fix(auth): 補 StartSession middleware 給 OAuth routes #24

Merged
a620906209 merged 1 commits from security/auth-p2-lockout-oauth-state into master 2026-06-02 17:47:58 +00:00
Owner

api.php 的 route 預設無 session middleware,
移除 stateless() 後 session() 呼叫直接 500。
只對 /auth/google/* 兩個 route 加 StartSession,不影響其他 API endpoint。

Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com

api.php 的 route 預設無 session middleware, 移除 stateless() 後 session() 呼叫直接 500。 只對 /auth/google/* 兩個 route 加 StartSession,不影響其他 API endpoint。 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
a620906209 added 1 commit 2026-06-02 17:47:53 +00:00
api.php 的 route 預設無 session middleware,
移除 stateless() 後 session() 呼叫直接 500。
只對 /auth/google/* 兩個 route 加 StartSession,不影響其他 API endpoint。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
a620906209 merged commit 981f753480 into master 2026-06-02 17:47:58 +00:00
a620906209 deleted branch security/auth-p2-lockout-oauth-state 2026-06-02 17:47:58 +00:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: a620906209/CFDivePlatform#24