peter b2d34e6e6c feat(files): API tokens — a machine reaches the library folder by folder ...

A user can make a token for a machine of theirs (`/api/tokens`, signed-in only): `sfl_` + 32
random bytes + a checksum, only its SHA-256 kept, shown once. Sent as a Bearer header it is
honoured on six `/api/files` routes only — folders, list, file, hash, upload, delete — and there
only in the folders its grants name, with the rights they give (list / read / write / delete).
One check, `FilesCaller.may`, in every route; a folder or file out of reach answers like a
missing one; the files shared with the user are never in reach. A token beats a cookie on the
same request.

The Hub preset makes the user's one Hub folder (a new folder kind) and grants it every right.
Refused tokens are slowed down per client, a runaway machine per token; last use is stamped at
most once a minute; making and revoking a token is audited, and a token's uploads and deletes
name it in their audit rows.

2026-10-14 18:40:23 +02:00

..

fixtures

feat!: remove direct messaging (chat)

2026-10-05 00:19:38 +02:00

conftest.py

feat(files): API tokens — a machine reaches the library folder by folder

2026-10-14 18:40:23 +02:00

test_abuse_limits.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_adapters.py

fix(clip): a clip is held to its owner's storage cap, and its limits and failures say the server's truth

2026-10-10 15:35:12 +02:00

test_admin_invites.py

fix(api): a token hiccup is not "reconnect"; reorders and approvals are one unit each

2026-09-19 19:19:29 +02:00

test_admin_logs.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_admin_pending_access.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_api_tokens.py

feat(files): API tokens — a machine reaches the library folder by folder

2026-10-14 18:40:23 +02:00

test_audit_count_rows.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_auth_session.py

fix(auth): Google adoption revokes the password of a never-activated account

2026-10-05 00:19:50 +02:00

test_autotag_orphans.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_autotag_topics.py

feat(i18n): the server's closed English vocabularies named in the reader's language (E30 S2)

2026-09-29 21:21:19 +02:00

test_body_limit.py

feat(files): the Files page — the library in one aligned list, its folders in a rail

2026-10-11 05:34:25 +02:00

test_canonical_patterns.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_channel_backfill.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_channel_details_refresh.py

fix(channels): a channel YouTube no longer returns is not asked for on every view

2026-09-27 13:58:23 +02:00

test_channel_list_index_only.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_channel_subscribe_upstream.py

fix(logs): deep-review round 1 — say each failure once, and scrub it everywhere

2026-09-18 03:16:15 +02:00

test_channel_tags.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_clip.py

fix(files): a file is added when it is done, not when it was asked for

2026-10-12 22:19:37 +02:00

test_collation.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_config_commit_ownership.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_db_lane.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_debug_sessions.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_diagnostics.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_discover.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_download_credentials.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_download_deprioritize.py

feat(downloads): every ready file is phone-safe — uploads and clips too

2026-10-05 03:16:27 +02:00

test_download_errors.py

fix(downloads): a site the downloader no longer understands says so, and offers a retry

2026-10-12 20:54:47 +02:00

test_download_failure_catalog.py

feat(files): every file sits in a library folder, and keeps its own expiry

2026-10-11 03:30:34 +02:00

test_download_job_locks.py

feat(files): API tokens — a machine reaches the library folder by folder

2026-10-14 18:40:23 +02:00

test_download_limits.py

feat(files): the Files library API — folders, moving and keeping files, upload into a folder, the file's hash

2026-10-11 04:42:55 +02:00

test_download_output.py

feat(downloads): every ready file is phone-safe — uploads and clips too

2026-10-05 03:16:27 +02:00

test_download_ref_count.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_download_share_notice.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_download_transitions.py

feat(files): the Files page — the library in one aligned list, its folders in a rail

2026-10-11 05:34:25 +02:00

test_downloads_finalize.py

style: apply ruff format across backend + scripts (line-length 100)

2026-08-23 07:43:06 +02:00

test_edit_cap.py

feat(files): every file sits in a library folder, and keeps its own expiry

2026-10-11 03:30:34 +02:00

test_email_alerts.py

feat(email): write to people in their own language (E9.5 S7)

2026-09-04 20:29:33 +02:00

test_email_canonical.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_email_html_part.py

feat(email): write to people in their own language (E9.5 S7)

2026-09-04 20:29:33 +02:00

test_empty_listing_guards.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_facebook_impersonation.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_failure_lines.py

feat(files): every file sits in a library folder, and keeps its own expiry

2026-10-11 03:30:34 +02:00

test_feed_cursor.py

test: a handler that flushes a write and never commits it fails its test

2026-09-19 19:19:30 +02:00

test_feed_fallback.py

fix(sync): only a refusal about the channel spends its fallback window

2026-09-19 05:54:19 +02:00

test_feed_keyset.py

style: apply ruff format across backend + scripts (line-length 100)

2026-08-23 07:43:06 +02:00

test_feed_relevance_window.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_feed_sort_indexes.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_feed_views.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_ffmpeg_callbacks.py

style: apply ruff format across backend + scripts (line-length 100)

