mirror of
https://github.com/yusufipk/OpenFrame.git
synced 2026-09-11 09:36:08 +00:00
The api suite enumerates every route module under app/api and requires each one to be classified as session-guarded or deliberately public. The new cancel route was neither, so the suite failed on an unclassified module and on the module count. It takes the same shape as the other billing routes: a session plus a same-origin header.