Guard /internal/voip with InternalAuthFilter as documented — it 401'd on session auth

Shipped

July 11, 2026 at 12:15 AM UTC

Author

Kamo

Commit

ca6c128

VoipInternalSyncController always documented InternalAuthFilter as its guard, but /internal/voip was never in PROTECTED_PREFIXES nor excluded from the OTK session filter — so DaemonService's VoipGlobalSyncJob got 'Missing X-OTK' 401s every run. Registered the prefix in both filters.