Commit Graph
94 Commits
Author SHA1 Message Date
James Smith 6f7c13b364 enforce model permissions on bulk edit and file create/convert actions 2026-02-26 12:17:11 +00:00
James Smith bf9840b290 add rate limit for model file upload 2025-11-26 17:45:00 +00:00
James Smith 04b42c0b1e pass record to deserializers to check permissions 2025-11-25 15:54:09 +00:00
James Smith 8318030266 pass current user to form and API deserializers 2025-11-25 13:45:14 +00:00
James Smith 1e6e5c4534 Add another layer of path sanitization with zaru 2025-11-25 12:12:21 +00:00
James Smith fabb5d0dc6 Sanitize upload filenames to prevent path traversal 2025-11-25 12:09:12 +00:00
James Smith 28999232c1 Change signed download URLs to end with original filename 2025-11-17 21:46:51 +00:00
James Smith 34e43eb68b fix file upload tests 2025-11-04 00:50:06 +00:00
James Smith 713075eb96 make send_file_content usable elsewhere 2025-09-23 13:11:23 +01:00
James Smith a2c39ac5bf replace deprecated unprocessable_entity 2025-08-21 20:05:17 +01:00
James Smith 83194e10e2 serve file derivatives with param 2025-07-22 13:08:06 +01:00
James Smith c03f113cfe remove client-provided size and type from upload APIs, not required any more 2025-06-26 10:37:41 +01:00
James Smith 94dfede504 Add API for file upload into existing model 2025-06-25 17:15:12 +01:00
James Smith 726b08748c move upload params into a form deserializer 2025-06-25 17:15:11 +01:00
James Smith cb86a1e40e Change from JSON to normal form encoded params for uploading 2025-06-25 17:15:11 +01:00
James Smith a391475355 set meta tags on file pages 2025-06-20 14:27:50 +01:00
James Smith c1b12da48c fix failure http codes across various controllers 2025-06-12 12:00:56 +01:00
James Smith 4cc4b1b2bf force request format to lowercase if we're looking up by filename 2025-06-05 18:04:54 +01:00
James Smith dde3ec998a remove restrictive scope on signed links, it shouldn't be there 2025-05-22 13:21:34 +01:00
James Smith 3319d44819 enforce policy_scopes on ModelFiles 2025-05-21 17:23:53 +01:00
James Smith c6e824cf37 add editing for previewable flag 2025-05-20 12:28:10 +01:00
James Smith 4a1e99024e change route param to id for consistency of matching 2025-05-14 22:49:26 +01:00
James Smith 52776887a7 Allow requesting files by their original filename
Allows links between files, like texture loading from glTF
2025-05-14 14:32:28 +01:00
James Smith 885253cf3f Remove no longer needed allow_api_access method 2025-05-02 15:55:40 +01:00
James Smith 056a6499cf add model and modelfile form deserializers 2025-04-12 17:04:46 +01:00
James Smith 917276b474 add patch endpoint for files 2025-04-12 00:03:49 +01:00
James Smith 40b89f5116 delete APIs for collections, files, and models 2025-04-11 13:12:09 +01:00
James Smith 71349674de Change API to use vendor-specific content type, including version 2025-04-11 12:14:28 +01:00
James Smith c07541ce4d Support public scope, where there is no authenticated resource owner 2025-04-10 13:48:21 +01:00
James Smith 9196e9aa18 refactor API auth to allow per-action setting of scope 2025-04-10 13:31:07 +01:00
James Smith c4ce087b02 rename convert_to! method to convert_later 2025-04-02 14:30:24 +01:00
James Smith c8411e48a6 add API response for individual file 2025-03-20 15:09:56 +00:00
James Smith 4d30a74abd add method to detect if a signed ID is being used 2025-03-19 22:02:29 +00:00
James Smith e87251f754 filter special files out of UI but use them everywhere else 2025-03-18 12:49:14 +00:00
James Smith caba69c6dd remove files when required 2025-03-17 17:22:17 +00:00
James Smith a1c5793196 Add support for responding to signed download URLs 2025-03-14 15:28:24 +00:00
James Smith 4d4b577569 Change Pundit authorization tests in requests specs to check proper return codes 2025-03-10 15:41:25 +00:00
James Smith b89b1a809b fix frame-ancestors CSP for embed mode 2025-03-07 15:24:39 +00:00
James Smith fa1ee99e8e Add embedded mode for model files and use in oembed response 2025-03-07 14:38:37 +00:00
James Smith 4e0d8e8861 remove redundant joins 2025-03-05 15:09:39 +00:00
James Smith 1e7ee2a793 rename files in bulk 2025-01-17 15:21:19 +00:00
James Smith 4fef8c3a9f Add filename editing for model parts 2025-01-16 16:28:46 +00:00
James Smith 8cce39f5fc change to tus uploader 2025-01-10 16:27:05 +00:00
James Smith b3aaba2543 Refactor and simplify old file removal code 2024-11-07 12:07:53 +00:00
James Smith ea8f695e76 move convert method into model_file 2024-11-04 14:58:23 +00:00
James Smith 78be390f57 DRY up format response for indexable types 2024-10-08 22:41:13 +01:00
James Smith 43a30ffecf add UI for splitting models to file bulk edit 2024-10-04 14:09:21 +01:00
James Smith 2c7c0b00ff rename to find_param 2024-09-22 19:43:34 +01:00
James Smith 2f093774dd use DRYer from_param instead of find_by all over the place 2024-09-22 12:04:57 +01:00
James Smith 52930c7691 raise exceptions as expected for failed finds 2024-09-17 17:18:07 +01:00