mirror of
https://github.com/bytedance/deer-flow.git
synced 2026-04-25 19:28:23 +00:00
27b66d6753
Introduce an always-on auth layer with auto-created admin on first boot, multi-tenant isolation for threads/stores, and a full setup/login flow. Backend - JWT access tokens with `ver` field for stale-token rejection; bump on password/email change - Password hashing, HttpOnly+Secure cookies (Secure derived from request scheme at runtime) - CSRF middleware covering both REST and LangGraph routes - IP-based login rate limiting (5 attempts / 5-min lockout) with bounded dict growth and X-Forwarded-For bypass fix - Multi-worker-safe admin auto-creation (single DB write, WAL once) - needs_setup + token_version on User model; SQLite schema migration - Thread/store isolation by owner; orphan thread migration on first admin registration - thread_id validated as UUID to prevent log injection - CLI tool to reset admin password - Decorator-based authz module extracted from auth core Frontend - Login and setup pages with SSR guard for needs_setup flow - Account settings page (change password / email) - AuthProvider + route guards; skips redirect when no users registered - i18n (en-US / zh-CN) for auth surfaces - Typed auth API client; parseAuthError unwraps FastAPI detail envelope Infra & tooling - Unified `serve.sh` with gateway mode + auto dep install - Public PyPI uv.toml pin for CI compatibility - Regenerated uv.lock with public index Tests - HTTP vs HTTPS cookie security tests - Auth middleware, rate limiter, CSRF, setup flow coverage
115 lines
3.6 KiB
JSON
115 lines
3.6 KiB
JSON
{
|
|
"name": "deer-flow-frontend",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"type": "module",
|
|
"scripts": {
|
|
"demo:save": "node scripts/save-demo.js",
|
|
"build": "next build",
|
|
"check": "eslint . --ext .ts,.tsx && tsc --noEmit",
|
|
"dev": "next dev --turbo",
|
|
"format": "prettier --check .",
|
|
"format:write": "prettier --write .",
|
|
"lint": "eslint . --ext .ts,.tsx",
|
|
"lint:fix": "eslint . --ext .ts,.tsx --fix",
|
|
"preview": "next build && next start",
|
|
"start": "next start",
|
|
"typecheck": "tsc --noEmit"
|
|
},
|
|
"dependencies": {
|
|
"@codemirror/lang-css": "^6.3.1",
|
|
"@codemirror/lang-html": "^6.4.11",
|
|
"@codemirror/lang-javascript": "^6.2.4",
|
|
"@codemirror/lang-json": "^6.0.2",
|
|
"@codemirror/lang-markdown": "^6.5.0",
|
|
"@codemirror/lang-python": "^6.2.1",
|
|
"@codemirror/language-data": "^6.5.2",
|
|
"@langchain/core": "^1.1.15",
|
|
"@langchain/langgraph-sdk": "^1.5.3",
|
|
"@radix-ui/react-avatar": "^1.1.11",
|
|
"@radix-ui/react-collapsible": "^1.1.12",
|
|
"@radix-ui/react-dialog": "^1.1.15",
|
|
"@radix-ui/react-dropdown-menu": "^2.1.16",
|
|
"@radix-ui/react-hover-card": "^1.1.15",
|
|
"@radix-ui/react-icons": "^1.3.2",
|
|
"@radix-ui/react-progress": "^1.1.8",
|
|
"@radix-ui/react-scroll-area": "^1.2.10",
|
|
"@radix-ui/react-select": "^2.2.6",
|
|
"@radix-ui/react-separator": "^1.1.8",
|
|
"@radix-ui/react-slot": "^1.2.4",
|
|
"@radix-ui/react-switch": "^1.2.6",
|
|
"@radix-ui/react-tabs": "^1.1.13",
|
|
"@radix-ui/react-toggle": "^1.1.10",
|
|
"@radix-ui/react-toggle-group": "^1.1.11",
|
|
"@radix-ui/react-tooltip": "^1.2.8",
|
|
"@radix-ui/react-use-controllable-state": "^1.2.2",
|
|
"@t3-oss/env-nextjs": "^0.12.0",
|
|
"@tanstack/react-query": "^5.90.17",
|
|
"@types/hast": "^3.0.4",
|
|
"@uiw/codemirror-theme-basic": "^4.25.4",
|
|
"@uiw/codemirror-theme-monokai": "^4.25.4",
|
|
"@uiw/react-codemirror": "^4.25.4",
|
|
"@xyflow/react": "^12.10.0",
|
|
"ai": "^6.0.33",
|
|
"best-effort-json-parser": "^1.2.1",
|
|
"better-auth": "^1.3",
|
|
"canvas-confetti": "^1.9.4",
|
|
"class-variance-authority": "^0.7.1",
|
|
"clsx": "^2.1.1",
|
|
"cmdk": "^1.1.1",
|
|
"codemirror": "^6.0.2",
|
|
"date-fns": "^4.1.0",
|
|
"dotenv": "^17.2.3",
|
|
"embla-carousel-react": "^8.6.0",
|
|
"gsap": "^3.13.0",
|
|
"hast": "^1.0.0",
|
|
"katex": "^0.16.28",
|
|
"lucide-react": "^0.562.0",
|
|
"motion": "^12.26.2",
|
|
"nanoid": "^5.1.6",
|
|
"next": "^16.1.7",
|
|
"next-themes": "^0.4.6",
|
|
"nextra": "^4.6.1",
|
|
"nextra-theme-docs": "^4.6.1",
|
|
"nuxt-og-image": "^5.1.13",
|
|
"ogl": "^1.0.11",
|
|
"react": "^19.0.0",
|
|
"react-dom": "^19.0.0",
|
|
"react-resizable-panels": "^4.4.1",
|
|
"rehype-katex": "^7.0.1",
|
|
"rehype-raw": "^7.0.0",
|
|
"remark-gfm": "^4.0.1",
|
|
"remark-math": "^6.0.0",
|
|
"shiki": "3.15.0",
|
|
"sonner": "^2.0.7",
|
|
"streamdown": "1.4.0",
|
|
"tailwind-merge": "^3.4.0",
|
|
"tokenlens": "^1.3.1",
|
|
"unist-util-visit": "^5.0.0",
|
|
"use-stick-to-bottom": "^1.1.1",
|
|
"uuid": "^13.0.0",
|
|
"zod": "^3.24.2"
|
|
},
|
|
"devDependencies": {
|
|
"@eslint/eslintrc": "^3.3.1",
|
|
"@tailwindcss/postcss": "^4.0.15",
|
|
"@types/gsap": "^3.0.0",
|
|
"@types/node": "^20.14.10",
|
|
"@types/react": "^19.0.0",
|
|
"@types/react-dom": "^19.0.0",
|
|
"eslint": "^9.23.0",
|
|
"eslint-config-next": "^15.2.3",
|
|
"postcss": "^8.5.3",
|
|
"prettier": "^3.5.3",
|
|
"prettier-plugin-tailwindcss": "^0.6.11",
|
|
"tailwindcss": "^4.0.15",
|
|
"tw-animate-css": "^1.4.0",
|
|
"typescript": "^5.8.2",
|
|
"typescript-eslint": "^8.27.0"
|
|
},
|
|
"ct3aMetadata": {
|
|
"initVersion": "7.40.0"
|
|
},
|
|
"packageManager": "pnpm@10.26.2"
|
|
}
|