refactor: remove dead session code

2026-05-20 14:23:01 +02:00
parent 0128191ac3
commit a7827b2fa6
5 changed files with 27 additions and 84 deletions
@@ -210,8 +210,8 @@ async def _require_token(
    SDK sends — LibreChat, the CLI, third-party clients) and
    ``Authorization: Bearer <token>`` (curl, Cursor). 401 on missing /
    unknown token; 403 on a known token whose scope doesn't cover
-    ``scope`` (Phase 4.3 — bootstrap tokens get ``"*"`` and pass
-    everything).
+    ``scope``. Bootstrap tokens implicitly carry ``"*"`` and pass
+    every scope check.
    """
    api_key = request.headers.get("x-api-key")
    identity = (