Use OTKPreAuthFilter attributes instead of re-validating OTK in NotesController

ส่งแล้ว

23 มีนาคม 2569 เวลา 01:56 UTC

ผู้เขียน

Kamo

ตั้งค่า

cdb3b68

The OTKPreAuthFilter already consumes and validates the OTK, storing the session data in request attributes. NotesController was trying to re-validate the already-consumed OTK, causing authentication failures. Now reads from request attributes first, matching MemberController pattern.