The PreviewCollection endpoint was missing authentication verification, allowing unauthenticated access to the preview functionality. Added check for user in context, returning 401 Unauthorized if missing.
The PreviewCollection endpoint was missing authentication verification, allowing unauthenticated access to the preview functionality. Added check for user in context, returning 401 Unauthorized if missing.