navidrome/server/apiv1
Deluan 04b9e97eb2 fix(api): stop the API v1 request validator from rewriting bodies
Filling schema defaults made kin-openapi re-encode the body, so trailing data
after the JSON value of POST /auth/password was silently dropped instead of
answering 400 like the other endpoints. The handler already applies the
revokeOtherGrants default itself.

Signed-off-by: Deluan <deluan@navidrome.org>
2026-09-28 21:06:31 -04:00
..
api.go refactor(api): use the grant secret as the API v1 bearer credential 2026-09-28 21:05:57 -04:00
api_gen.go refactor(api): use the grant secret as the API v1 bearer credential 2026-09-28 21:05:57 -04:00
api_test.go fix(api): consolidate grant deletes and harden API v1 auth after review 2026-09-28 20:06:28 -04:00
apiv1_suite_test.go refactor(api): use the grant secret as the API v1 bearer credential 2026-09-28 21:05:57 -04:00
auth_handlers.go refactor(api): use the grant secret as the API v1 bearer credential 2026-09-28 21:05:57 -04:00
auth_test.go fix(api): stop the API v1 request validator from rewriting bodies 2026-09-28 21:06:31 -04:00
capabilities.go feat(api): report login methods and add GET /capabilities 2026-09-28 20:06:27 -04:00
capabilities_test.go refactor(api): use the grant secret as the API v1 bearer credential 2026-09-28 21:05:57 -04:00
db_test.go feat(api): add API v1 login, setup, token, grant and password endpoints 2026-09-28 20:06:27 -04:00
dto.go refactor(api): simplify the API v1 spec gate 2026-09-28 20:06:28 -04:00
dto_test.go test(api): share API v1 test helpers and check scopes in Go 2026-09-28 20:06:28 -04:00
gate.go fix(api): stop the API v1 request validator from rewriting bodies 2026-09-28 21:06:31 -04:00
gate_test.go refactor(api): use the grant secret as the API v1 bearer credential 2026-09-28 21:05:57 -04:00
oapi-codegen-overlay.yaml feat(api): add API v1 login, setup, token, grant and password endpoints 2026-09-28 20:06:27 -04:00
oapi-codegen.yaml feat(api): add API v1 login, setup, token, grant and password endpoints 2026-09-28 20:06:27 -04:00
password_handlers.go fix(api): consolidate grant deletes and harden API v1 auth after review 2026-09-28 20:06:28 -04:00
problem.go refactor(api): use the grant secret as the API v1 bearer credential 2026-09-28 21:05:57 -04:00
problem_test.go refactor(api): use the grant secret as the API v1 bearer credential 2026-09-28 21:05:57 -04:00
reference.go feat(api): enforce API v1 security from the spec and harden problem responses 2026-09-28 20:06:27 -04:00
server_info.go feat(api): report login methods and add GET /capabilities 2026-09-28 20:06:27 -04:00
server_info_test.go feat(api): report login methods and add GET /capabilities 2026-09-28 20:06:27 -04:00
spec.go feat(api): add the API v1 foundation behind DevAPIv1 (#6227) 2026-09-26 15:27:23 -04:00
spec_test.go feat(api): add the API v1 foundation behind DevAPIv1 (#6227) 2026-09-26 15:27:23 -04:00