Merge branch 'master' into stable24

lib/Controller/AlbumsController.php

@@ -55,6 +55,8 @@ class AlbumsController extends ApiBase
     /**
      * @NoAdminRequired
      *
+     * @UseSession
+     *
      * Download an album as a zip file
      */
     public function download(string $name = ''): JSONResponse

lib/Controller/DownloadController.php

@@ -36,6 +36,8 @@ class DownloadController extends ApiBase
      *
      * @PublicPage
      *
+     * @UseSession
+     *
      * Request to download one or more files
      */
     public function request(): JSONResponse
@@ -55,6 +57,8 @@ class DownloadController extends ApiBase
     /**
      * Get a handle for downloading files.
      *
+     * The calling controller must have the UseSession annotation.
+     *
      * @param string $name  Name of zip file
      * @param int[]  $files
      */

src/components/viewer/Viewer.vue

@@ -1130,8 +1130,10 @@ export default class Viewer extends Mixins(GlobalMixin) {
 
   transition: opacity 0.2s ease-in-out;
   opacity: 0;
+  pointer-events: none;
   &.showControls {
     opacity: 1;
+    pointer-events: auto;
   }
 }
 
@@ -1143,6 +1145,7 @@ export default class Viewer extends Mixins(GlobalMixin) {
   position: fixed;
   bottom: 0;
   left: 0;
+  pointer-events: none;
 
   transition: opacity 0.2s ease-in-out;
   opacity: 0;