Fetch avatar URL from SecurityService API instead of constructing from hash

Ya: 30 Machi 2026, 04:00 UTC
Mwandishi: Kamo
Ahadi ya: ee7ab09

The static URL construction from the session hash was returning 404/500 because Avatar Creator SVGs aren't always stored at the expected MinIO path. Now the sidecar fetches the avatar URL from the SecurityService API (GET /api/security/members/{id}) — the same endpoint kamo-internal uses. This returns the actual accessible URL that the backend constructs, handling Avatar Creator/photo avatars correctly including presigned URLs. The sidecar generates a temporary OTK from the *** to authenticate the API call. Falls back to hash-based URL construction on failure.

Mabadiliko yote

Je, unaona nini kuhusu usafiri?

Kila moja ya hizi updates ardhi katika nafasi yako ya kazi moja kwa moja. Kuanza bure na kuangalia kukua wiki baada ya wiki.

Kuwa Huru Milele Mtazamo wa bei