Kristoffer Dalby 7f9ad511a4 api/v2: bound every request body ...

huma gives RawBody no limit, and validates a whole body before
the handler runs. The token form is parsed before the secret check.

2026-10-28 18:28:23 +00:00

..

v1

db, state: keep the ephemeral flag a node was created with

2026-10-28 18:28:22 +00:00

v2

api/v2: bound every request body

2026-10-28 18:28:23 +00:00