Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft: develop into master #190

Merged
merged 166 commits into from May 15, 2024
Merged

Draft: develop into master #190

merged 166 commits into from May 15, 2024

Conversation

tomlynchRNA
Copy link
Collaborator

No description provided.

tomlynchRNA and others added 30 commits April 17, 2024 12:20
…d /tools close #145

Make current session highlighted in sidebar
Make session preview list have a title and only show when >0 sessions
ref #139
Update embedding color to be yellow
Change recordsSynced -> totalRecords and set it properly in the db on webhook
Update tsconfig with more aliases
Update to use debug module for logging and have a warning for unable to fetch datasource/jobId from webhook
…ess bar similar to the existing rounded status indicator with buttonspinners
Update progress bar to remain gray when unknown total
Add total to progress bar when embedding
Set max width on progress bar
… and inserting of records into vector database
Make failure and success counts reset to 0 on new total count being known (new job)
Also fix retrieval issue by excluding problematic attributes from `OpenAIEmbeddings`'s instantiation
Add temporary refresh interval for daasources screen to get updates until socket implementation
…d same on datasource creation forms (for the auto created tool)

// Non team endpoints
server.get('/', unauthedMiddlewareChain, homeRedirect);
server.get('/login', unauthedMiddlewareChain, renderStaticPage(app, '/login'));
server.get('/register', unauthedMiddlewareChain, renderStaticPage(app, '/register'));
server.get('/verify', unauthedMiddlewareChain, renderStaticPage(app, '/verify'));
server.get('/account', authedMiddlewareChain, accountController.accountPage.bind(null, app));
server.get('/billing', authedMiddlewareChain, accountController.billingPage.bind(null, app));
server.get('/account', unauthedMiddlewareChain, setDefaultOrgAndTeam, checkSession, setSubscriptionLocals, csrfMiddleware, accountController.accountPage.bind(null, app));

Check failure

Code scanning / CodeQL

Missing rate limiting High

This route handler performs
authorization
, but is not rate-limited.
server.get('/account', authedMiddlewareChain, accountController.accountPage.bind(null, app));
server.get('/billing', authedMiddlewareChain, accountController.billingPage.bind(null, app));
server.get('/account', unauthedMiddlewareChain, setDefaultOrgAndTeam, checkSession, setSubscriptionLocals, csrfMiddleware, accountController.accountPage.bind(null, app));
server.get('/billing', unauthedMiddlewareChain, setDefaultOrgAndTeam, checkSession, setSubscriptionLocals, csrfMiddleware, accountController.billingPage.bind(null, app));

Check failure

Code scanning / CodeQL

Missing rate limiting High

This route handler performs
authorization
, but is not rate-limited.
webapp/src/router.ts Fixed Show fixed Hide fixed
server.post('/stripe-portallink', authedMiddlewareChain, stripeController.createPortalLink);
server.post('/stripe-plan', authedMiddlewareChain, stripeController.changePlanApi);
server.post('/stripe-paymentlink', unauthedMiddlewareChain, setDefaultOrgAndTeam, checkSession, setSubscriptionLocals, csrfMiddleware, stripeController.createPaymentLink);
server.post('/stripe-portallink', unauthedMiddlewareChain, setDefaultOrgAndTeam, checkSession, setSubscriptionLocals, csrfMiddleware, stripeController.createPortalLink);

Check failure

Code scanning / CodeQL

Missing rate limiting High

This route handler performs
authorization
, but is not rate-limited.
webapp/src/router.ts Fixed Show fixed Hide fixed
accountRouter.post('/register', unauthedMiddlewareChain, accountController.register);
accountRouter.post('/requestchangepassword', unauthedMiddlewareChain, accountController.requestChangePassword);
accountRouter.post('/changepassword', unauthedMiddlewareChain, accountController.changePassword);
accountRouter.post('/verify', unauthedMiddlewareChain, accountController.verifyToken);
accountRouter.post('/logout', authedMiddlewareChain, accountController.logout);
accountRouter.post('/switch', authedMiddlewareChain, accountController.switchTeam);
accountRouter.post('/logout', unauthedMiddlewareChain, setDefaultOrgAndTeam, checkSession, setSubscriptionLocals, csrfMiddleware, accountController.logout);

Check failure

Code scanning / CodeQL

Missing rate limiting High

This route handler performs
authorization
, but is not rate-limited.
accountRouter.post('/logout', authedMiddlewareChain, accountController.logout);
accountRouter.post('/switch', authedMiddlewareChain, accountController.switchTeam);
accountRouter.post('/logout', unauthedMiddlewareChain, setDefaultOrgAndTeam, checkSession, setSubscriptionLocals, csrfMiddleware, accountController.logout);
accountRouter.post('/switch', unauthedMiddlewareChain, setDefaultOrgAndTeam, checkSession, setSubscriptionLocals, csrfMiddleware, accountController.switchTeam);

Check failure

Code scanning / CodeQL

Missing rate limiting High

This route handler performs
authorization
, but is not rate-limited.
@@ -20,7 +20,7 @@
<h3 className='pl-2 font-semibold text-gray-900 dark:text-white'>{title}</h3>
{buttonText
? href
? <Link href={`/${resourceSlug}/${href}`}>
? <Link href={`/${resourceSlug}${href}`}>

Check warning

Code scanning / CodeQL

Client-side URL redirect Medium

Untrusted URL redirection depends on a
user-provided value
.
@tomlynchRNA tomlynchRNA merged commit 5a42aa5 into master May 15, 2024
2 checks passed
@tomlynchRNA tomlynchRNA deleted the develop branch May 15, 2024 01:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

5 participants