Replace wildcard CORS with configured origins and bind chat/task user identity to the authenticated principal instead of request body fields.
Replace wildcard CORS with configured origins and bind chat/task user identity to the authenticated principal instead of request body fields.