Ettore Di Giacinto a0e08d21fb test(core/http): add canvas preview route to auth coverage allowlist ...

Commit 9ad78381d8 added GET /api/canvas/preview/:id as a public route
(no auth — the random id is the capability, an iframe cannot send API
key headers) but did not add it to expectedPublicRoutes in the route
auth coverage test. The test flagged the route as an anonymous-access
leak, failing the entire ./core ginkgo suite on every CI run since.

The POST /api/canvas/preview endpoint is auth-gated (returns 401 to
anonymous requests) and is intentionally absent from the allowlist.

Signed-off-by: Ettore Di Giacinto <mudler@localai.io>

2026-10-19 00:09:57 +00:00

..

auth

[ui] Serve canvas HTML previews with their own CSP (#12715)

2026-10-17 00:54:22 +02:00

endpoints

feat(llama-cpp): add slot prompt-cache save and restore API (#12730)

2026-10-17 18:23:02 +02:00

middleware

fix: stop listing the models directory on request paths and cache GGUF header reads (#12683)

2026-10-14 01:06:14 +02:00

react-ui

feat(ui): dictate in the chat composer and read scanned PDFs as images (#12756)

2026-10-18 21:52:59 +02:00

routes

feat(llama-cpp): add slot prompt-cache save and restore API (#12730)

2026-10-17 18:23:02 +02:00

static

fix(ui): omit empty system prompt so model default applies (#11838)

2026-09-02 11:58:23 +00:00

views

feat(realtime): WebRTC support (#8790)

2026-03-13 21:37:15 +01:00

admission_handler_test.go

fix: return correct HTTP status codes for saturation and no-nodes-available (#12113)

2026-09-28 00:11:51 +02:00

app_test.go

Revert "chore(tests): Avoid network, sleep and more during tests" (#11601)

2026-08-19 16:39:39 +02:00

app.go

fix(http): drop the global CSRF relaxation and CORS-derived socket origin

2026-10-13 08:27:24 +00:00

body_limit_test.go

feat: Add 3d generation UI/API and trellis2cpp backend (#10979)

2026-07-29 16:15:04 +02:00

csrf_multipart_test.go

fix(auth): require validated header credentials for CSRF exemption (#12185)

2026-09-22 04:35:09 +01:00

diagnostics_test.go

test: fix lint failures after ESRGAN merge (#12623)

2026-10-11 00:53:06 +02:00

embeddings_pooling_test.go

feat(router): make KNN a first-class classifier with a persisted, curated corpus (#10652)

2026-08-18 09:37:43 +02:00

explorer.go

chore(refactor): move logging to common package based on slog (#7668)

2025-12-21 19:33:13 +01:00

http_suite_test.go

refactor(tests): split app_test.go, move real-backend coverage to e2e-backends

2026-04-27 23:09:20 +00:00

model_loading_held_test.go

fix(distributed): bound, stop and cancel model loads with leases and worker operations (#12524)

2026-10-07 16:59:56 +02:00

openresponses_test.go

Revert "chore(tests): Avoid network, sleep and more during tests" (#11601)

2026-08-19 16:39:39 +02:00

render.go

feat: add distributed mode (#9124)

2026-03-30 00:47:27 +02:00

route_coverage_test.go

test(core/http): add canvas preview route to auth coverage allowlist

2026-10-19 00:09:57 +00:00

static_cache_test.go

perf(http): gzip responses, cache hashed assets, bound the trace endpoints (#11056)

2026-07-22 22:51:25 +02:00

testport_test.go

chore: remove local pre-commit gates (#11116)

2026-07-25 01:19:32 +02:00