Repository navigation

fix(user-management): Reject non-user access tokens in session cookies - #1753

Merged

m0tzy merged 2 commits into

mainfrom

fix/cookie-session-user-token-family

Nov 4, 2026

Merged

fix(user-management): Reject non-user access tokens in session cookies#1753
m0tzy merged 2 commits into
mainfrom
fix/cookie-session-user-token-family

Commits on Nov 4, 2026
- fix(user-management): Reject non-user access tokens in session cookies
  
  m0tzy
  and
  devin-ai-integration[bot]
  committed
  86e3cd1
- refactor(user-management): Read session cookie claims from the verified payload
  
  m0tzy
  and
  devin-ai-integration[bot]
  committed
  5b0a7b2