article
Token check waved through any URL with "assets" in it
A new multi-tenant assistant service skips its token check for any path containing one word, and the stage right after it wakes that organization's container and forwards the request inside.
Read more