article
New API stopped asking the old one who you are
The per-request call to the old API is cut, and the new one checks sessions itself: the token only says which session, and roles, expiry, suspension and the second-factor rule come from live state every time.
Read more 6m read