fix(auth): attach Bearer token to /api/bots requests #12
Reference in New Issue
Block a user
Delete Branch "fix/auth-interceptor-api-bots"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
OfficialBotService posts to /api/bots/official/join-tournament, but
the auth interceptor's protected-endpoint whitelist omitted /api/bots,
so no Authorization header was sent and the request hit the official-
bots service anonymously -> 401.
Add /api/bots to the whitelist.
Co-Authored-By: Claude Opus 4.8 noreply@anthropic.com