mirror of
https://github.com/screentinker/screentinker.git
synced 2026-06-17 03:32:32 -06:00
1f207c4278
api_tokens.auto_publish (DEFAULT 0 = draft, the fail-safe). Admin sets it at token creation in the designate UI (checkbox, agency scope only). The agency endpoint reads it from the TOKEN ROW via req.apiToken (apiTokenAuth attaches it) - NEVER from req.body, so an agency can't opt itself out of approval. 0 -> markDraft; 1 -> the shared publishPlaylist path. Tests (integration): draft is the default; a draft token with auto_publish:true IN THE BODY still lands draft (body ignored); an auto-publish token goes live; manual publish still works (extraction regression). i18n across all 5 locales. 141 suite green. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| apiToken.js | ||
| auth.js | ||
| sanitize.js | ||
| subscription.js | ||
| upload.js | ||