doxa-life/doxa-maps-cdn
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Token endpoint: clearer comment

Browse source
This commit is contained in:
swift-river542 2026-09-16 23:26:45 -05:00
parent c772b09c50
commit 80caedf0e0
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
server/api/maps/token.get.ts
View file

@ -17,8 +17,8 @@
* 2. Lets us hold an SK in `.env` and never ship it (or any value
* derived from it) to the client; the TK we send back auto-expires
* in 1 hour and can be revoked by rotating the SK.
* 3. Centralizes token logic for any embed (research page, PPLR data
* maps page, future MFEs) — single source of truth.
* 3. Centralizes token logic for every embed (the research page, the maps page and
* any future map) — one source of truth.
*
* Security notes:
* - Returns a token to ANY caller. That's fine because: