Kristoffer Dalby b997748d82 api/v2: check the createKey scope before reading the body ...

createKey has no static scope, so any token got its body parsed
and validated before the handler's scope check.

2026-11-02 17:46:54 +00:00

..

v1

db, state: keep the ephemeral flag a node was created with

2026-11-02 17:46:53 +00:00

v2

api/v2: check the createKey scope before reading the body

2026-11-02 17:46:54 +00:00