Skip to content

fix: Add 401 response for non-public pages and 403 response for admin pages - #266

Merged
provokateurin merged 4 commits into
mainfrom
fix/non-public-page-401-response
Aug 26, 2025
Merged

provokateurin merged 4 commits into
mainfrom
fix/non-public-page-401-response

Conversation

@provokateurin

@provokateurin provokateurin commented Aug 20, 2025 •

Copy link
Copy Markdown
Member

401/403 might be returned by the SecurityMiddleware, so they are not directly documented for each endpoint (except through the annotations/attributes), so they need to be added manually.

Signed-off-by: provokateurin <kate@provokateurin.de>
@provokateurin
provokateurin marked this pull request as draft August 20, 2025 08:43
@provokateurin
provokateurin force-pushed the fix/non-public-page-401-response branch from e3ae61b to 65eab06 Compare August 20, 2025 10:18
@provokateurin
provokateurin marked this pull request as ready for review August 20, 2025 10:18
Comment thread generate-spec.php Resolved
@provokateurin
provokateurin marked this pull request as draft August 21, 2025 08:32
Signed-off-by: provokateurin <kate@provokateurin.de>
Signed-off-by: provokateurin <kate@provokateurin.de>
… pages

Signed-off-by: provokateurin <kate@provokateurin.de>
@provokateurin
provokateurin force-pushed the fix/non-public-page-401-response branch from e390954 to 9acc49b Compare August 25, 2025 11:35
@provokateurin provokateurin changed the title fix: Add 401 response for non-public pages fix: Add 401 response for non-public pages and 403 response for admin pages Aug 25, 2025
@provokateurin
provokateurin marked this pull request as ready for review August 25, 2025 11:35
@provokateurin
provokateurin requested a review from come-nc August 25, 2025 11:36

@nickvergessen nickvergessen left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

Could additionally add 429 when ratelimit or bfp is there, ref
https://nextcloud-talk.readthedocs.io/en/latest/global/

@provokateurin

Copy link
Copy Markdown
Member Author

Yes, but that will be part of #151, since it needs annotation/attribute parsing.

@provokateurin
provokateurin merged commit aa4b675 into main Aug 26, 2025
@provokateurin
provokateurin deleted the fix/non-public-page-401-response branch August 26, 2025 06:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants