mrhid6 92692de94d docs: Correct the middleware fallback in the plan ...

The plan's Middleware called sessionFromToken even when sessionFromCookie
had already answered a rejected cookie, putting two JSON bodies on the
wire for the ordinary expired-session case. Found in review of Task 5.

2026-08-12 14:34:54 +00:00

..

plans

docs: Correct the middleware fallback in the plan

2026-08-12 14:34:54 +00:00

specs

docs: Specify scoped API tokens and an OpenAPI reference

2026-08-12 13:59:03 +00:00