#dev 2019-10-19

2019-10-19 UTC

[fluffy] I assume it uses the validity of authenticity_token (which is probably what it forwards along to the callback) along with the fact the user has a valid session