Skylar Grant
2f137afd5f
All checks were successful
Build and push image / build (push) Successful in 13s
Any Zoho account can approve the client, and an outside account got a session that returned the .env site, group and technician names. ALLOWED_EMAIL_DOMAINS is now required: the callback refuses other domains and revokes their token, and every API call re-checks it so older cookies stop working. /api/names also makes the caller's token read from SDP before returning the shared names. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| NOTES.md | ||
| ROADMAP.md | ||