fix(security): remove cookie-based API key auth and add security headers (CWE-522, CWE-200, CWE-693)#245

Open

nobugpal wants to merge 2 commits into

Anil-matcha:mainfrom

nobugpal:fix/ogai-002-api-key-security

Commits on Jun 28, 2026

fix(security): remove cookie-based API key auth and add security headers

wyytjh
and
claude
committed
fix(security): expand middleware to all routes, remove remaining key logging

wyytjh
and
claude
committed