NgTech-LTD/gns3-server
2
0
Fork 0
mirror of https://github.com/GNS3/gns3-server.git synced 2026-08-27 12:30:13 +03:00
Code Issues Packages Projects Releases Wiki Activity

feat: require superadmin for /reload/skills endpoint

Browse Source 
Only administrators can reload skills from the external repository.
Non-admin users receive 403 Forbidden.
This commit is contained in:
YueGuobin 2026-05-11 22:59:28 +08:00
parent ae1a444677
commit a408148073
No known key found for this signature in database
1 changed files with 11 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
gns3server/api/routes/controller/copilot.py
View File

@ -20,7 +20,8 @@ API routes for GNS3 Copilot global operations (non-project).
import logging
from fastapi import APIRouter, Depends
from fastapi import APIRouter, Depends, HTTPException, status
from gns3server import schemas
from .dependencies.authentication import get_current_active_user
log = logging.getLogger(__name__)
@ -32,13 +33,21 @@ router = APIRouter()
"/reload/skills",
dependencies=[Depends(get_current_active_user)],
)
async def reload_skills() -> dict:
async def reload_skills(current_user: schemas.User = Depends(get_current_active_user)) -> dict:
"""
Hot reload skills and prompts from the external GNS3-Skills repository.
Reloads injection skills, system prompts, and forbidden commands
from the skills repository without restarting the server.
Requires superadmin privileges.
"""
if not current_user.is_superadmin:
raise HTTPException(
status_code=status.HTTP_403_FORBIDDEN,
detail="Only administrators can reload skills",
)
try:
from gns3server.agent.gns3_copilot.skills.registry import (
reload_skills_repository,