schalli d99253ba79 feat(favorites): GET /favorites/:id/icon proxy endpoint ...

Ownership-scoped (userId, matching update/remove) icon byte proxy.
Loads the row's stored iconUrl server-side and streams it through
IconDiscoveryService.fetchIconBytes -- never accepts a client-supplied
URL, so this can't become an open SSRF proxy.

Not-found/not-owned/no-icon -> 404. Upstream fetch failure (unreachable,
timeout, non-image, SSRF-blocked) -> 502, never a 200 with a placeholder.
Success sets Cache-Control so the browser doesn't refetch every load.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-07-07 15:34:02 +02:00

..

prisma

feat(ldap): add groupFilterDns column for selective import filter

2026-07-07 09:34:27 +02:00

src

feat(favorites): GET /favorites/:id/icon proxy endpoint

2026-07-07 15:34:02 +02:00

Dockerfile

fix(api): create /app/user-files with nestjs ownership in Dockerfile

2026-06-30 08:44:21 +02:00

nest-cli.json

feat(01-01): NestJS API with health endpoint and Prisma schema

2026-06-18 10:04:08 +02:00

package.json

chore(09-01): install node-forge + Vitest runner for @tessera/api

2026-07-01 23:17:23 +02:00

tsconfig.json

feat(01-01): NestJS API with health endpoint and Prisma schema

2026-06-18 10:04:08 +02:00

vitest.config.ts

chore(09-01): install node-forge + Vitest runner for @tessera/api

2026-07-01 23:17:23 +02:00