From 80caedf0e0add7d7d9b908dfceb6189c3ab28ae4 Mon Sep 17 00:00:00 2001 From: swift-river542 Date: Wed, 16 Sep 2026 23:26:45 -0500 Subject: [PATCH] Token endpoint: clearer comment --- server/api/maps/token.get.ts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/server/api/maps/token.get.ts b/server/api/maps/token.get.ts index 89c8a442..62cee7d6 100644 --- a/server/api/maps/token.get.ts +++ b/server/api/maps/token.get.ts @@ -17,8 +17,8 @@ * 2. Lets us hold an SK in `.env` and never ship it (or any value * derived from it) to the client; the TK we send back auto-expires * in 1 hour and can be revoked by rotating the SK. - * 3. Centralizes token logic for any embed (research page, PPLR data - * maps page, future MFEs) — single source of truth. + * 3. Centralizes token logic for every embed (the research page, the maps page and + * any future map) — one source of truth. * * Security notes: * - Returns a token to ANY caller. That's fine because: