mirror of
https://github.com/getnora-io/nora.git
synced 2026-04-12 09:10:32 +00:00
Prevent accidental exposure of unknown /api/tokens/* sub-paths. Only the three known routes are now explicitly whitelisted in is_public_path: /api/tokens, /api/tokens/list, /api/tokens/revoke.