Protect RCON diagnostics and redact player addresses (Refs #61)

2026-10-08 16:47:34 -04:00
parent 29d2d9634c
commit 0cc4498b53
36 changed files with 280 additions and 83 deletions
@@ -64,7 +64,7 @@ describe('management route permissions', () => {
        '/configs/[id]', '/api/configs/[id]', '/api/configs/inspect',
        '/api/campaigns/[id]/file/[fileId]', '/api/deployments/[id]/file/[fileId]',
        '/api/betas/[id]/revisions/[revision]/files/[scriptId]',
-        '/api/servers/[name]/logs/[file]', '/api/servers/[name]/telemetry-requests'
+        '/api/servers/[name]/logs/[file]', '/api/servers/[name]/telemetry-requests', '/api/servers/[name]/rcon-diagnostics'
    ])('prevents viewer access to secret-bearing raw content at %s', route => {
        for (const method of ['GET', 'HEAD']) {
            expect(routePermission(route, method)).toBe('operator');