Would you ship this endpoint?

Situation

AI generated an admin endpoint for downloading export files.

Environment

FastAPI backend with JWT admin authentication. Export files are stored in /var/exports/.

Select suspicious lines in the terminal to flag them before submitting your verdict.

pending review

from fastapi import APIRouter, Depends
from fastapi.responses import FileResponse
from app.auth import require_admin

router = APIRouter()

@router.get("/exports/download")
async def download_export(
    filename: str,
    admin=Depends(require_admin)
):
    file_path = f"/var/exports/{filename}"
    return FileResponse(file_path)