Fix/iframe window no open

.github/scripts/check-file-size.sh

@@ -26,6 +26,7 @@ EXCLUDE_PATTERNS=(
   'packages/arch/bot-api/src/auto-generate/**'
   'apps/bot-op/src/services/bam-auto-generate/**'
   'apps/prompt-platform/src/services/auto-generate/**'
+  'backend/api/model/app/developer_api/**'
   "**/lib/**"
   "**/.*/**"
   '**/__tests__/**'

.prettierrc.js

@@ -1,3 +1,19 @@
+/*
+ * Copyright 2025 coze-dev Authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
 // Do not modify this file
 module.exports = {
   ...require('./frontend/config/eslint-config/.prettierrc.js'),

backend/Dockerfile

@@ -1,14 +1,23 @@
 # Stage 1: Builder for Go application
-FROM golang:1.24-alpine AS builder
+FROM golang:1.24.13-alpine3.23 AS builder
+
+RUN sed -i 's|https://dl-cdn.alpinelinux.org/alpine|https://mirrors.tuna.tsinghua.edu.cn/alpine|g' /etc/apk/repositories
 
 WORKDIR /app
 
 # Install build dependencies for Go
 RUN apk add --no-cache git gcc libc-dev
 
+# Use a configurable Go module proxy to avoid timeouts
+# when the builder cannot reach proxy.golang.org reliably.
+ARG GOPROXY=https://goproxy.cn,direct
+ARG GOSUMDB=sum.golang.google.cn
+ENV GOPROXY=${GOPROXY}
+ENV GOSUMDB=${GOSUMDB}
+
 # Copy go.mod and go.sum first to leverage Docker cache
 COPY backend/go.mod backend/go.sum ./
-RUN go mod download
+RUN go env -w GOPROXY="${GOPROXY}" GOSUMDB="${GOSUMDB}" && go mod download
 
 # Copy the entire backend source code
 COPY backend/ ./
@@ -18,7 +27,9 @@ RUN go build -ldflags="-s -w" -o /app/opencoze main.go
 
 
 # Stage 2: Final image
-FROM alpine:3.22.0
+FROM alpine:3.22
+
+RUN sed -i 's|https://dl-cdn.alpinelinux.org/alpine|https://mirrors.tuna.tsinghua.edu.cn/alpine|g' /etc/apk/repositories
 
 WORKDIR /app
 
@@ -36,7 +47,8 @@ RUN apk add --no-cache --virtual .python-build-deps build-base py3-pip git && \
     . /app/.venv/bin/activate && \
     # If you want to use other third-party libraries, you can install them here.
     pip install urllib3==1.26.16 && \
-    pip install --no-cache-dir h11==0.16.0 httpx==0.28.1 pillow==11.2.1 pdfplumber==0.11.7 python-docx==1.2.0 numpy==2.3.1 && \
+    # pip install --no-cache-dir h11==0.16.0 httpx==0.28.1 pillow==11.2.1 pdfplumber==0.11.7 python-docx==1.2.0 numpy==2.3.1 && \
+    pip install --no-cache-dir -i https://pypi.tuna.tsinghua.edu.cn/simple --trusted-host pypi.tuna.tsinghua.edu.cn h11==0.16.0 httpx==0.28.1 pillow==11.2.1 pdfplumber==0.11.7 python-docx==1.2.0 numpy==2.3.1 && \
     # Deactivate (optional, as RUN is a new shell)
     # deactivate && \
     # Remove build dependencies

backend/api/middleware/openapi_auth.go

@@ -54,10 +54,15 @@ var needAuthPath = map[string]bool{
 	"/v1/conversation/retrieve":           true,
 	"/v3/chat/retrieve":                   true,
 	"/v3/chat/message/list":               true,
+	"/open_api/knowledge/detail":          true,
 	"/open_api/knowledge/document/delete": true,
 	"/open_api/knowledge/document/create": true,
 	"/open_api/knowledge/document/update": true,
 	"/open_api/knowledge/document/list":   true,
+	"/open_api/knowledge/slice/list":      true,
+	"/open_api/knowledge/photo/list":      true,
+	"/open_api/knowledge/photo/detail":    true,
+	"/open_api/workflow/sign_image_url":   true,
 	"/v1/datasets":                        true,
 }
 

backend/api/middleware/openapi_auth_test.go

@@ -0,0 +1,61 @@
+package middleware
+
+import (
+	"testing"
+
+	"github.com/cloudwego/hertz/pkg/app"
+	"github.com/stretchr/testify/assert"
+)
+
+func TestIsNeedOpenapiAuthForKnowledgeRoutes(t *testing.T) {
+	t.Parallel()
+
+	testCases := []struct {
+		name string
+		path string
+		want bool
+	}{
+		{
+			name: "existing document list openapi route",
+			path: "/open_api/knowledge/document/list",
+			want: true,
+		},
+		{
+			name: "dataset detail openapi route",
+			path: "/open_api/knowledge/detail",
+			want: true,
+		},
+		{
+			name: "slice list openapi route",
+			path: "/open_api/knowledge/slice/list",
+			want: true,
+		},
+		{
+			name: "photo list openapi route",
+			path: "/open_api/knowledge/photo/list",
+			want: true,
+		},
+		{
+			name: "photo detail openapi route",
+			path: "/open_api/knowledge/photo/detail",
+			want: true,
+		},
+		{
+			name: "web knowledge route still uses session auth",
+			path: "/api/knowledge/detail",
+			want: false,
+		},
+	}
+
+	for _, tc := range testCases {
+		tc := tc
+		t.Run(tc.name, func(t *testing.T) {
+			t.Parallel()
+
+			var c app.RequestContext
+			c.Request.SetRequestURI(tc.path)
+
+			assert.Equal(t, tc.want, isNeedOpenapiAuth(&c))
+		})
+	}
+}