AI-written code hardcoded a JWT secret and left API routes unauthenticated, allowing attackers to forge tokens and access protected endpoints.

-from fastapi import APIRouter, HTTPException, Depends, Request-from fastapi.responses import StreamingResponse, Response-from sqlalchemy.ext.asyncio import AsyncSession+from fastapi import APIRouter, Depends, HTTPException, Request+from fastapi.responses import Response, StreamingResponse from sqlalchemy import select+from sqlalchemy.ext.asyncio import AsyncSession  from backend.app.core.database import get_db from backend.app.models.printer import Printer from backend.app.services.camera import (-    build_camera_url,     capture_camera_frame,-    test_camera_connection,-    get_ffmpeg_path,     get_camera_port,+    get_ffmpeg_path,+    test_camera_connection, )-from backend.app.services.printer_manager import printer_manager  logger = logging.getLogger(__name__) router = APIRouter(prefix="/printers", tags=["camera"])@@ -27,6 +24,17 @@ router = APIRouter(prefix="/printers", tags=["camera"]) # Track active ffmpeg processes for cleanup _active_streams: dict[str, asyncio.subprocess.Process] = {} +# Store last frame for each printer (for photo capture from active stream)+_last_frames: dict[int, bytes] = {}+++def get_buffered_frame(printer_id: int) -> bytes | None:+    """Get the last buffered frame for a printer from an active stream.++    Returns the JPEG frame data if available, or None if no active stream.+    """+    return _last_frames.get(printer_id)+  async def get_printer_or_404(printer_id: int, db: AsyncSession) -> Printer:     """Get printer by ID or raise 404."""@@ -44,6 +52,7 @@ async def generate_mjpeg_stream(     fps: int = 10,     stream_id: str | None = None,     disconnect_event: asyncio.Event | None = None,+    printer_id: int | None = None, ) -> AsyncGenerator[bytes, None]:     """Generate MJPEG stream from printer camera using ffmpeg. @@ -52,11 +61,7 @@ async def generate_mjpeg_stream(     ffmpeg = get_ffmpeg_path()     if not ffmpeg:         logger.error("ffmpeg not found - camera streaming requires ffmpeg")-        yield (-            b"--frame\r\n"-            b"Content-Type: text/plain\r\n\r\n"-            b"Error: ffmpeg not installed\r\n"-        )+        yield (b"--frame\r\n" b"Content-Type: text/plain\r\n\r\n" b"Error: ffmpeg not installed\r\n")         return      port = get_camera_port(model)@@ -70,14 +75,20 @@ async def generate_mjpeg_stream(     # -r: Output framerate     cmd = [         ffmpeg,-        "-rtsp_transport", "tcp",-        "-rtsp_flags", "prefer_tcp",-        "-i", camera_url,-        "-f", "mjpeg",-        "-q:v", "5",-        "-r", str(fps),+        "-rtsp_transport",+        "tcp",+        "-rtsp_flags",+        "prefer_tcp",+        "-i",+        camera_url,+        "-f",+        "mjpeg",+        "-q:v",+        "5",+        "-r",+        str(fps),         "-an",  # No audio-        "-"  # Output to stdout+        "-",  # Output to stdout     ]      logger.info(f"Starting camera stream for {ip_address} (stream_id={stream_id})")@@ -121,10 +132,7 @@ async def generate_mjpeg_stream(              try:                 # Read chunk from ffmpeg-                chunk = await asyncio.wait_for(-                    process.stdout.read(8192),-                    timeout=10.0-                )+                chunk = await asyncio.wait_for(process.stdout.read(8192), timeout=10.0)                  if not chunk:                     logger.warning("Camera stream ended (no more data)")@@ -150,8 +158,12 @@ async def generate_mjpeg_stream(                         break                      # Extract complete frame-                    frame = buffer[:end_idx + 2]-                    buffer = buffer[end_idx + 2:]+                    frame = buffer[: end_idx + 2]+                    buffer = buffer[end_idx + 2 :]

 import logging import zipfile-from pathlib import Path  from fastapi import APIRouter, Depends, HTTPException--logger = logging.getLogger(__name__) from fastapi.responses import Response-from sqlalchemy.ext.asyncio import AsyncSession from sqlalchemy import select+from sqlalchemy.ext.asyncio import AsyncSession -from backend.app.core.database import get_db from backend.app.core.config import settings+from backend.app.core.database import get_db from backend.app.models.printer import Printer from backend.app.models.slot_preset import SlotPresetMapping from backend.app.schemas.printer import (+    AMSTray,+    AMSUnit,+    HMSErrorResponse,+    NozzleInfoResponse,     PrinterCreate,-    PrinterUpdate,     PrinterResponse,     PrinterStatus,-    HMSErrorResponse,-    AMSUnit,-    AMSTray,-    NozzleInfoResponse,+    PrinterUpdate,     PrintOptionsResponse, )

