Security Reviewer 4d30bacc53 Fix VoicePrint auth bypass & audio upload (FRE-5003)
P1-2: Add onRequest auth hook to reject anonymous requests on all 7
VoicePrint endpoints. Previously, the auth middleware always attached
a placeholder user (id='anonymous'), so per-route userId checks passed
for unauthenticated clients.

P1-3: Replace JSON body parsing with @fastify/multipart for POST
/endpoints (/enroll, /analyze, /batch). Fastify JSON parser cannot
produce Buffer from request.body; multipart/form-data is required
for audio file uploads. Added 50MB file size limit.
2026-05-10 03:20:31 -04:00
2026-05-03 22:45:03 -04:00
2026-05-02 09:37:30 -04:00
Description
No description provided
1.3 MiB
Languages
TypeScript 84.7%
HCL 5.1%
JavaScript 3.6%
Shell 3.1%
HTML 2.8%
Other 0.7%