docs+test(closeout): final-review reservations — stale ACL prose, worker test gaps, config sample fix

2026-08-17 05:23:23 -04:00
parent f5a58d884b
commit b621d692d0
18 changed files with 167 additions and 46 deletions
@@ -751,7 +751,7 @@ secure, and strict SameSite. It is named `__Host-MxGatewayDashboard` when
 `MxGateway:Dashboard:CookieName` override is set; otherwise it falls back to the
 plain `MxGatewayDashboard` name (the `__Host-` prefix requires a Secure cookie).
 Logout clears it. Login and logout posts validate antiforgery tokens. SignalR
-connections additionally accept a 30-minute data-protected bearer minted at
+connections additionally accept a 5-minute data-protected bearer minted at
 `/hubs/token`. `Dashboard:AllowAnonymousLocalhost` permits loopback requests
 to bypass the cookie requirement and defaults to `true`.