v0.332.0: one sign-in for the file manager — a dashboard pass, a host-only files cookie, a per-box secret header (R-1100, operator D16)

controller/internal/web/datapath_card_test.go

@@ -1,6 +1,7 @@
 package web
 
 import (
+	"net/url"
 	"strings"
 	"testing"
 
@@ -42,7 +43,7 @@ func TestAppInfo_DataPathCardRenders(t *testing.T) {
 	}
 	// The deep link must reach the page INTACT — this is the assertion the brief asks for, and it is
 	// what would have caught the v0.150.0 class of bug (a key rendered where another belonged).
-	if !strings.Contains(html, "https://files.demo-felhom.eu/files/Beolvas%C3%A1s/paperless") {
+	if !strings.Contains(html, "https://felhom.demo-felhom.eu/__files/open?to="+url.QueryEscape("/files/Beolvas%C3%A1s/paperless")) {
 		t.Errorf("the FileBrowser deep link must render intact; body:\n%s", excerpt(html, "datapath"))
 	}
 	if !strings.Contains(html, "nem készül róla biztonsági mentés") {