Refine ingestion task state transitions (#16814)

2026-07-10 22:47:51 +08:00

team_permission.go

feat(go-api): implement dataset document upload API (#16295)

2026-06-25 13:36:49 +08:00

tenant_test.go

GO: improve model info parsing and add model_id/tenant context to list response (#16804)

2026-07-10 13:29:01 +08:00

tenant.go

fix: correct model type mappings and improve system setting persistence (#16501)

2026-07-13 16:42:55 +08:00

think_tag_test.go

Implement chat completions in go (#16491)

2026-07-01 15:52:52 +08:00

think_tag.go

Fix chat thinking & Figure issue in GO (#16558)

2026-07-02 20:19:50 +08:00

toc_enhancer_test.go

Implement OpenAI chat completions in GO (#16177)

2026-06-18 18:07:27 +08:00

toc_enhancer.go

Implement OpenAI chat completions in GO (#16177)

2026-06-18 18:07:27 +08:00

user_beta_test.go

feat(go-api): migrate searchbot share detail endpoint to go (#16124)

2026-06-22 18:17:37 +08:00

user.go

Go: refactor and add version type (#16863)

2026-07-13 18:00:35 +08:00