RE: https://mastodon.social/@pixelfed/117394751058470756
The two middlewares we removed had to do with two factor auth checks, and verified email checks.
We used to do that on every webUI request. Now we only do that during auth, like it should be.
At scale, this is noticeable, and a nice side effect is that our oauth flow now properly supports 2FA when authenticating with our app, like I did with Loops!