added media permissions (#142)

* added permissions support for media module

introduced `MediaPermissions` for fine-grained access control in the media module, updated routes to enforce these permissions, and adjusted permission registration logic.

* fix: handle token absence in getUploadHeaders and add tests for transport modes

ensure getUploadHeaders does not set Authorization header when token is missing. Add unit tests to validate behavior for different token_transport options.

* remove console.log on DropzoneContainer.tsx

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
This commit is contained in:
dswbx
2025-04-20 09:53:11 +02:00
committed by GitHub
parent 600b55fada
commit edb5d5f4a9
10 changed files with 59 additions and 23 deletions
+4 -3
View File
@@ -1,6 +1,6 @@
import { $console, type PrimaryFieldType } from "core";
import { type Entity, type EntityManager } from "data";
import { type FileUploadedEventData, Storage, type StorageAdapter } from "media";
import type { Entity, EntityManager } from "data";
import { type FileUploadedEventData, Storage, type StorageAdapter, MediaPermissions } from "media";
import { Module } from "modules/Module";
import {
type FieldSchema,
@@ -13,7 +13,7 @@ import {
text,
} from "../data/prototype";
import { MediaController } from "./api/MediaController";
import { ADAPTERS, buildMediaSchema, type mediaConfigSchema, registry } from "./media-schema";
import { buildMediaSchema, type mediaConfigSchema, registry } from "./media-schema";
export type MediaFieldSchema = FieldSchema<typeof AppMedia.mediaFields>;
declare module "core" {
@@ -46,6 +46,7 @@ export class AppMedia extends Module<typeof mediaConfigSchema> {
this._storage = new Storage(adapter, this.config.storage, this.ctx.emgr);
this.setBuilt();
this.setupListeners();
this.ctx.guard.registerPermissions(MediaPermissions);
this.ctx.server.route(this.basepath, new MediaController(this).getController());
const media = this.getMediaEntity(true);