Move SSE auth off the `?token={JWT}` query param to a Fetch-based `EventSource` implementation that attaches an `Authorization` header. **Tasks** - [ ] Fetch-based EventSource attaches `Authorization: Bearer …` - [ ] Confirm the terminal/cURL flow still works - [ ] Deprecate the `?token={jwt}` path (warn now, remove in a later major) (WebSocket removal already shipped in #190.) Part of #194
Move SSE auth off the
?token={JWT}query param to a Fetch-basedEventSourceimplementation that attaches anAuthorizationheader.Tasks
Authorization: Bearer …?token={jwt}path (warn now, remove in a later major)(WebSocket removal already shipped in #190.)
Part of #194