From 813f6a1d4459cb3cc54dabd9cddd467baad315cd Mon Sep 17 00:00:00 2001
From: gilesb <giles.bradshaw@sigyl.com>
Date: Fri, 9 Jan 2026 17:51:15 +0000
Subject: [PATCH] Record renderer attachment when L1 verifies token

When L1 successfully calls /auth/verify, the user's attachment to
that L1 server is recorded in the user_renderers table.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 server.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/server.py b/server.py
index 67d64aa..b183da3 100644
--- a/server.py
+++ b/server.py
@@ -1332,6 +1332,9 @@ async def verify_auth(
     if not username:
         raise HTTPException(401, "Invalid token")
 
+    # Record the attachment (L1 successfully verified user's token)
+    await db.attach_renderer(username, l1_normalized)
+
     return {"username": username, "valid": True, "l1_server": request.l1_server}