{"version":"2.1.261","anchor":"telemetry-auth-send-gate-tightened-with-an-endpoint-check","canonical_anchor":"telemetry-auth-send-gate-tightened-with-an-endpoint-check","heading":"Telemetry auth-send gate tightened with an endpoint check","tier":"internal","area":"Telemetry","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.261\/e\/telemetry-auth-send-gate-tightened-with-an-endpoint-check","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.261","markdown":"### Telemetry auth-send gate tightened with an endpoint check\n\nTelemetry auth-sending logic was tightened with an endpoint allowlist check.\n\n`shouldSkipAuthForSend` now short-circuits to skip auth whenever the target endpoint isn't allow-listed or first-party HTTPS, before falling into the existing trust and token checks. A new `shouldAttachAuthWithoutProfileScope` path also covers stored, env, and fd credential lanes.\n\n- Area: Telemetry\n- Tier: Under the hood\n- Useful: 1\/5\n- Signal: 1\/5"}