bug: remove refresh endpoint and require auth#6256

Closed

chloebyun-wd wants to merge 3 commits intomainfrom

bug/524/unauthenticated-oauth-refresh-token

Commits on Apr 20, 2026

bug: rm refresh endpoint and require auth
Chloe Byun
committed

Commits on Apr 21, 2026

pr
Chloe Byun
committed
fix: thread internalRefreshKey through agentflows, cache encryption key, use timing-safe comparison

Chloe Byun
and
claude
committed