2026-08-23 07:43:06 +02:00

test_ffmpeg_input_guard.py

fix(downloads): a conversion's commit, a stopped upload, the fast join and a clip's copy hold up

2026-10-06 21:02:07 +02:00

test_file_folders.py

fix(files): review round 3, the server — a fetched locked re-read, a finish that follows its file, an eviction that counts again

2026-10-13 03:15:59 +02:00

test_files_api.py

fix(files): review round 2, the server — locks the GC and folders read under, the mount check, the old mount name

2026-10-13 02:32:49 +02:00

test_files_preview.py

feat(files): a file that is not media opens in a viewer — an image, a PDF, text as text

2026-10-12 15:28:31 +02:00

test_followed_channels.py

fix(sync): read a dark RSS feed through the API instead

2026-09-19 04:51:31 +02:00

test_formats.py

fix(downloads): a download larger than the space left says so, not "processing failed"

2026-10-10 21:56:47 +02:00

test_gc.py

perf(downloads): de-prioritize worker transcodes + idle-back-off polls to stop LAN slowdown

2026-08-28 02:37:56 +02:00

test_google_callback.py

fix(auth): becoming admin through ADMIN_EMAILS drops the password, on any sign-in

2026-10-05 01:13:06 +02:00

test_hls_reaper.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_http_details.py

fix(i18n): every refusal the API answers is structured and said in the reader's language

2026-09-19 07:34:17 +02:00

test_last_login.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_library_progress.py

feat(files): the Files page — the library in one aligned list, its folders in a rail

2026-10-11 05:34:25 +02:00

test_like_literals.py

fix(search): typed text is a literal in every LIKE pattern

2026-09-19 01:33:32 +02:00

test_links.py

fix(gate): the plan-code guard catches decision codes, and the purge takes them

2026-10-05 03:16:13 +02:00

test_log_pii.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_logger_names.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_login_states.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_logs.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_logsink.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_mail_language.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_maintenance_lifecycle.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_me_email_flag.py

fix: address the feature review — accurate copy, reachable controls, real coverage

2026-09-01 23:31:49 +02:00

test_me_search_source.py

fix(search): the live-search tooltip says what a search costs

2026-10-04 17:53:19 +02:00

test_migration_0098.py

fix(migrations): dropping the demo also takes its reset job's interval-change audit rows

2026-10-05 00:19:50 +02:00

test_migration_0102.py

fix(files): review round 1, the server — the tray's window, the GC's locks, a file's origin, the upgrade path

2026-10-13 00:14:09 +02:00

test_migration_0103.py

feat(files): the Files library API — folders, moving and keeping files, upload into a folder, the file's hash

2026-10-11 04:42:55 +02:00

test_migration_0104.py

fix(files): review round 1, the server — the tray's window, the GC's locks, a file's origin, the upgrade path

2026-10-13 00:14:09 +02:00

test_migration_0105.py

fix(files): review round 1, the server — the tray's window, the GC's locks, a file's origin, the upgrade path

2026-10-13 00:14:09 +02:00

test_migration_rerun_invalid_index.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_migrations.py

style: apply ruff format across backend + scripts (line-length 100)

2026-08-23 07:43:06 +02:00

test_my_status_deep.py

fix(stats): the full-history ratio counts the requested channels on both sides

2026-09-29 22:46:04 +02:00

test_naming.py

style: apply ruff format across backend + scripts (line-length 100)

2026-08-23 07:43:06 +02:00

test_not_found_detail.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_notifications.py

style: apply ruff format across backend + scripts (line-length 100)

2026-08-23 07:43:06 +02:00

test_oauth_redirect.py

style: apply ruff format across backend + scripts (line-length 100)

2026-08-23 07:43:06 +02:00

test_odd_frame.py

feat(files): every file sits in a library folder, and keeps its own expiry

2026-10-11 03:30:34 +02:00

test_og.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_override_dep_convention.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_phone_safe_contract.py

feat(files): the Files page — the library in one aligned list, its folders in a rail

2026-10-11 05:34:25 +02:00

test_playable.py

feat(downloads): every ready file is phone-safe — uploads and clips too

2026-10-05 03:16:27 +02:00

test_playlist_add_position.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_playlist_merge.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_playlist_move.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_playlist_position_lock.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_playlist_sync_claim.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_playlist_sync_lock_order.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_admin_routes.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_cards.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_clear_resume_push.py

test: a handler that flushes a write and never commits it fails its test

2026-09-19 19:19:30 +02:00

test_plex_client.py

test: hold the show collection's type, an unknown title's 404 and Brave's fullscreen stand-in

2026-10-08 21:18:48 +02:00

test_plex_collection_sort.py

test: a handler that flushes a write and never commits it fails its test

2026-09-19 19:19:30 +02:00

test_plex_collections_filter.py

fix(plex): a collection kept after a failed refresh holds its seed title

2026-10-08 22:12:43 +02:00

test_plex_collections_for_item.py

test: hold the show collection's type, an unknown title's 404 and Brave's fullscreen stand-in

