maziggy 3887938e8f Security: add token-based auth for all media endpoints ...

Camera streams, snapshots, thumbnails, timelapse videos, photos, QR
  codes, and cover images served via <img>/<video> tags were previously
  unauthenticated because browser media elements cannot send Authorization
  headers. When auth is enabled, these endpoints are now protected by a
  reusable stream token (?token=xxx) obtained from POST
  /printers/camera/stream-token (requires CAMERA_VIEW permission).

2026-03-27 12:58:08 +01:00

..

__init__.py

Added screenshots

2025-11-28 10:23:59 +01:00

ams_history.py

Fix timestamps off by timezone offset in non-UTC containers (#504)

2026-02-24 08:18:02 +01:00

api_keys.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

archives.py

Security: add token-based auth for all media endpoints

2026-03-27 12:58:08 +01:00

auth.py

Fix stored XSS vulnerabilities and unauthenticated auth toggle

2026-03-15 15:31:49 +01:00

background_dispatch.py

Add background print dispatching + tests

2026-02-20 08:51:13 +01:00

bug_report.py

[Feature] Redesign bug report debug log capture flow

2026-03-20 14:18:24 +01:00

camera.py

Security: add token-based auth for all media endpoints

2026-03-27 12:58:08 +01:00

cloud.py

Fix cloud profiles shared across all users (#665)

2026-03-12 13:02:13 +01:00

discovery.py

Auto-detect subnet for printer discovery

2026-02-08 12:17:20 +01:00

external_links.py

Security: add token-based auth for all media endpoints

2026-03-27 12:58:08 +01:00

filaments.py

refactor(api): rename /filaments/ to /filament-catalog/ for clarity (#427)

2026-02-18 11:58:17 +01:00

firmware.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

github_backup.py

Fix safe security findings: hashlib, log injection, broad excepts

2026-02-06 11:37:59 +01:00

groups.py

Add inventory:view_assignments permission so admins can grant users

2026-03-07 09:17:26 +01:00

inventory.py

Broadcast spool assignment changes via WebSocket for cross-tab updates

2026-03-26 09:34:46 +01:00

kprofiles.py

feat: dual external spool support, AMS slot model filtering & pre-population

2026-02-15 08:04:01 +01:00

library.py

Security: add token-based auth for all media endpoints

2026-03-27 12:58:08 +01:00

local_presets.py

Add local profiles — import OrcaSlicer presets without Bambu Cloud (#310)

2026-02-09 17:00:02 +01:00

maintenance.py

[Fix] Remove incorrect "Lubricate Carbon Rods" maintenance task (#755)

2026-03-19 08:40:24 +01:00

metrics.py

feat(metrics): add bambuddy_build_info metric

2026-03-07 15:40:48 +00:00

notification_templates.py

Feature: Advanced Authentication User Email Notifications (#693)

2026-03-17 12:01:18 +01:00

notifications.py

Add notification for no spool assigned for active trays, improve usage tracker logic in edge cases (#789)

2026-03-24 11:31:32 +01:00

pending_uploads.py

Add explanatory comments to 265 empty except blocks

2026-02-06 11:58:38 +01:00

print_log.py

Security: add token-based auth for all media endpoints

2026-03-27 12:58:08 +01:00

print_queue.py

Feature: Advanced Authentication User Email Notifications (#693)

2026-03-17 12:01:18 +01:00

printers.py

Security: add token-based auth for all media endpoints

2026-03-27 12:58:08 +01:00

projects.py

[Feature] Add Total cost to Projects (#733)

2026-03-18 07:52:59 +01:00

settings.py

Feature: Admin Set Default Nav-Menu Order (#761)

2026-03-21 09:30:18 +01:00

smart_plugs.py

Revert "Feature/multiple switches per prtinter (#786)"

2026-03-23 10:11:56 +01:00

spoolbuddy.py

Add SpoolBuddy System tab with live OS stats from Raspberry Pi

2026-03-26 09:57:09 +01:00

spoolman.py

[Fix]: Update location when linking/unlinking to/from Spoolman (#669)

2026-03-11 09:38:14 +01:00

support.py

Redact printer access codes from support bundle logs

2026-03-15 08:42:17 +01:00

system.py

Fix TS error, add missing translation keys, fix fr locale, cleanup duplicated functions

2026-02-15 14:01:54 +01:00

updates.py

Fix beta updates shown when disabled (#731)

2026-03-17 13:20:25 +01:00

user_notifications.py

Fix ruff format for user_notifications and spoolman

2026-03-22 14:22:49 +01:00

users.py

Feature: Advanced Authentication User Email Notifications (#693)

2026-03-17 12:01:18 +01:00

virtual_printers.py

[Fix] X1C Virtual Printer not accepting sends (#735)

2026-03-17 16:25:31 +01:00

webhook.py

Fix safe security findings: hashlib, log injection, broad excepts

2026-02-06 11:37:59 +01:00

websocket.py

Add background print dispatching + tests

2026-02-20 08:51:13 +01:00