KamoCRM

Accept X-***-Token header on my-networks + all-networks

FixSecurityService
Shipped
16 ஜூலை, 2026 அன்று 7:06 AM UTC
Author
Kamo
Commit
db3095b

getMyNetworks/getAllNetworks only read the OTK request-attr or the *** cookie, — no org beyond the device-exchanged primary ever loaded, and the active org had no name/logo. Both now resolve via CallerSessionResolver (OTK attr / X-***-Token header / *** cookie), matching the other mobile-facing endpoints.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free ForeverView Pricing