2026-10-08 21:18:48 +02:00

test_plex_detail.py

feat(plex): every show card plays the episode it would put on

2026-10-09 01:22:00 +02:00

test_plex_discover.py

fix(plex): plain text survives a decimal reference too long to parse

2026-10-10 00:03:08 +02:00

test_plex_facets_grid_parity.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_facets.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_field_scoped_search.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_finish.py

fix(api): mutations answer ok; route helpers flush and leave the commit to the handler

2026-09-19 18:21:06 +02:00

test_plex_hls_file_route.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_image_sizes.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_jsonb_normalize.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_keyword_filter.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_lang.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_last_watched_sort.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_overlay.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_paths.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_people_enrich.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_person_bio.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_person.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_plaintext.py

fix(plex): plain text survives a decimal reference too long to parse

2026-10-10 00:03:08 +02:00

test_plex_playback_class.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_playback_session.py

refactor(player): the Plex session machine is a tested engine, one request per item in flight

2026-10-06 22:31:48 +02:00

test_plex_playlist_add_positions.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_query_conversion.py

fix(plex): the rails' Restart comes from the one rollup; plain text decodes whole entity names only

2026-10-09 23:46:39 +02:00

test_plex_session_stop.py

refactor(player): the Plex session machine is a tested engine, one request per item in flight

2026-10-06 22:31:48 +02:00

test_plex_stream.py

fix(player): a stale session answer can no longer stop the playback that won

2026-10-07 23:16:25 +02:00

test_plex_subtitle_auth.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_subtitle_encoding.py

fix(plex): a stray byte keeps a UTF-8 subtitle UTF-8; untagged and Serbian read as cp1250

2026-09-27 13:58:23 +02:00

test_plex_subtitle_prepare.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_sync_prune.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_sync_txn.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_tmdb.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_watch_reconcile.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_plex_watch_sync.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_progress_bounds.py

feat(player): the OS media controls, the basic keys and resume for the library and shared-link players

2026-10-06 23:55:41 +02:00

test_public_unlock_limit.py

feat(files): the Files page — the library in one aligned list, its folders in a rail

2026-10-11 05:34:25 +02:00

test_python_engine_contract.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_quota_ownership.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_quota_retention.py

fix(quota): prune quota history past a retention window

2026-10-04 17:53:19 +02:00

test_ratelimit.py

feat!: remove the shared demo account

2026-10-05 00:19:38 +02:00

test_request_models.py

feat(player): the OS media controls, the basic keys and resume for the library and shared-link players

2026-10-06 23:55:41 +02:00

test_reset_link_states.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_response_checked.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_review_round.py

docs(comments): correct comments the cuts left stale

2026-10-05 00:19:50 +02:00

test_route_conventions.py

feat(files): the Files library API — folders, moving and keeping files, upload into a folder, the file's hash

2026-10-11 04:42:55 +02:00

test_run_ffmpeg.py

style: apply ruff format across backend + scripts (line-length 100)

2026-08-23 07:43:06 +02:00

test_saved_views_source.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_scheduler.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_search_scrape_ingest.py

feat!: remove the shared demo account

2026-10-05 00:19:38 +02:00

test_search_scrape.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_security.py

style: apply ruff format across backend + scripts (line-length 100)

2026-08-23 07:43:06 +02:00

test_set_password_link.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_shorts_probe.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_smoke.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_spa_entries.py

feat(files): the Files page — the library in one aligned list, its folders in a rail

2026-10-11 05:34:25 +02:00

test_storage.py

fix(files): review round 2, the server — locks the GC and folders read under, the mount check, the old mount name

2026-10-13 02:32:49 +02:00

test_swallowed_exceptions.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_sync_guards.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_sysconfig_describe_queries.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_sysconfig_registry.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_tag_suggest.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_thumbnail_poster.py

style: apply ruff format across backend + scripts (line-length 100)

2026-08-23 07:43:06 +02:00

test_titles.py

style: apply ruff format across backend + scripts (line-length 100)

2026-08-23 07:43:06 +02:00

test_upload_conversion.py

fix(files): a file is added when it is done, not when it was asked for

2026-10-12 22:19:37 +02:00

test_upload.py

fix(files): a file is added when it is done, not when it was asked for

2026-10-12 22:19:37 +02:00

test_urlguard.py

fix(e12): close what round one broke, and revert two fixes that overreached

2026-09-05 04:02:57 +02:00

test_userscope.py

feat!: remove the shared demo account

2026-10-05 00:19:38 +02:00

test_utils.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_welcome_mail.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_worker_dispatch.py

feat(files): every file sits in a library folder, and keeps its own expiry

2026-10-11 03:30:34 +02:00

test_worker_knobs.py

fix(files): review round 1, the server — the tray's window, the GC's locks, a file's origin, the upgrade path

2026-10-13 00:14:09 +02:00

test_worker_supervisor.py

fix(logs): deep-review round 2 — a stack names code, not data, and survives a failed write

2026-09-18 22:50:37 +02:00

test_youtube_no_channel.py

fix(logs): keep polling reads and a channel-less account out of the warnings

2026-09-19 04:51:31 +02:00

test_youtube_refusals.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

test_ytdlp_logging.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00