frigate

mirror of https://github.com/blakeblackshear/frigate.git synced 2026-10-01 12:26:50 +03:00

Files

T

Josh Hawkins 17e1d5e094 don't let camera names waive the admin check on non-camera routes

The global admin guard skipped the admin check for any request whose first path segment matched a configured camera name, without looking at which route actually handled it. A camera named `faces`, `lpr`, `audio`, or `classification` let viewers reach the face, LPR, audio transcription, and classification endpoints that rely only on the global guard. The exemption now also requires the matched route to be a `/{camera_name}` route, so camera routes behave exactly as before.

2026-09-30 09:15:27 -05:00

__init__.py

Started unit tests for the review controller (#15077 )

2024-11-19 16:35:10 -07:00

base_http_test.py

don't let camera names waive the admin check on non-camera routes

2026-09-30 09:15:27 -05:00

test_debug_replay_api.py

Return a specific 404 when starting a debug replay with no recordings in range (#24024 )

2026-08-18 10:08:52 -05:00

test_http_app.py

don't let camera names waive the admin check on non-camera routes