sneak 5f3ff448ab test: show quality and fit are not covered by the URL signature ...

Add Quality and FitMode fields to signature.Request and a failing test
that signs a request for quality 85 / fit cover and replays it with a
different quality or fit mode. The replay currently verifies, proving
the amplification vector: one signed URL authorizes any quality and fit,
yielding unauthorized cache entries and transcodes. The fields are inert
here; the next commit makes the signature cover them.

model: claude-opus-4-8

2026-09-21 07:30:57 +00:00

..

golden_test.go

chore: update golangci-lint to v2.12.2 with canonical config (#54)

2026-08-10 16:12:22 +02:00

quality_fit_test.go

test: show quality and fit are not covered by the URL signature

2026-09-21 07:30:57 +00:00

signature_test.go

chore: update golangci-lint to v2.12.2 with canonical config (#54)

2026-08-10 16:12:22 +02:00

signature.go

test: show quality and fit are not covered by the URL signature

2026-09-21 07:30:57 +00:00