Zareian 8835e01595 Remove guest login: every user registers with a phone number ...

POST /api/auth/session is gone (404). Existing is_guest rows keep refresh and
upgrade-by-phone until the demo/guest rows are purged; the code that serves
them is listed in docs/security-before-production.md §10. Tests that used the
endpoint as a fixture now use accounts/testing.guest_session.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

2026-10-05 17:38:18 +03:30

23 KiB

Raw Blame History

View Raw