fix: pin go directive to 1.20, add user ownership check on GetPDFTask

- Downgrade go directive in go.mod from 1.23.0 back to 1.20 to match
  Docker builder image (golang:1.20-alpine); re-run go mod tidy with
  go1.20 (via gvm) to keep go.sum consistent
- GetPDFTask now verifies callerUserID matches task.UserID to prevent
  cross-user data exposure of PDF page content

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
2026-03-31 14:52:20 +08:00
parent 9d712c921a
commit ac078a16bc
4 changed files with 8 additions and 25 deletions

2
go.mod
View File

@@ -1,6 +1,6 @@
module gitea.com/texpixel/document_ai
go 1.23.0
go 1.20
require (
github.com/alibabacloud-go/darabonba-openapi v0.2.1