Claude 22853da023 fix(capture): authenticate sidecar->mam-api calls with bearer token ... The live-thumbnail and manual /start,/stop sidecar->mam-api calls hit the CSRF guard (403 missing X-Requested-With). Match the working pattern in index.js: send Authorization: Bearer $MAM_API_TOKEN (= CAPTURE_TOKEN, injected by recorders.js), which is CSRF-exempt. Falls back to the UI header only when no token is set (dev). Fixes [livethumb] failed ... 403 — posters now persist. 🤖 Generated with Claude Code		2026-06-02 16:00:13 +00:00
..
routes	fix(capture): authenticate sidecar->mam-api calls with bearer token	2026-06-02 16:00:13 +00:00
s3	fix(infra+workers): S3 creds, ffprobe, BullMQ awaits, thumbnail seek, bin optional, docker-compose vars, jobs Redis, recorders stop codes: client.js	2026-05-16 00:29:47 -04:00
capture-manager.js	fix(capture): authenticate sidecar->mam-api calls with bearer token	2026-06-02 16:00:13 +00:00
index.js	fix(deltacast-bridge): call VHD_SetBiDirCfg before board open + set channel SDI mode	2026-06-02 11:23:39 +00:00