release: v0.19.0
Release v0.19.0. See the `## [0.19.0] — 2026-09-29` section of [CHANGELOG.md](https://github.com/ralksta/immich-folio/blob/dev/CHANGELOG.md) for the full list. Highlights: client proofing links (#683), custom content pages (#738), asset picker search (#740), concurrent-edit detection (#742), env-locked settings (#739), an accessibility baseline (#741), three security fixes with advisories (#737, #755, #759), and a pre-release quality pass (#780–#797). --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: ralksta <ralksta@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Claude Opus 5 <noreply@anthropic.com> Co-authored-by: Ralf <rohlenbo79@gmail.com> Co-authored-by: Paul Thies <110185070+ImScheinox@users.noreply.github.com> Co-authored-by: lancetm714 <108419425+lancetm714@users.noreply.github.com> Co-authored-by: Lance Martin <lancetaylor95@gmail.com>
This commit is contained in:
@@ -4,6 +4,14 @@ import { GET } from '../[id]/route';
|
||||
import { encodeAssetId } from '@/lib/tokens';
|
||||
import { immich, ImmichUnavailableError } from '@/lib/immich';
|
||||
|
||||
const published = vi.hoisted(() => ({ value: true }));
|
||||
vi.mock('@/lib/publishedAssets', () => ({
|
||||
isPublishedAsset: async () => published.value,
|
||||
}));
|
||||
vi.mock('@/lib/admin/auth', () => ({
|
||||
isAdminAuthenticated: async () => false,
|
||||
}));
|
||||
|
||||
vi.mock('@/lib/immich', async () => {
|
||||
const actual = await vi.importActual<typeof import('@/lib/immich')>('@/lib/immich');
|
||||
return {
|
||||
@@ -53,6 +61,18 @@ describe('GET /api/image/[id]', () => {
|
||||
expect(mockStream).not.toHaveBeenCalled();
|
||||
});
|
||||
|
||||
it('refuses an asset the site no longer shows, without caching the refusal', async () => {
|
||||
published.value = false;
|
||||
try {
|
||||
const res = await call(encodeAssetId(ASSET_ID));
|
||||
expect(res.status).toBe(404);
|
||||
expect(res.headers.get('Cache-Control')).toBe('no-store');
|
||||
expect(mockStream).not.toHaveBeenCalled();
|
||||
} finally {
|
||||
published.value = true;
|
||||
}
|
||||
});
|
||||
|
||||
it('serves a valid token', async () => {
|
||||
mockStream.mockResolvedValue(fakeBody('image/jpeg'));
|
||||
const res = await call(encodeAssetId(ASSET_ID));
|
||||
|
||||
Reference in New Issue
Block a user