Use OTKPreAuthFilter attributes instead of re-validating OTK in NotesController

Dikirim

23 Maret 2026 pukul 01.56 UTC

Penulis

Kamo

Commit

cdb3b68

The OTKPreAuthFilter already consumes and validates the OTK, storing the session data in request attributes. NotesController was trying to re-validate the already-consumed OTK, causing authentication failures. Now reads from request attributes first, matching MemberController pattern.