Auth and Proxy Bypass

Authentication and request-routing context get misinterpreted or missing—websocket handshakes fail at the proxy, and API calls succeed or reject improperly due to absent tokens/CSRF/JWK region mismatches, breaking both security guarantees and connectivity.