3 Commits

Author	SHA1	Message	Date
Edouard Vanbelle	3362e277ab	feat(authz): check permission on read handlers + check create permission on folder	2026-05-21 20:30:53 +02:00
Edouard Vanbelle	dfb082fdf4	refactor(server): file_management_service: move all method without owner check into private, add folder_ports	2026-05-20 15:39:53 +02:00
abnvle	d15d7b8f8e	feat(share): public folder browsing API + range support + zip ... Five new public endpoints under /api/s/{token}/...: GET /contents GET /contents/{folder_id} GET /file/{file_id} GET /zip GET /zip/{folder_id} All honour the unlock cookie from /verify, so password-protected folder shares work end-to-end. Folder/file IDs are validated against the share subtree via a single ltree containment query (O(log N) on the existing GiST index). Out-of-scope IDs return 404. download_shared_file refactored to a Range/304/206/416-aware serve_share_file helper, shared with the new /file/{file_id} endpoint. content_disposition extracted from FileHandler so RFC 5987 formatting is identical across auth and share download paths.	2026-05-05 22:41:55 +02:00