6baa111fed
The session-transfer route was registered before the session and member provisioning middlewares, causing chi to panic with "all middlewares must be defined before routes on a mux". Scope the middlewares to the graphql route using r.Group so session-transfer remains unauthenticated. Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>