next-ai-draw-io

i/next-ai-draw-io

Fork 0

mirror of https://github.com/DayuanJiang/next-ai-draw-io.git synced 2026-10-04 16:57:48 +08:00

Commit Graph

Author	SHA1	Message	Date
dayuan.jiang	528b6e54c8	fix(api): require access codes and limit sizes on helper routes - Shared checkAccessCode for validate-diagram, validate-model, parse-url, verify-access-code - parse-url: 5 MB streamed body limit; validate-diagram: 5 MB image limit - validate-model refuses redirects when private URLs are blocked - Admin settings state shared across module instances via globalThis - Server model ids: unique slugs (non-ASCII names encoded), duplicates rejected - Panel Bedrock credentials stored as ADMIN_AWS_* so the DynamoDB client keeps its own - Locale redirect keeps basePath and query; EdgeOne function drops open CORS and checks the access code - Providers payload reports whether .env sets a default model	2026-10-03 17:45:41 +09:00
Dayuan Jiang	46567cb0b8	feat: verify access code with server before saving (#128 )	2025-12-07 00:21:59 +09:00

Author

SHA1

Message

Date

dayuan.jiang

528b6e54c8

fix(api): require access codes and limit sizes on helper routes

- Shared checkAccessCode for validate-diagram, validate-model, parse-url, verify-access-code
- parse-url: 5 MB streamed body limit; validate-diagram: 5 MB image limit
- validate-model refuses redirects when private URLs are blocked
- Admin settings state shared across module instances via globalThis
- Server model ids: unique slugs (non-ASCII names encoded), duplicates rejected
- Panel Bedrock credentials stored as ADMIN_AWS_* so the DynamoDB client keeps its own
- Locale redirect keeps basePath and query; EdgeOne function drops open CORS and checks the access code
- Providers payload reports whether .env sets a default model

2026-10-03 17:45:41 +09:00

Dayuan Jiang

46567cb0b8

feat: verify access code with server before saving (#128 )

2025-12-07 00:21:59 +09:00