KamoCRM

Use OTKPreAuthFilter attributes instead of re-validating OTK in NotesController

FixSecurityService
Ya
23 Machi 2026, 01:56 UTC
Mwandishi
Kamo
Ahadi ya
cdb3b68

The OTKPreAuthFilter already consumes and validates the OTK, storing the session data in request attributes. NotesController was trying to re-validate the already-consumed OTK, causing authentication failures. Now reads from request attributes first, matching MemberController pattern.

Mabadiliko yote

Je, unaona nini kuhusu usafiri?

Kila kitu kinaingia kwenye tovuti yako mwenyewe. Anza kwenye mpango wa bure na usome ukurasa huu tena katika mwezi mmoja.

Kuwa Huru MileleMtazamo wa bei