decentraland / builder-server / 23296584074 / 1

72%

master: 72%

push

github

fix: AssetPacks router (#798)

* fix: Asset-packs id parent when upserting

Force asset_pack_id to match the URL parameter instead of trusting
the client-supplied value in the request body.

* fix: restrict asset endpoints to authenticated owners

Add authentication and ownership checks to GET /assets and GET /assets/:id.
Assets are now filtered by the caller's address or the default address,
preventing cross-user asset discovery.

* fix: Remove unrequired mock

* fix: validate asset ownership and filter deleted packs in asset queries

- Filter out assets from deleted packs in findByIds (both branches)
- Reject upsert with 400 if assets already belong to a different pack
- Use generic error messages to avoid leaking ownership info

1029 of 1621 branches covered (63.48%)

Branch coverage included in aggregate %.

3238 of 4324 relevant lines covered (74.88%)

20.73 hits per line