Validate OTK FIRST before loading any theme assets to prevent expiry

Shipped

March 29, 2026 at 4:17 PM UTC

Author

Kamo

Commit

7f222e3

ROOT CAUSE: branding/overrides.js was loading org config, CSS, favicon BEFORE validating the OTK. These network requests took 10+ seconds, causing the OTK to expire before validation → 401 → no session/JWT. Now OTK validation runs as the FIRST thing in loadBranding(), before any theme asset fetches. Theme loading happens after.