feat(clerk-js): Monotonic token replacement based on oiat - #8097

Merged

nikosdouvlis merged 23 commits into

mainfrom

nikos/session-minter-sdk-changes

May 14, 2026

Commits on Mar 18, 2026

feat(shared): Add oiat field to JwtHeader type
nikosdouvlis
committed
9ad4e55
feat(clerk-js): Monotonic token replacement based on oiat
nikosdouvlis
committed
65b4a93
chore: Add changesets and plan doc for Session Minter SDK changes
nikosdouvlis
committed
91b664b

Commits on May 13, 2026

chore(clerk-js): merge main into session-minter-sdk-changes
nikosdouvlis
committed
c4755d1
fix(clerk-js): use shouldRejectToken at cookie write path
nikosdouvlis
committed
ee8afe8
test(clerk-js): cover JWT-input path and oiat:0 legacy in tokenFreshness
nikosdouvlis
committed
f56f274
test(clerk-js): fix misleading oiat: 0 test label
nikosdouvlis
committed
153e99d
refactor(clerk-js): simplify shouldRejectToken; oiat is now universal
nikosdouvlis
committed
6a144bb
chore(clerk-js): drop redundant comment in shouldRejectToken
nikosdouvlis
committed
be30dfd
test(clerk-js): update broadcast monotonicity test to use oiat tokens
nikosdouvlis
committed
d5f66c5
refactor(clerk-js): rename shouldRejectToken -> pickFreshestJwt
nikosdouvlis
committed
58ee789
test(clerk-js): document same-object behavior in pickFreshestJwt
nikosdouvlis
committed
00fa5c7
style(clerk-js): format tokenCache.test.ts per prettier
nikosdouvlis
committed
c22e898
style(clerk-js): fix import sort order in AuthCookieService
nikosdouvlis
committed
d265058
revert(clerk-js): remove cookie write monotonic guard
nikosdouvlis
committed
78b3328
fix(clerk-js): pickFreshestJwt returns incoming on full tie
nikosdouvlis
committed
7efa1af
revert(clerk-js): drop Session.ts monotonic guards
nikosdouvlis
committed
64ab4ae
test(clerk-js): broadcast handler accepts fresher-oiat token over older cached one
nikosdouvlis
committed
7161778
test(clerk-js): await broadcast handler in monotonicity test
nikosdouvlis
committed
46fbc01