klinsmaya/SQLBot
1
0
Fork 0
mirror of https://gh-proxy.org/https://github.com/klinsmaya/SQLBot.git synced 2026-11-08 01:06:59 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: Fix MCP oid missing validation

Browse Source
This commit is contained in:
junjun
2026-06-11 17:33:42 +08:00
parent 5b94406c3a
commit cc45f47c12
1 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/apps/mcp/mcp.py
+12 -2
View File
@@ -105,9 +105,14 @@ async def ws_list(session: SessionDep, trans: Trans, token: str):
@router.post("/mcp_ds_list", operation_id="mcp_datasource_list")
async def datasource_list(session: SessionDep, mcp_ds: McpDs):
async def datasource_list(session: SessionDep, trans: Trans, mcp_ds: McpDs):
session_user = get_user(session, mcp_ds.token)
if mcp_ds.oid:
w_list = await user_ws_options(session, session_user.id, trans)
oid_list = [item.id for item in w_list]
if int(mcp_ds.oid) not in oid_list:
raise HTTPException(status_code=400, detail="This user not in current workspace")
session_user.oid = int(mcp_ds.oid)
ds_list = get_datasource_list(session=session, user=session_user)
result = []
@@ -129,12 +134,17 @@ async def datasource_list(session: SessionDep, mcp_ds: McpDs):
@router.post("/mcp_question", operation_id="mcp_question")
async def mcp_question(session: SessionDep, chat: McpQuestion):
async def mcp_question(session: SessionDep, trans: Trans, chat: McpQuestion):
session_user = get_user(session, chat.token)
lang = chat.lang
if lang in ["zh-CN", "zh-TW", "en", "ko-KR"]:
session_user.language = lang
if chat.oid:
w_list = await user_ws_options(session, session_user.id, trans)
oid_list = [item.id for item in w_list]
if int(chat.oid) not in oid_list:
raise HTTPException(status_code=400, detail="This user not in current workspace")
session_user.oid = int(chat.oid)
ds_id: Optional[int] = None
if chat.datasource_id: