mirror of
https://github.com/appwrite/appwrite.git
synced 2026-05-26 13:51:13 +00:00
86ea75026f
Revert controller to original form without console API key generation to avoid leaking JWT to untrusted remote endpoints. In the worker, only set consoleApiKey when the source endpoint matches the local endpoint, ensuring the locally-signed JWT is never sent cross-instance.