Skip to content

Member removal requires a signed session

← Back to all
  • API

The member removal endpoint rejects forged identity cookies before deleting a member.

Details

Fixed: member removal endpoint now requires a valid signed session; forged identity cookies are rejected before deletion (HTPR-5806)