Add auth check and sanitize input on POST /org

Shipped

March 13, 2026 at 6:05 AM UTC

Author

Kamo

Commit

6b165c2

- Return 401 if no authenticated user (prevents orphan orgs) - Build Organization from allowed fields only (prevents mass-assignment) - Fix colors field name (was colorPalettePair, should be colors)