Danny Avila b6ba2711f9 Merge commit from fork ... - Implemented validation for OpenAPI specifications to ensure the server URL matches the client-provided domain, preventing SSRF attacks. - Added domain extraction and validation functions to improve security checks. - Updated relevant services and routes to utilize the new validation logic, ensuring robust handling of client-provided domains against the OpenAPI spec. - Introduced comprehensive tests to validate the new security features and ensure correct behavior across various scenarios.		2025-11-11 14:14:55 -05:00
..
__tests__	🔐 fix: persist new MCP oauth tokens properly (#10439)	2025-11-10 19:51:20 -05:00
agents	Merge commit from fork	2025-11-11 14:14:55 -05:00
assistants	📧 fix: Case-Insensitive Domain Matching (#9868)	2025-09-27 21:20:19 -04:00
edit	🧹 chore: Cleanup Logger and Utility Imports (#9935)	2025-10-01 23:30:47 -04:00
files	📂 refactor: Cleanup File Filtering Logic, Improve Validation (#10414)	2025-11-10 19:05:30 -05:00
types	WIP: Update UI to match Official Style; Vision and Assistants 👷🏽 (#1190)	2023-11-16 10:42:24 -05:00
accessPermissions.js	🔧 refactor: Organize Sharing/Agent Components and Improve Type Safety	2025-08-13 16:24:20 -04:00
actions.js	🪐 feat: MCP OAuth 2.0 Discovery Support (#7924)	2025-06-17 13:50:33 -04:00
auth.js	🛜 refactor: Streamline App Config Usage (#9234)	2025-08-26 12:10:18 -04:00
balance.js	feat: Accurate Token Usage Tracking & Optional Balance (#1018)	2023-10-05 18:34:10 -04:00
banner.js	🚀 feat: Banner (#3952)	2024-09-11 09:34:25 -04:00
categories.js	🗨️ feat: Prompts (#3131)	2024-06-20 20:24:32 -04:00
config.js	🔄 refactor: MCP Registry System with Distributed Caching (#10191)	2025-10-31 15:00:21 -04:00
convos.js	🗑️ fix: Delete Shared Links on Conversation Deletion (#10396)	2025-11-06 11:44:28 -05:00
endpoints.js	🛜 refactor: Streamline App Config Usage (#9234)	2025-08-26 12:10:18 -04:00
index.js	🔐 feat: Granular Role-based Permissions + Entra ID Group Discovery (#7804)	2025-08-13 16:24:17 -04:00
keys.js	refactor: Encrypt & Expire User Provided Keys, feat: Rate Limiting (#874)	2023-09-06 10:46:27 -04:00
mcp.js	🔐 fix: persist new MCP oauth tokens properly (#10439)	2025-11-10 19:51:20 -05:00
memories.js	🛜 refactor: Streamline App Config Usage (#9234)	2025-08-26 12:10:18 -04:00
messages.js	🕵️ refactor: Optimize Message Search Performance (#9818)	2025-09-24 16:27:34 -04:00
models.js	🛠️ refactor: Model Loading and Custom Endpoint Error Handling (#1849)	2024-02-20 12:57:58 -05:00
oauth.js	🔒 fix: Email Domain Validation Order and Coverage (#9566)	2025-09-10 23:13:39 -04:00
plugins.js	🛜 refactor: Streamline App Config Usage (#9234)	2025-08-26 12:10:18 -04:00
presets.js	🧹 chore: Cleanup Logger and Utility Imports (#9935)	2025-10-01 23:30:47 -04:00
prompts.js	🗨️ fix: Prompts Pagination (#9385)	2025-08-30 15:58:49 -04:00
prompts.test.js	🗨️ fix: Prompts Pagination (#9385)	2025-08-30 15:58:49 -04:00
roles.js	🛒 feat: Implement Marketplace Permissions Management UI	2025-08-13 16:24:24 -04:00
search.js	🧹 chore: Cleanup Logger and Utility Imports (#9935)	2025-10-01 23:30:47 -04:00
share.js	🔗 fix: Add branch-specific shared links (targetMessageId) (#10016)	2025-10-10 08:42:05 -04:00
static.js	🧹 chore: Cleanup Logger and Utility Imports (#9935)	2025-10-01 23:30:47 -04:00
tags.js	🔒 fix: Agents Config/Permission Checks after Streamline Change (#8089)	2025-06-26 18:53:05 -04:00
tokenizer.js	🧹 chore: Cleanup Logger and Utility Imports (#9935)	2025-10-01 23:30:47 -04:00
user.js	🛜 refactor: Streamline App Config Usage (#9234)	2025-08-26 12:10:18 -04:00