Commit graph

4 commits

Author SHA1 Message Date
Anish Sarkar
9503d4ade1 chore: ran linting 2026-03-11 12:30:20 +05:30
CREDO23
cf8f70da2b fix auth bypass on picker endpoint, async safety, and picker error handling
- Add check_permission to drive-picker-token endpoint (IDOR fix)
- Use get_composio_service singleton + asyncio.to_thread to avoid blocking the event loop
- Sanitize error detail in 500 response to prevent internal info leakage
- Dispose picker on unmount to prevent orphaned overlay
- Surface error state on Google Picker Action.ERROR instead of silently closing
2026-03-10 23:21:35 +02:00
CREDO23
3bda6c1679 revert Composio Drive to folder tree, harden Picker for native Drive 2026-03-10 23:06:33 +02:00
CREDO23
a42a5a936c add Google Picker hook and API types 2026-03-10 20:21:48 +02:00