timonrieger bb06990957 fix(server): use 403 instead of 400 for access-denied errors ...

requireAccess threw BadRequestException which is incorrect HTTP semantics.
Access denial is a client authorization problem (403 Forbidden), not a
malformed request (400 Bad Request). Keep the descriptive permission name
in the message since the full permission set is public API surface.

2026-04-30 13:11:44 +02:00

..

bin

fix(server): memory fragmentation (#27027)

2026-03-26 18:21:52 +01:00

src

fix(server): use 403 instead of 400 for access-denied errors

2026-04-30 13:11:44 +02:00

test

Revert "refactor(server)!: sanitize error messages to avoid leaking resource and permission details"

2026-04-30 13:07:22 +02:00

.gitignore

…

.npmignore

…

.nvmrc

chore(deps): update node.js to v24.15.0 (#28006)

2026-04-21 09:47:32 +00:00

.prettierignore

…

.prettierrc

…

Dockerfile

chore(deps): update base-image to v202604141125 (major) (#27858)

2026-04-16 15:40:40 +00:00

Dockerfile.dev

chore(deps): update base-image to v202604141125 (major) (#27858)

2026-04-16 15:40:40 +00:00

eslint.config.mjs

…

helmet.json

fix: csp quotes (#27592)

2026-04-07 15:54:30 -04:00

mise.toml

…

nest-cli.json

…

package.json

fix(deps): update typescript-projects (#28132)

2026-04-28 13:18:29 +02:00

tsconfig.build.json

chore: move .tsbuildinfo file to dist folder (#27682)

2026-04-10 16:02:25 +02:00

tsconfig.json

chore: upgrade sql-tools (#27885)

2026-04-21 17:42:27 +00:00