Merge pull request #996 from Tria-plc/freight/fix/auth-separation

feat(auth): add login audience middleware (EDRFREIGHT-415)
This commit is contained in:
Nathnael Wondisha
2026-07-28 13:52:42 +03:00
committed by GitHub
12 changed files with 216 additions and 26 deletions

View File

@@ -46,6 +46,9 @@ async function bootstrap() {
"Accept",
"Authorization",
"X-Requested-With",
// Which freight frontend is calling — /auth/login uses this to reject
// cross-audience credentials (EDRFREIGHT-415).
"X-Client-App",
// IAM context headers required by @tria-plc/api-common's JwtGuard
"organization-unit-id",
"delegator-position-id",