Siddharth Kumar Sah 86ba69825a feat: add permission checks and ownership scoping to user-files routes ...

Replace getAuthUser (optional auth) with requirePermission("files:own") on all
user-files routes, enforcing mandatory authentication and ownership checks.
Admin users with files:all permission bypass ownership restrictions. Returns 404
(not 403) for ownership failures to avoid leaking resource existence.

2026-04-10 21:25:30 +08:00

..

api.test.ts

test: add integration tests for stitch API endpoint

2026-04-07 21:53:42 +08:00

branding.test.ts

feat(api): add logo upload/serve/delete routes with tests

2026-03-26 01:10:51 +08:00

content-aware-resize.test.ts

test: add integration tests for content-aware resize endpoint

2026-04-07 23:36:51 +08:00

convert-formats.test.ts

feat: add HEIC/HEIF format support for input and output

2026-04-04 21:33:48 +08:00

docs.test.ts

test(api): add integration tests for API docs endpoint

2026-03-27 13:50:03 +08:00

lite-variant.test.ts

test: add integration tests for content-aware resize endpoint

2026-04-07 23:36:51 +08:00

pdf-to-image.test.ts

test: add integration tests for pdf-to-image endpoints

2026-04-10 20:56:13 +08:00

permissions.test.ts

feat: add permission checks and ownership scoping to user-files routes

2026-04-10 21:25:30 +08:00

settings-phase1.test.ts

feat(api): add tool filtering and DB-backed cleanup settings

2026-03-26 01:10:51 +08:00

teams.test.ts

feat(api): add teams CRUD routes and update auth team references

2026-03-26 01:10:51 +08:00

test-server.ts

feat: add permission checks and ownership scoping to user-files routes

2026-04-10 21:25:30 +08:00