465d429e09
- Best-effort JWT parsing on every request (non-blocking for unauthenticated routes) - Attaches parsed payload to req.jwtPayload for downstream use by getRequestProductId() - Invalid/expired tokens silently ignored — auth-required routes handle their own validation |
||
|---|---|---|
| .. | ||
| src | ||
| .gitignore | ||
| Dockerfile | ||
| package.json | ||
| tsconfig.json | ||
| vitest.config.ts | ||