Edouard Vanbelle e0156a43f5 security(wopi): resolve PutFile drive_id from file, not caller's default

2026-07-17 20:43:42 +02:00

..

admin_handler.rs

refactor: apply rust formatter suggestion

2026-07-17 20:34:12 +02:00

app_password_handler.rs

feat(passwordless): pass4: add env variable to enable mgaiclink on account with password

2026-06-03 00:35:25 +02:00

auth_handler.rs

feat(account): upgrade external to internal

2026-07-14 11:10:23 +02:00

batch_handler.rs

feat(openapi): show explicitly path requiring bearerAuth

2026-05-28 00:48:20 +02:00

caldav_handler.rs

fix(caldav): fix generation of events

2026-07-15 07:55:31 +02:00

carddav_handler.rs

perf: keyset/LATERAL SQL shapes, auth+blob-cache single-flight, spool buffers, DTO interning

2026-07-17 11:10:27 +00:00

chunked_upload_handler.rs

chore(/api/uploads): maked as deprecated, use now /api/files/delta/

2026-07-17 19:01:46 +02:00

contacts_handler.rs

feat(calendar,addressbook): migrate share to authz engine

2026-07-08 01:03:25 +02:00

dedup_handler.rs

refactor(api): remove 5 dead routes + stale deprecation markers

2026-06-21 11:35:09 +02:00

delta_upload_handler.rs

perf: serve ranges from RAM cache, stream ZIPs, overlap ingest settle, O(1) chunk gate

2026-07-16 16:50:07 +00:00

device_auth_handler.rs

chore: remove all executable attributes on non bash files

2026-04-01 23:14:42 +02:00

drive_handler.rs

feat(drive): add readonly policy

2026-07-16 01:02:15 +02:00

favorites_handler.rs

security(music): ensure read permission via authz

2026-07-05 22:53:05 +02:00

file_handler.rs

perf: serve ranges from RAM cache, stream ZIPs, overlap ingest settle, O(1) chunk gate

2026-07-16 16:50:07 +00:00

folder_handler.rs

perf: serve ranges from RAM cache, stream ZIPs, overlap ingest settle, O(1) chunk gate

2026-07-16 16:50:07 +00:00

grant_handler.rs

feat(music): move playlist to authz engine

2026-07-08 01:04:03 +02:00

i18n_handler.rs

feat(i18n): add i18n on server side

2026-06-03 13:27:12 +02:00

magic_link_handler.rs

fix(magic-link): correct url to fit sveltekit

2026-07-14 03:16:27 +02:00

mod.rs

fix(webdav): remove spurious calendar_rest_handler module declaration

2026-06-25 22:44:27 +02:00

music_handler.rs

feat(openapi): show explicitly path requiring bearerAuth

2026-05-28 00:48:20 +02:00

people_handler.rs

refactor(api): remove 5 dead routes + stale deprecation markers

2026-06-21 11:35:09 +02:00

photos_handler.rs

feat(drive): prepare removal of user_id

2026-07-02 00:01:20 +02:00

recent_handler.rs

security(music): ensure read permission via authz

2026-07-05 22:53:05 +02:00

search_handler.rs

security(/api/admin): require admin by default

2026-07-17 20:20:05 +02:00

share_handler.rs

perf: serve ranges from RAM cache, stream ZIPs, overlap ingest settle, O(1) chunk gate

2026-07-16 16:50:07 +00:00

subject_group_handler.rs

security(external_user): protect unnecessary route access to external users

2026-06-03 00:32:00 +02:00

trash_handler.rs

feat(drive): add readonly policy

2026-07-16 01:02:15 +02:00

users_handler.rs

feat(api): can grant external user (via email)

2026-06-03 00:31:59 +02:00

webdav_handler.rs

Merge pull request #601 from EdouardVanbelle/security/grants

2026-07-17 13:31:03 +02:00

wopi_handler.rs

security(wopi): resolve PutFile drive_id from file, not caller's default

2026-07-17 20:43:42 +02:00