-
Check max-age only after checking permissions: if neither is passing, we want a 403 error; simply authenticating again won't fix it so don't bother reauth flow. After forbidden flow e.g. account change we are already good with max-age too.
released this
2026-08-11 00:56:01 +00:00 | 27 commits to main since this releaseDownloads