maaz519/iios - iios - Git Lynkeduppro

T

maaz519 e956ad3cb9 feat(iios): verify real Supabase access tokens (ES256 via JWKS)

SessionVerifier gains a Supabase mode (set SUPABASE_URL): user SATs are ES256,
verified against the project's public JWKS — no shared secret. Keys are fetched at
startup (onModuleInit) and cached as PEM so verify() stays synchronous; a rotated
kid triggers a background refresh. Claims map to MessagePrincipal with userId=email
(stable, human-readable → mentions/directory keep working; RealMDM canonicalises
later). The legacy HS256 app-token path is unchanged (dev/tests untouched).

senderName now prefers the actor display name over the raw handle, so real names
show on bubbles when identity is an email.

Verified end-to-end against a live project: signup → real ES256 SAT → GET /v1/threads
200 → thread created + owned by the resolved email principal. Full suite 182 green.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-07 20:14:28 +05:30

.github/workflows

ci: start Postgres via docker run on localhost (services: not wired on runner)

2026-07-04 15:25:30 +00:00

apps

feat(p8): meeting-studio demo + smoke-calendar; P8 verification green

2026-07-01 18:22:24 +05:30

docs

feat(iios): socket.io Redis adapter for cross-replica realtime (P9 scaling)

2026-07-03 19:28:11 +05:30

packages

feat(iios): verify real Supabase access tokens (ES256 via JWKS)