2 Commits

Include renames

Author	SHA1	Message	Date
maziggy	3fa9ed2b91	Add authentication to 200+ API endpoints (CVE-2026-25505) ... Security fix for critical vulnerability (CVSS 9.8) where API endpoints were accessible without authentication when auth was enabled. Changes: - Add RequirePermissionIfAuthEnabled() to all unprotected route files: archives, projects, settings, api_keys, groups, cloud, github_backup, support, notifications, notification_templates, maintenance, filaments, external_links, smart_plugs, discovery, firmware, kprofiles, camera, ams_history, pending_uploads, updates, spoolman, system, print_queue, printers - Keep image-serving endpoints (thumbnails, timelapse, photos, camera streams, icons) unauthenticated since <img> tags cannot send headers - Add backend integration tests for endpoint auth enforcement - Add frontend tests for ownership-based permissions (canModify) Fixes: CVE-2026-25505	2026-02-03 08:44:07 +01:00
maziggy	6fb71de6a2	Add firmware update helper for LAN-only printers ... Enables checking and uploading firmware updates for printers operating in LAN-only mode without Bambu Cloud connectivity. Features: - Automatic firmware version checking against Bambu Lab servers - Orange "Update" badge on printer cards when updates available - Firmware update modal with version info and release notes - One-click firmware upload to printer SD card via FTP - Real-time upload progress (actual bytes transferred) - Step-by-step instructions for triggering update from printer - Local firmware caching for faster re-uploads - Supports all Bambu Lab printer models New files: - backend/app/services/firmware_check.py - Version checking service - backend/app/services/firmware_update.py - Upload orchestration - backend/app/api/routes/firmware.py - REST API endpoints Also includes: - FTP upload progress callback support - 10-minute upload timeout protection - Firmware cache directory in .gitignore	2026-01-04 18:41:24 +01:00