penpot

mirror of https://github.com/penpot/penpot.git synced 2026-05-20 15:33:43 +00:00

History

Andrey Antukh ff23f786b4 🐛 Fix broken authentication on /assets handlers

- Add ::setup/props and ::db/pool to :app.http.assets/routes config
  so session renewal works correctly for asset requests.
- Add actoken/authz middleware to the assets middleware chain so
  access tokens are properly recognized.
- Add authenticated? helper that checks both ::session/profile-id
  and ::actoken/profile-id, fixing 401 errors when accessing
  protected assets with a valid access token.
- Add comprehensive test suite for assets auth scenarios.

Closes #9677

Signed-off-by: Andrey Antukh <niwi@niwi.nz>

2026-05-15 12:05:02 +02:00

dev

🎉 Add management RPC API (#7700 )

2025-11-10 17:10:59 +01:00

resources

✨ Add minor improvements to error reporting (#8402 )

2026-03-04 09:12:19 +01:00

scripts

✨ Add minor compatibility adjustments for audit archive task (#8491 )

2026-04-27 16:15:35 +02:00

src

🐛 Fix broken authentication on /assets handlers