feat(auth): per-project allowed app domains (CORS + CSRF + tenant trust)

flndrn · 4w ago

c4ef6e0a808a089bd9363807ba0c100b3ffbd935

Parent: e3b31a5