Files
dify/api/libs
GareArc 85c3f9cbf8 fix(device-flow): scope approval-grant cookie to /openapi/v1/oauth/device
Phase F retired the legacy /v1/oauth/device/* mounts but the cookie path
still pointed at the dead prefix. Browsers therefore dropped the cookie
on the canonical /openapi/v1/oauth/device/* requests, so SSO-branch
approval-context and approve-external returned 401 no_session even
right after sso-complete had set the cookie.
2026-04-27 01:15:44 -07:00
..
2026-04-16 02:21:04 +00:00
2026-04-16 08:50:02 +00:00
2024-10-21 10:03:40 +08:00
2025-09-18 12:49:10 +08:00