7.76.1 — correctif : /mcp exempté du CSRF (client Bearer machine-à-machine)
FlowDeck CI / lint (push) Failing after 1m28s
FlowDeck CI / test (push) Failing after 22m55s
FlowDeck CI / docker (push) Skipped

Le middleware CSRF rejetait tout POST /mcp en 403 avant la route ;
les tests passaient car leur client porte session + CSRF. Test de
régression : client anonyme Bearer seul (200 avec jeton, 401 sans).
This commit is contained in:
Spark
2026-10-22 08:42:42 -04:00
parent 465b72235c
commit fae335f808
3 changed files with 22 additions and 2 deletions
+1 -1
View File
@@ -1 +1 @@
7.76.0
7.76.1