maziggy a903816b8a fix(slicer): token-based auth for Open in Slicer downloads (#433) ...

Slicer protocol handlers (bambustudio://, orcaslicer://) launch the
slicer app which fetches files via HTTP but cannot send auth headers.
The global auth middleware returned 401, causing "importing failed."

Add short-lived, single-use download tokens: the frontend fetches a
token via authenticated POST, then builds a /dl/{token}/{filename} URL
the slicer can access without auth headers. Tokens are validated
server-side (5-min expiry, single-use). Applies to archive files,
source 3MFs, and library files.

Also fix platform-specific URL formats to match slicer source code:
- macOS: bambustudioopen:// with encodeURIComponent
- Windows/Linux: bambustudio://open?file= (was wrongly using macOS scheme on Linux)
- OrcaSlicer: orcaslicer://open?file=

2026-02-18 16:37:35 +01:00

..

app

fix(slicer): token-based auth for Open in Slicer downloads (#433)

2026-02-18 16:37:35 +01:00

tests

refactor(api): rename /filaments/ to /filament-catalog/ for clarity (#427)

2026-02-18 11:58:17 +01:00

__init__.py

…