mirror of
https://github.com/appwrite/appwrite.git
synced 2026-05-26 13:51:13 +00:00
Revert controller to original form without console API key generation to avoid leaking JWT to untrusted remote endpoints. In the worker, only set consoleApiKey when the source endpoint matches the local endpoint, ensuring the locally-signed JWT is never sent cross-instance.