3 Commits

Include renames

Author	SHA1	Message	Date
maziggy	3fa9ed2b91	Add authentication to 200+ API endpoints (CVE-2026-25505) ... Security fix for critical vulnerability (CVSS 9.8) where API endpoints were accessible without authentication when auth was enabled. Changes: - Add RequirePermissionIfAuthEnabled() to all unprotected route files: archives, projects, settings, api_keys, groups, cloud, github_backup, support, notifications, notification_templates, maintenance, filaments, external_links, smart_plugs, discovery, firmware, kprofiles, camera, ams_history, pending_uploads, updates, spoolman, system, print_queue, printers - Keep image-serving endpoints (thumbnails, timelapse, photos, camera streams, icons) unauthenticated since <img> tags cannot send headers - Add backend integration tests for endpoint auth enforcement - Add frontend tests for ownership-based permissions (canModify) Fixes: CVE-2026-25505	2026-02-03 08:44:07 +01:00
maziggy	83cbac04b7	- Add interactive API Browser to Settings > API Keys ... - New APIBrowser component with full OpenAPI schema integration - Fetches and parses /openapi.json automatically - Groups endpoints by API tags (printers, archives, settings, etc.) - Expandable endpoint sections with color-coded method badges - Path parameter, query parameter, and JSON body editors - Auto-populates request body with schema examples - Live API request execution with response display - Response shows status code, timing, and formatted JSON - Copy response button with clipboard fallback - Search to filter endpoints across all categories - Expand All / Collapse All buttons - Link to Swagger UI (/docs) - Two-column layout for API Keys tab - Left: API key management + webhook documentation - Right: API Browser with dedicated test key input - Parameter validation - Shows warning for missing required parameters - Validates before sending requests to avoid 422 errors - UX improvements - "Use in API Browser" button on newly created keys - Responsive layout (stacked on mobile, side-by-side on xl+)	2026-01-02 15:00:21 +01:00
maziggy	77a66ea867	Added system info page	2025-12-11 12:45:38 +01:00