Prevent accidental exposure of unknown /api/tokens/* sub-paths. Only the three known routes are now explicitly whitelisted in is_public_path: /api/tokens, /api/tokens/list, /api/tokens/revoke.
Copyright (c) 2026 Volkov Pavel | DevITWay SPDX-License-Identifier: MIT
- LocalStorage tests: put/get, list, stat, health_check, nested dirs - S3Storage tests with wiremock HTTP mocking - Auth/htpasswd tests: loading, validation, public paths - Token lifecycle tests: create, verify, expire, revoke Total: 75 tests passing
Cloud-native multi-protocol artifact registry in Rust. - Docker Registry v2 - Maven (+ proxy) - npm (+ proxy) - Cargo, PyPI - Web UI, Swagger, Prometheus - Local & S3 storage - 32MB Docker image Created by DevITWay https://getnora.io