Summary
The REST API POST /api/sessions accepts a policy field in the request body, allowing callers to associate a policy with a new session. The gRPC CreateSessionRequest message has no policy field, and the handler passes undefined for the policy parameter.
Proposal
Add optional string policy = N; to CreateSessionRequest in service.proto and pass it through in the CreateSession handler.
Context
Identified during gRPC config parity audit in #32.
Summary
The REST API
POST /api/sessionsaccepts apolicyfield in the request body, allowing callers to associate a policy with a new session. The gRPCCreateSessionRequestmessage has nopolicyfield, and the handler passesundefinedfor the policy parameter.Proposal
Add
optional string policy = N;toCreateSessionRequestinservice.protoand pass it through in theCreateSessionhandler.Context
Identified during gRPC config parity audit in #32.