From 17de4e14ed51115a92be12cd929d33b98de2899b Mon Sep 17 00:00:00 2001 From: Max Date: Sat, 8 Nov 2025 11:43:43 +0800 Subject: [PATCH] Refactor assistant route handling to apply OAuth guard globally - Moved the OAuth guard application from a specific assistants group to the main router group, simplifying route management. - Updated assistant CRUD and action endpoints to directly use the main group, ensuring consistent access control across all assistant-related routes. --- openapi/agent/agent.go | 17 ++++++++--------- 1 file changed, 8 insertions(+), 9 deletions(-) diff --git a/openapi/agent/agent.go b/openapi/agent/agent.go index 9e89bf62..defae22f 100644 --- a/openapi/agent/agent.go +++ b/openapi/agent/agent.go @@ -13,17 +13,16 @@ func Attach(group *gin.RouterGroup, oauth types.OAuth) { // Get the Agent instance n := agent.GetAgent() - // Create assistants group with OAuth guard - assistants := group.Group("/assistants") - assistants.Use(oauth.Guard) + // Apply OAuth guard to all routes + group.Use(oauth.Guard) // Assistant CRUD - Standard REST endpoints - assistants.GET("/", ListAssistants) // GET /assistants - List assistants - assistants.POST("/", n.HandleAssistantSave) // POST /assistants - Create/Update assistant - assistants.GET("/tags", ListAssistantTags) // GET /assistants/tags - Get all assistant tags with permission filtering - assistants.GET("/:id", n.HandleAssistantDetail) // GET /assistants/:id - Get assistant details - assistants.DELETE("/:id", n.HandleAssistantDelete) // DELETE /assistants/:id - Delete assistant + group.GET("/assistants", ListAssistants) // GET /assistants - List assistants + group.POST("/assistants", n.HandleAssistantSave) // POST /assistants - Create/Update assistant + group.GET("/assistants/tags", ListAssistantTags) // GET /assistants/tags - Get all assistant tags with permission filtering + group.GET("/assistants/:id", n.HandleAssistantDetail) // GET /assistants/:id - Get assistant details + group.DELETE("/assistants/:id", n.HandleAssistantDelete) // DELETE /assistants/:id - Delete assistant // Assistant Actions - assistants.POST("/:id/call", n.HandleAssistantCall) // POST /assistants/:id/call - Execute assistant API + group.POST("/assistants/:id/call", n.HandleAssistantCall) // POST /assistants/:id/call - Execute assistant API }