lebaudantoine e42b083f20 🛂(backend) reject user access tokens on the API ...

The original implementation, introduced two years ago, was incorrect
and exposed the API to an undesired authentication mode: any user
access token obtained for a given user was being accepted as valid
credentials on the external API.

Restrict authentication to the intended mode so that user access
tokens are no longer accepted on this API.

Thanks @lunika spotting this.

2026-07-01 11:24:59 +02:00

..

__init__.py

✨(project) Django boilerplate

2024-06-25 12:48:54 +02:00

backends.py

🛂(backend) reject user access tokens on the API

2026-07-01 11:24:59 +02:00

livekit.py

♻️(backend) use Authorization header for LiveKit token authentication

2026-04-09 00:37:43 +02:00