Fix asset file signature verification#156

Merged

lehni merged 31 commits intomainfrom

feature/asset-signatures

Apr 10, 2026

Commits on Apr 10, 2026

Improve type definitions and add type tests
puckey
committed
Add E2E test infrastructure
puckey
committed
Add asset upload/storage E2E tests
puckey
committed
Fix asset file signature verification
puckey
committed
Add signature forgery E2E tests (B15-B19)
puckey
committed
Add foreign import API and path traversal E2E tests
puckey
committed
Replace test ID prefixes with describe blocks
puckey
committed
Reuse _forEachAssetFile in _signAssetFiles
puckey
committed
Improve controller and KoaContext type definitions
puckey
committed
Update controllers documentation
puckey
committed
Fix Components type for object-valued properties
puckey
committed
Fix doc typos and add message/silent to Keyword and Format types
puckey
committed
Add controller and validator tests
puckey
committed
Add typescript dependency to tests package
puckey
committed
Fix controller type contravariance for subclass action handlers
puckey
committed
Types: Update type definitions for recent runtime changes
puckey
committed
Add @ditojs/utils dependency to tests package
puckey
committed
Server: Add nestedFolders to DiskStorageConfig type
puckey
committed
Types: Improve ModelControllerHooks
puckey
committed
Types: narrow DitoContext.searchTerm to string
puckey
committed
Types: infer return type of CollectionController.execute
puckey
committed
Types: add ModelModifiers type and static modifiers on Model
puckey
committed
Types: add static schema on Model
puckey
committed
Types: type ctx.app as Application on KoaContext
puckey
committed
Types: remove catch-all index signature from Model.definition
puckey
committed
Types: add strongly-typed action parameters via $ParamsMap
puckey
committed
Use pnpm recursive run for test:all script
puckey
committed
Warn when falling back to random secret for asset signatures
puckey
committed
Remove leftover someHelper() stub from test models
puckey
committed
Add comment to bare catch in verifyAssetFile
puckey
committed
Update pnpm-lock.yaml to match main
puckey
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Fix asset file signature verification#156

Fix asset file signature verification#156
lehni merged 31 commits intomainfrom
feature/asset-signatures

Commits on Apr 10, 2026

Improve type definitions and add type tests

Add E2E test infrastructure

Add asset upload/storage E2E tests

Fix asset file signature verification

Add signature forgery E2E tests (B15-B19)

Add foreign import API and path traversal E2E tests

Replace test ID prefixes with describe blocks

Reuse _forEachAssetFile in _signAssetFiles

Improve controller and KoaContext type definitions

Update controllers documentation

Fix Components type for object-valued properties

Fix doc typos and add message/silent to Keyword and Format types

Add controller and validator tests

Add typescript dependency to tests package

Fix controller type contravariance for subclass action handlers

Types: Update type definitions for recent runtime changes

Add @ditojs/utils dependency to tests package

Server: Add nestedFolders to DiskStorageConfig type

Types: Improve ModelControllerHooks

Types: narrow DitoContext.searchTerm to string

Types: infer return type of CollectionController.execute

Types: add ModelModifiers type and static modifiers on Model

Types: add static schema on Model

Types: type ctx.app as Application on KoaContext

Types: remove catch-all index signature from Model.definition

Types: add strongly-typed action parameters via $ParamsMap

Use pnpm recursive run for test:all script

Warn when falling back to random secret for asset signatures

Remove leftover someHelper() stub from test models

Add comment to bare catch in verifyAssetFile

Update pnpm-lock.yaml to match main