Function update_settings

app/main.py:242–262

Update runtime settings. Reachable from the host machine always; from a LAN device only while network access is currently on (the gate below), so a phone can't change settings once the owner turned access off.

(request: Request)

@app.post("/api/settings", tags=["settings"])
async def update_settings(request: Request) -> dict[str, object]:
    """Update runtime settings. Reachable from the host machine always; from a
    LAN device only while network access is currently on (the gate below), so a
    phone can't change settings once the owner turned access off."""
    try:
        body = await request.json()
    except Exception:
        body = {}
    if "allow_network" in body:
        set_allow_network(bool(body["allow_network"]))
    for key, setter in (
        ("max_duration_sec", set_max_duration_sec),
        ("video_max_height", set_video_max_height),
        ("port", set_port),
    ):
        if key in body:
            try:
                setter(int(body[key]))
            except (TypeError, ValueError):
                raise HTTPException(status_code=422, detail=f"{key} must be an integer") from None
    return _settings_payload()


# Content-Security-Policy. Defense-in-depth so an injected string in the webview