Andrey Vasnetsov b14e0be4ed Restrict snaphsot recovery to snapshots directory, hide file contents (#8341) ...

* restrict recovery from snapshot folder

* fmt

* clippy

* Extend test, path must be inside snapshots directory

* In release builds, hide detailed tar error message to not leak contents

* Change from bad request to forbidden

* fix(auth_tests): place snapshot in peer snapshots dir for recover_collection_snapshot

The recover from snapshot API now requires file:// paths to be inside the
configured snapshots directory. Write the test snapshot into the peer's
snapshots directory instead of a temp file so the request is allowed.

Made-with: Cursor

---------

Co-authored-by: timvisee <tim@visee.me>
Co-authored-by: Tim Visée <tim+github@visee.me>
Co-authored-by: Cursor Agent <agent@cursor.com>

2026-03-10 17:13:32 +01:00

..

__init__.py

RBAC: [tests] Add payload constraint spec (#4008)

2024-04-12 10:13:26 -04:00

conftest.py

Make read-only api key behave the same as global read-only token (#4038)

2024-04-15 14:56:15 -04:00

test_jwt_access.py

Restrict snaphsot recovery to snapshots directory, hide file contents (#8341)

2026-03-10 17:13:32 +01:00

test_jwt_validation.py

Merge pull request #7835

2026-01-02 13:18:53 +01:00

utils.py

Merge pull request #7835

2026-01-02 13:18:53 +01:00