wizardchen 040504447e fix(security): block refresh tokens as bearer and sandbox MCP uploads ...

Reject refresh JWTs in ValidateToken, revoke all user sessions on logout,
and restrict create_knowledge_from_file to allowed directories on network MCP transports.

2026-07-02 17:08:17 +08:00

..

repository

feat(embed): scope OAuth and sessions per visitor principal

2026-06-30 20:01:05 +08:00

service

fix(security): block refresh tokens as bearer and sandbox MCP uploads

2026-07-02 17:08:17 +08:00