Switch debugger delivery to public ClientTokenAuth endpoint#4480
Draft
watson wants to merge 1 commit intowatson/DEBUG-5296/add-live-debuggerfrom
Draft
Switch debugger delivery to public ClientTokenAuth endpoint#4480watson wants to merge 1 commit intowatson/DEBUG-5296/add-live-debuggerfrom
watson wants to merge 1 commit intowatson/DEBUG-5296/add-live-debuggerfrom
Conversation
Collaborator
Author
|
Warning This pull request is not mergeable via GitHub because a downstack PR is open. Once all requirements are satisfied, merge this PR as a stack on Graphite.
This stack of pull requests is managed by Graphite. Learn more about stacking. |
Bundles Sizes Evolution
🚀 CPU Performance
🧠 Memory Performance
|
🎉 All green!❄️ No new flaky tests detected 🎯 Code Coverage (details) 🔗 Commit SHA: 2498a01 | Docs | Datadog PR Page | Give us feedback! |
1 task
4d848e6 to
91efb95
Compare
This was referenced Apr 21, 2026
91efb95 to
fa1e260
Compare
bf9a162 to
b9da4f3
Compare
5 tasks
fa1e260 to
56266cb
Compare
b9da4f3 to
0040ee8
Compare
0040ee8 to
653aee9
Compare
56266cb to
dc17ca7
Compare
dc17ca7 to
5e45077
Compare
653aee9 to
7d1efe7
Compare
Use the new POST /api/unstable/debugger/frontend/probes endpoint with dd-client-token header authentication instead of the same-origin /api/ui/debugger/probe-delivery route that relied on session cookies. - Build delivery URL from site config (https://api.{site}/...) - Authenticate via dd-client-token header instead of credentials: same-origin - Add proxy config for routing delivery requests through a custom origin - Move delivery mock from base server to intake server in E2E tests
5e45077 to
2498a01
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

Motivation
Switch the debugger delivery API from the internal same-origin
/api/ui/debugger/probe-deliveryroute (ValidUser session cookie auth) to the public/api/unstable/debugger/frontend/probesroute (ClientTokenAuth). This is Stage 3 of the probe delivery redesign, enabling the browser SDK to fetch probes through the public Smart Edge route using the same RUM-style client token authentication model used by other Datadog frontend SDKs.The backend route is already registered in
debugger-delivery-apiand allowlisted for ClientTokenAuth in Lambo.Changes
packages/debugger/src/domain/deliveryApi.ts/api/ui/debugger/probe-deliveryto/api/unstable/debugger/frontend/probeshttps://api.{site}/...from thesiteconfig (defaults todatadoghq.com)credentials: 'same-origin'(session cookies) to add-client-tokenrequest headerproxysupport: when set, the proxy origin replaces the computed API host (used by E2E tests and available for customer proxy setups)packages/debugger/src/entries/main.tsproxy?: stringtoDebuggerInitConfigurationclientToken,site, andproxyare now forwarded tostartDeliveryApiPollingE2E test infrastructure
formatConfigurationalready setsproxy: servers.intake.originfor all SDK configs)setDebuggerProbesmoved fromMockServerApptoIntakeServerAppservers.intake.app.setDebuggerProbesTest instructions
Unit tests:
All debugger unit tests:
yarn test:unit --spec "packages/debugger/src/**/*.spec.ts"To verify on staging: initialize the debugger SDK with a valid
clientTokenandapplicationId, confirm that delivery polling requests go tohttps://api.datad0g.com/api/unstable/debugger/frontend/probeswith add-client-tokenheader (visible in the Network tab).Checklist