Spaces:
Sleeping
Sleeping
Commit History
-
deploy: operator endpoint for granting the admin role
Guarded by the existing ADMIN_API_KEY shared secret, rate limited to 5/min, and not reachable with a JWT — an admin able to mint admins would turn one stolen session into permanent access. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>909a81a