mirror of
https://github.com/Tria-plc/edr-platform.git
synced 2026-08-27 09:42:53 +00:00
FreightPermissionGuard now rejects non-employee user types before the key check, making every BookingStaff route staff-only in one place. Adds PortalCustomer and MixedAudience for the routes both audiences share, and stops ServiceAuthGuard failing open when SERVICE_AUTH_TOKEN is unset.