mirror of
https://github.com/garrytan/gstack.git
synced 2026-05-07 05:56:41 +02:00
413b570942
Remove the conditional if(authToken) guard that skipped auth when authToken was undefined. Now all cookie picker data/action routes reject unauthenticated requests. Closes H2 from security audit #783. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>