timonrieger 87ef6bed4a fix(server): unify profile image errors to prevent user-existence oracle via status code ...

GET /users/:id/profile-image returned HTTP 400 for an unknown user ID
but HTTP 404 when the user existed without a photo, letting callers
distinguish the two cases. Both now return 404 so the response is
identical regardless of whether the UUID maps to an account.

2026-04-30 11:54:00 +02:00

..

bin

…

src

fix(server): unify profile image errors to prevent user-existence oracle via status code

2026-04-30 11:54:00 +02:00

test

fix(server): replace email-in-use messages to prevent user-existence oracle

2026-04-30 11:54:00 +02:00

.gitignore

…

.npmignore

…

.nvmrc

…

.prettierignore

…

.prettierrc

…

Dockerfile

…

Dockerfile.dev

…

eslint.config.mjs

…

helmet.json

…

mise.toml

…

nest-cli.json

…

package.json

…

tsconfig.build.json

…

tsconfig.json

…