Kristoffer Dalby 8b3b6cf4b9 api/v2: check the createKey scope before reading the body ...

createKey has no static scope, so any token got its body parsed
and validated before the handler's scope check.

2026-10-28 07:15:55 +00:00

..

v1

db, state: keep the ephemeral flag a node was created with

2026-10-28 07:15:54 +00:00

v2

api/v2: check the createKey scope before reading the body

2026-10-28 07:15:55 +00:00