+from backend.app.services.bambu_mqtt import get_stage_name+from backend.app.services.printer_manager import printer_manager -+logger = logging.getLogger(__name__) router = APIRouter(prefix="/printers", tags=["printers"])  @@ -53,9 +49,7 @@ async def create_printer( ):     """Add a new printer."""     # Check if serial number already exists-    result = await db.execute(-        select(Printer).where(Printer.serial_number == printer_data.serial_number)-    )+    result = await db.execute(select(Printer).where(Printer.serial_number == printer_data.serial_number))     if result.scalar_one_or_none():         raise HTTPException(400, "Printer with this serial number already exists") @@ -172,20 +166,22 @@ async def get_printer_status(printer_id: int, db: AsyncSession = Depends(get_db)                 tray_uuid = tray_data.get("tray_uuid", "")                 if tray_uuid in ("", "00000000000000000000000000000000"):                     tray_uuid = None-                trays.append(AMSTray(-                    id=tray_data.get("id", 0),-                    tray_color=tray_data.get("tray_color"),-                    tray_type=tray_data.get("tray_type"),-                    tray_sub_brands=tray_data.get("tray_sub_brands"),-                    tray_id_name=tray_data.get("tray_id_name"),-                    tray_info_idx=tray_data.get("tray_info_idx"),-                    remain=tray_data.get("remain", 0),-                    k=tray_data.get("k"),-                    tag_uid=tag_uid,-                    tray_uuid=tray_uuid,-                    nozzle_temp_min=tray_data.get("nozzle_temp_min"),-                    nozzle_temp_max=tray_data.get("nozzle_temp_max"),-                ))+                trays.append(+                    AMSTray(+                        id=tray_data.get("id", 0),+                        tray_color=tray_data.get("tray_color"),+                        tray_type=tray_data.get("tray_type"),+                        tray_sub_brands=tray_data.get("tray_sub_brands"),+                        tray_id_name=tray_data.get("tray_id_name"),+                        tray_info_idx=tray_data.get("tray_info_idx"),+                        remain=tray_data.get("remain", 0),+                        k=tray_data.get("k"),+                        tag_uid=tag_uid,+                        tray_uuid=tray_uuid,+                        nozzle_temp_min=tray_data.get("nozzle_temp_min"),+                        nozzle_temp_max=tray_data.get("nozzle_temp_max"),+                    )+                )             # Prefer humidity_raw (percentage) over humidity (index 1-5)             # humidity_raw is the actual percentage value from the sensor             humidity_raw = ams_data.get("humidity_raw")@@ -205,13 +201,15 @@ async def get_printer_status(printer_id: int, db: AsyncSession = Depends(get_db)             # AMS-HT has 1 tray, regular AMS has 4 trays             is_ams_ht = len(trays) == 1 -            ams_units.append(AMSUnit(-                id=ams_data.get("id", 0),-                humidity=humidity_value,-                temp=ams_data.get("temp"),-                is_ams_ht=is_ams_ht,-                tray=trays,-            ))+            ams_units.append(+                AMSUnit(+                    id=ams_data.get("id", 0),+                    humidity=humidity_value,+                    temp=ams_data.get("temp"),

+from backend.app.models.user import User from backend.app.services.camera import (     capture_camera_frame,     generate_chamber_image_stream,@@ -353,6 +356,8 @@ async def camera_stream(     This endpoint returns a multipart MJPEG stream that can be used directly     in an <img> tag or video player. +    Note: Unauthenticated - loaded via <img> tags which can't send auth headers.+     Uses external camera if configured, otherwise uses built-in camera:     - External: MJPEG, RTSP, or HTTP snapshot     - A1/P1: Chamber image protocol (port 6000)@@ -476,7 +481,10 @@ async def camera_stream(   @router.api_route("/{printer_id}/camera/stop", methods=["GET", "POST"])

     This can be called by the frontend when the camera window is closed.@@ -527,6 +535,8 @@ async def camera_snapshot(     """Capture a single frame from the printer camera.      Returns a JPEG image.++    Note: Unauthenticated - loaded via <img> tags which can't send auth headers.     """     import tempfile     from pathlib import Path@@ -574,6 +584,7 @@ async def camera_snapshot(

@@ -591,7 +602,10 @@ async def test_camera(   @router.get("/{printer_id}/camera/status")

     Returns whether a stream is active and when the last frame was received.@@ -658,6 +672,7 @@ async def test_external_camera(

@@ -684,6 +699,7 @@ async def check_plate_empty(

@@ -791,6 +807,7 @@ async def calibrate_plate_detection(

@@ -854,6 +871,7 @@ async def delete_plate_calibration(

@@ -894,6 +912,7 @@ async def get_plate_detection_status(

@@ -937,6 +956,7 @@ async def get_plate_detection_status(

@@ -971,7 +991,10 @@ async def get_reference_thumbnail(     index: int,     db: AsyncSession = Depends(get_db), ):-    """Get thumbnail image for a calibration reference."""+    """Get thumbnail image for a calibration reference.++    Note: Unauthenticated - loaded via <img> tags which can't send auth headers.