astra/owpengram-server
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

glorifying admin panel

Browse source
This commit is contained in:
onysd 2026-09-08 01:53:49 +03:00
parent ae2cc3ba90
commit 87173ae43f
12 changed files with 335 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

12
cmd/telesrv-admin/routescope_test.go
View file

@ -30,9 +30,15 @@ func TestEveryAPIRouteDeclaresAScope(t *testing.T) {
"s.botVerificationRead(",
"s.botVerificationManage(",
}
// /api/login is the way in, so it is authenticated by the credential it
// carries rather than by a session that does not exist yet.
exempt := map[string]bool{"POST /api/login": true}
// Routes that are reachable before a session exists, each for a stated
// reason: /api/login is the way in (it carries its own credential), and the
// two branding routes feed the login screen with the server name and icon
// that owpengram-server already publishes to every client.
exempt := map[string]bool{
"POST /api/login": true,
"GET /api/public/branding": true,
"GET /api/public/icon": true,
}
route := regexp.MustCompile(`mux\.Handle(Func)?\("([A-Z]+ /api/[^"]*)"`)