Gronod 603f444c33 fix(webhooks): mount webhook routes in index.js before verifyCsrf ...

Webhook routes were only registered in app.js (the test factory) but
not in index.js (the production entry point). POST /api/webhook/*
was therefore falling through to the verifyCsrf middleware and being
rejected with 403 in production.

2026-05-19 19:06:36 +01:00

14 KiB

Raw Blame History

View Raw