Marc-André Bombeck 45fec0fc1b feat(02-12.1): refuse a record request whose context has moved ...

- both record resolvers check the fence after authentication and before
  the carrier, off the one session row that also decides the scope
- POST /api/account/switch takes an optional expectedEpoch and writes
  conditionally, so concurrent switchers resolve to one outcome
- GET /api/auth/me publishes the context a browser bootstraps from
- every response that resolved a record scope echoes it back
- regenerate the API contract

2026-08-06 18:21:40 +02:00

1.3 MiB

Raw Blame History