fix: use authenticated user ID for bin operations instead of client-supplied dj_id#178

Open

jakebromberg wants to merge 6 commits intomainfrom

Commits on Feb 27, 2026

fix: use authenticated user ID for bin operations instead of client-supplied dj_id

Jake Bromberg
and
cursoragent
committed
style: format files with Prettier
Jake Bromberg
committed
test: update bin integration tests for IDOR fix
Jake Bromberg
committed

Commits on Feb 28, 2026

fix: populate req.auth in AUTH_BYPASS mode for bin endpoints
Jake Bromberg
committed
fix: always use real JWT in integration tests
Jake Bromberg
committed
fix: set auth credentials in CI for real JWT tokens
Jake Bromberg
committed