Accept X-***-Token on REST; slide TTL with per-session timeout

Shipped: July 15, 2026 at 7:06 PM UTC
Author: Kamo
Commit: d39d131

OTKPreAuthFilter resolves X-***-Token when no X-OTK is present (same call MediaService REST without the BFF. KSessionService now slides the Redis TTL with the session's own sessionTimeoutMinutes instead of the 30-min global.

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free Forever View Pricing