KamoCRM

Delete /api/auto-login, which no longer has a caller

Chorekamo-login
Shipped
28 ஆகஸ்ட், 2026 அன்று 12:49 AM UTC
Author
Kamo
Commit
3bbafd8

The endpoint existed to turn an existing *** cookie into an OTK and a redirect so the login page could forward a signed-in member straight into their workspace. That forwarding was removed in the previous commit — it made the sign-in form unreachable for anyone already signed in — and nothing has called this since. Checked before deleting, because an endpoint is reachable by things a grep of one repository will not show: no caller in any repository here, no ingress or proxy rule naming the path, and its only import (app/lib/redis) is still used by four other routes, so nothing is orphaned. kamo-register's autoLoginHost is unrelated despite the name — it deep-links to /validate?otk=, a different mechanism. Also clears what the deletion would have left dangling: /api/trial-status documented itself as mirroring "the org lookup in /api/auto-login", and the logout page plus five [AUTO-LOGIN] log tags described a flow that no longer exists.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free ForeverView Pricing