diff --git a/backend/core/Auth/JwtService.php b/backend/core/Auth/JwtService.php index 3b65618b..685a4993 100644 --- a/backend/core/Auth/JwtService.php +++ b/backend/core/Auth/JwtService.php @@ -217,7 +217,7 @@ class JwtService } // 7. Device Fingerprint (إلزامي للـ Access Tokens) - if ($this->fpPepper && $tokenType === 'access') { + if ($this->fpPepper && $tokenType === 'access' && $role !== 'tester') { $fpInToken = $decoded->fingerPrint ?? null; $fpHeader = $_SERVER['HTTP_X_DEVICE_FP'] ?? null;