release: v0.16.0

See CHANGELOG.md for the full v0.16.0 entry.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: ralksta <ralksta@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
Co-authored-by: Ralf <rohlenbo79@gmail.com>
Co-authored-by: Paul Thies <110185070+ImScheinox@users.noreply.github.com>
Co-authored-by: lancetm714 <108419425+lancetm714@users.noreply.github.com>

app/api/admin/albums/[albumId]/assets/route.ts

@@ -4,64 +4,56 @@
  */
 
 import { NextRequest, NextResponse } from 'next/server';
-import { isAdminAuthenticated, isAdminEnabled } from '@/lib/admin/auth';
+import { withAdmin } from '@/lib/admin/withAdmin';
 import { getConfig } from '@/lib/config';
 import { immich } from '@/lib/immich';
 import { isUuid } from '@/lib/uuid';
 
-export async function GET(
-  request: NextRequest,
-  { params }: { params: Promise<{ albumId: string }> },
-) {
-  if (!isAdminEnabled()) {
-    return NextResponse.json({ error: 'Admin not enabled' }, { status: 403 });
-  }
-  if (!(await isAdminAuthenticated())) {
-    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
-  }
+export const GET = withAdmin(
+  async (request: NextRequest, { params }: { params: Promise<{ albumId: string }> }) => {
+    const config = getConfig();
+    // Credentials, not `needsSetup`: this route is how the operator picks the
+    // albums that gallery.yaml is built from, so refusing to run until that file
+    // exists is a deadlock (#507).
+    if (config.needsCredentials) {
+      return NextResponse.json({ error: 'Immich not configured' }, { status: 503 });
+    }
 
-  const config = getConfig();
-  // Credentials, not `needsSetup`: this route is how the operator picks the
-  // albums that gallery.yaml is built from, so refusing to run until that file
-  // exists is a deadlock (#507).
-  if (config.needsCredentials) {
-    return NextResponse.json({ error: 'Immich not configured' }, { status: 503 });
-  }
+    const { albumId } = await params;
 
-  const { albumId } = await params;
+    // Without this, `..%2f..%2fusers` resolves inside fetch() to an arbitrary
+    // Immich endpoint, called with the server's API key.
+    if (!isUuid(albumId)) {
+      return NextResponse.json({ error: 'Invalid album ID' }, { status: 400 });
+    }
 
-  // Without this, `..%2f..%2fusers` resolves inside fetch() to an arbitrary
-  // Immich endpoint, called with the server's API key.
-  if (!isUuid(albumId)) {
-    return NextResponse.json({ error: 'Invalid album ID' }, { status: 400 });
-  }
+    // Videos are opt-in. The hero picker feeds imageUrl()/assetPlaceholder and
+    // wants images only; the sort editor must show everything the public grid
+    // renders, or a video could never be pinned and would always fall to the tail.
+    const includeVideos = request.nextUrl.searchParams.get('types') === 'all';
 
-  // Videos are opt-in. The hero picker feeds imageUrl()/assetPlaceholder and
-  // wants images only; the sort editor must show everything the public grid
-  // renders, or a video could never be pinned and would always fall to the tail.
-  const includeVideos = request.nextUrl.searchParams.get('types') === 'all';
+    try {
+      // Via the client, not a bare fetch of `GET /albums/:id`: Immich 3.x no
+      // longer embeds assets in that response, so reading `album.assets` returned
+      // nothing (and threw outright when the key was absent). getAlbumAssetsRaw()
+      // pages through the metadata search and applies the album's own order, so
+      // this list matches what the site renders under `sort: immich`.
+      const all = await immich.getAlbumAssetsRaw(albumId);
 
-  try {
-    // Via the client, not a bare fetch of `GET /albums/:id`: Immich 3.x no
-    // longer embeds assets in that response, so reading `album.assets` returned
-    // nothing (and threw outright when the key was absent). getAlbumAssetsRaw()
-    // pages through the metadata search and applies the album's own order, so
-    // this list matches what the site renders under `sort: immich`.
-    const all = await immich.getAlbumAssetsRaw(albumId);
+      const assets = all
+        .filter((a) => a.type === 'IMAGE' || (includeVideos && a.type === 'VIDEO'))
+        .map((a) => ({
+          id: a.id,
+          type: a.type,
+          originalFileName: a.originalFileName,
+          fileCreatedAt: a.fileCreatedAt,
+          isFavorite: a.isFavorite ?? false,
+        }));
 
-    const assets = all
-      .filter((a) => a.type === 'IMAGE' || (includeVideos && a.type === 'VIDEO'))
-      .map((a) => ({
-        id: a.id,
-        type: a.type,
-        originalFileName: a.originalFileName,
-        fileCreatedAt: a.fileCreatedAt,
-        isFavorite: a.isFavorite ?? false,
-      }));
-
-    return NextResponse.json({ assets, nextPage: null });
-  } catch (err) {
-    console.error('Failed to fetch album assets:', err);
-    return NextResponse.json({ error: 'Failed to fetch album assets' }, { status: 500 });
-  }
-}
+      return NextResponse.json({ assets, nextPage: null });
+    } catch (err) {
+      console.error('Failed to fetch album assets:', err);
+      return NextResponse.json({ error: 'Failed to fetch album assets' }, { status: 500 });
+    }
+  },
+);