Identity Verification (JWT) — full stack for adversarial review - #1708

Open

nan-li wants to merge 24 commits into

mainfrom

nan/jwt-pr8-demo-ui

Commits on Aug 20, 2026

fix: [PR2] read-your-write consistency defects

nan-li
and
cursoragent
committed
2905f69
fix: scope RYW resolve to one user and lower the bar on timeout

nan-li
and
cursoragent
committed
69069ef
chore: tighten RYW comments to iOS comment style

nan-li
and
cursoragent
committed
58cbdcb
feat: [PR3] feature flags, JWT config, and the Identity Verification gate

nan-li
and
cursoragent
committed
df77117
fix: [PR3] tighten params retry class and hydration handler race

nan-li
and
cursoragent
committed
1630188
feat: [PR4] identity model JWT, the JWT repo, and the public API

nan-li
and
cursoragent
committed
34c1df2
fix: [PR4] mark JWT bearer updates as local-only

nan-li
and
cursoragent
committed
b1336f6
feat: [PR5] bind each Delta to the user that owns it

nan-li
and
cursoragent
committed
775dd39
fix: [PR5] drop stale properties/subscription deltas instead of mis-stamping

nan-li
and
cursoragent
committed
630bb94
feat: [PR6] Identity Verification for the request pipeline

nan-li
and
cursoragent
committed
e717a33
fix: [PR6] hold new-record IDs in purge tests under TEST delay

nan-li
and
cursoragent
committed
fa0ffa6
chore: [PR6] split types to clear SwiftLint length errors

nan-li
and
cursoragent
committed
cce88bd
fix: [PR6] keep restored Identify under IV so reshape can promote it

nan-li
and
cursoragent
committed
da82803
fix: [PR6] default missing addsNewRecords to true on Create User decode

nan-li
and
cursoragent
committed
b97b2c1
fix: [PR6] keep uncached owned requests only while Identity Verification is on

nan-li
and
cursoragent
committed
d38174e
fix: [PR6] restore waitForBackgroundThreads after the 5.6-main helper swap

nan-li
and
cursoragent
committed
f9e43ee
fix: [PR6] flush combined property deltas before the 5.6-main waitUntil

nan-li
and
cursoragent
committed
0e97e3b
fix: [PR6] create the anonymous user before combining property deltas

nan-li
and
cursoragent
committed
b838268
feat: [PR7] in-app messages under Identity Verification

nan-li
and
cursoragent
committed
91115f9
fix: [PR7] reset in-app messages on user change only while newCodePathsRun

nan-li
and
cursoragent
committed
8dcb1a4
fix: [PR7] refetch IAMs on 401 when a replacement token already landed

nan-li
and
cursoragent
committed
0aeade0
fix: [PR7] wait on deferredFetchSubscriptionId after the 5.6-main helper swap

nan-li
and
cursoragent
committed
915470f
feat: [PR8] demo app Identity Verification UI

nan-li
and
cursoragent
committed
98a90af
chore: [PR8] (will revert) add local feature-flag override for testing

nan-li
and
cursoragent
committed
6280471

Navigation Menu

Uh oh!

Identity Verification (JWT) — full stack for adversarial review - #1708

Identity Verification (JWT) — full stack for adversarial review#1708
nan-li wants to merge 24 commits into
mainfrom
nan/jwt-pr8-demo-ui

Commits on Aug 20, 2026

fix: [PR2] read-your-write consistency defects

fix: scope RYW resolve to one user and lower the bar on timeout

chore: tighten RYW comments to iOS comment style

feat: [PR3] feature flags, JWT config, and the Identity Verification gate

fix: [PR3] tighten params retry class and hydration handler race

feat: [PR4] identity model JWT, the JWT repo, and the public API

fix: [PR4] mark JWT bearer updates as local-only

feat: [PR5] bind each Delta to the user that owns it

fix: [PR5] drop stale properties/subscription deltas instead of mis-stamping

feat: [PR6] Identity Verification for the request pipeline

fix: [PR6] hold new-record IDs in purge tests under TEST delay

chore: [PR6] split types to clear SwiftLint length errors

fix: [PR6] keep restored Identify under IV so reshape can promote it

fix: [PR6] default missing addsNewRecords to true on Create User decode

fix: [PR6] keep uncached owned requests only while Identity Verification is on

fix: [PR6] restore waitForBackgroundThreads after the 5.6-main helper swap

fix: [PR6] flush combined property deltas before the 5.6-main waitUntil

fix: [PR6] create the anonymous user before combining property deltas

feat: [PR7] in-app messages under Identity Verification

fix: [PR7] reset in-app messages on user change only while newCodePathsRun

fix: [PR7] refetch IAMs on 401 when a replacement token already landed

fix: [PR7] wait on deferredFetchSubscriptionId after the 5.6-main helper swap

feat: [PR8] demo app Identity Verification UI

chore: [PR8] (will revert) add local feature-flag override for testing