mirror of
https://github.com/Wei-Shaw/sub2api.git
synced 2026-10-21 05:11:44 +00:00
Require oauth state/redirect consistency, fail closed on missing proxy, and remove password login from create/reauth UI (admin-only password path stays off by default).