Accept X-***-Token header on my-networks + all-networks

Shipped

July 16, 2026 at 7:06 AM UTC

Author

Kamo

Commit

db3095b

getMyNetworks/getAllNetworks only read the OTK request-attr or the *** cookie, — no org beyond the device-exchanged primary ever loaded, and the active org had no name/logo. Both now resolve via CallerSessionResolver (OTK attr / X-***-Token header / *** cookie), matching the other mobile-facing endpoints.