Only allow nested paths for signed requests at the moment. To avoid link resolve confusion. #516

Author: EmileSonneveld

openeo_driver/views.py

@@ -1489,7 +1489,7 @@ def _stream_from_s3(s3_url, *, filename, mimetype: Optional[str], bytes_range: O
 
             raise
 
-    @blueprint.route('/jobs/<job_id>/results/items/<user_base64>/<secure_key>/<item_id>', methods=['GET'])
+    @blueprint.route("/jobs/<job_id>/results/items/<user_base64>/<secure_key>/<path:item_id>", methods=["GET"])
     def get_job_result_item_signed(job_id, user_base64, secure_key, item_id):
         expires = request.args.get('expires')
         signer = get_backend_config().url_signer
@@ -1498,7 +1498,7 @@ def get_job_result_item_signed(job_id, user_base64, secure_key, item_id):
         return _get_job_result_item(job_id, item_id, user_id)
 
     @api_endpoint
-    @blueprint.route('/jobs/<job_id>/results/items11/<user_base64>/<secure_key>/<item_id>', methods=['GET'])
+    @blueprint.route("/jobs/<job_id>/results/items11/<user_base64>/<secure_key>/<path:item_id>", methods=["GET"])
     def get_job_result_item11_signed(job_id, user_base64, secure_key, item_id):
         expires = request.args.get('expires')
         signer = get_backend_config().url_signer