From 326e0774a823a6d8a6e37c4f1b5ef03678452216 Mon Sep 17 00:00:00 2001
From: datadunia <datadunia@ymail.com>
Date: Wed, 8 Jul 2026 12:06:11 +0700
Subject: [PATCH] security: remove unprotected device forwards endpoint, fix
 traffic/report auth

- server-core: removed ListByDeviceID (no auth), moved traffic/report to protected group
- device-agent: removed redundant GetForwards HTTP calls (forwards delivered via gRPC/heartbeat)
---
 apps/device-agent | 2 +-
 apps/server-core  | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/apps/device-agent b/apps/device-agent
index 8c24db0..afafdfa 160000
--- a/apps/device-agent
+++ b/apps/device-agent
@@ -1 +1 @@
-Subproject commit 8c24db097478a8d8e89d8e13bf79202f88708cf6
+Subproject commit afafdfac33a821fb4ad5633181664ab213035fcf
diff --git a/apps/server-core b/apps/server-core
index a3ec072..55b8c6d 160000
--- a/apps/server-core
+++ b/apps/server-core
@@ -1 +1 @@
-Subproject commit a3ec072007833b3bb27d211afe74df504d210f1e
+Subproject commit 55b8c6dc684a4ab08f3a2131d207e489a5fc2d54