Close data leaks: remove anonymous user creation, hide private playlists, validate uploads and clamp gateway ranges

2026-09-24 05:00:21 +02:00
parent c8fe28b07b
commit c8e9c7790e
34 changed files with 374 additions and 553 deletions
@@ -43,7 +43,7 @@ public class CreateAlbumCommandHandler(
        }

        var pictureIntent = await uploadIntentValidator.ValidateAndLoadAsync(
-            uploadIntentConfiguration, request.PictureIntentId, request.UserId, cancellationToken);
+            uploadIntentConfiguration, request.PictureIntentId, request.UserId, UploadIntentPurpose.AlbumPicture, cancellationToken);
        if (pictureIntent.IsError)
            return pictureIntent.Errors;

@@ -62,7 +62,7 @@ public class UpdateAlbumCommandHandler(
        {
            var validation = await uploadIntentValidator.ValidateAndLoadAsync(
                uploadIntentConfiguration,
-                request.NewPictureIntentId.Value, request.UserId, cancellationToken);
+                request.NewPictureIntentId.Value, request.UserId, UploadIntentPurpose.AlbumPicture, cancellationToken);
            if (validation.IsError)
                return validation.Errors;