Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

2.5.0 #751

Merged
merged 46 commits into from
Oct 24, 2022
Merged

2.5.0 #751

merged 46 commits into from
Oct 24, 2022

Conversation

wklken
Copy link
Collaborator

@wklken wklken commented Oct 24, 2022

REFACTOR

  • 全新架构,去除 SDK 层, 所有接口代理到后台服务
  • 解耦 SaaS API 与 Open API(esb api)
  • 重构产品所有功能相关代码
  • 重构 SaaS API 相关权限控制逻辑
  • 去除冗余代码

OPTIMIZATION

  • 性能优化: 优化数据库索引/增加缓存/减少接口 SQL 查询量

v_yutyi and others added 30 commits September 19, 2022 15:43
- 重构: saas 层所有接口后移
- 性能优化: profiles/departments等主体接口
- bugfix: excel导入等
* refactor(api/v2): performance
…693)

* refactor(remove): unused codes
* refactor(api/login): move into api/login dir
fix(api/permission): 权限中心无权限提示
test(makefile): add makefile support make test
chore(release): update release log
* feat(api/web): add audit log for create/update/delete
* fix(local/import): report fail record during import from excel
* fix(saas/bugs): fix bugs in the testing
* fix(api/ldap): address from ldap://localhost:389 to ldap://127.0.0.1:389
* feat(audit/login): export
* docs(api/v2): comment the used api urls
* feat(excel/operation): import and export
* fix(profile/patch): update lost the extras field
* fix(audit/log): decorator make the drf fail
* feat(department/property): add cache in memory for has_children and full_name
* perf(home/tree): api performance, use raw json instead serializer
* fix(cr/comment): change locmem cache key prefix to bk_user
* fix(api/web): permission return False should raise exception for building iam application

* fix(frontend/search_user): update resp.data.data to resp.data.results
s.save()

except Exception as e:
print("update local password settings fail: key={}, error={}".format(x["key"], e))

Check failure

Code scanning / CodeQL

Clear-text logging of sensitive information

[Sensitive data (password)](1) is logged here.
logger.exception("do proxy error")
return HttpResponse(
status=status.HTTP_500_INTERNAL_SERVER_ERROR,
content=str(e),

Check warning

Code scanning / CodeQL

Information exposure through an exception

[Stack trace information](1) flows to this location and may be exposed to an external user.
@wklken wklken merged commit b86019d into master Oct 24, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants