1 Commits

Author SHA1 Message Date
Julien Calixte
5016c5cd47 feat(push): owner-only gate and subscription body validation (T10)
isOwner compares the session email to the configured owner; the body
matches the browser PushSubscription.toJSON() shape, reporter resolved
server-side.
2026-05-28 01:19:19 +02:00