- 已装运
- 2026年3月23日 01:56 UTC
- 作者
- Kamo
- 提交
- cdb3b68
The OTKPreAuthFilter already consumes and validates the OTK, storing the session data in request attributes. NotesController was trying to re-validate the already-consumed OTK, causing authentication failures. Now reads from request attributes first, matching MemberController pattern.