Exclude /api/voip/sms/templates from OTK session filter

Shipped

July 3, 2026 at 3:18 PM UTC

Author

Sage

Commit

e384d3e

The doc-07 SMS template endpoints are session-less internal calls guarded by InternalAuthFilter (X-Internal-Auth), but OTKValidationFilter still ran on them and 401'd (no *** session). Add the prefix to its exclusion list, mirroring /api/bulktext/send — startsWith covers all sub-paths.