Skip to content

fix: keep registration token subject consistent#2065

Open
Ceyvion wants to merge 1 commit into
SecureBananaLabs:mainfrom
Ceyvion:fix/register-token-sub-2064
Open

fix: keep registration token subject consistent#2065
Ceyvion wants to merge 1 commit into
SecureBananaLabs:mainfrom
Ceyvion:fix/register-token-sub-2064

Conversation

@Ceyvion
Copy link
Copy Markdown

@Ceyvion Ceyvion commented May 30, 2026

Closes #2064
/claim #743

Summary

  • generate the registration user id once
  • sign the access token with the same id in sub
  • add regression coverage for divergent timestamp generation

Verification

  • node --test apps/api/src/tests/authService.test.js
  • node --test apps/api/src/tests/health.test.js apps/api/src/tests/authService.test.js
  • git diff --check

github-actions Bot added a commit that referenced this pull request May 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Registration token subject should match returned user id

1 participant