feat(auth): per-request backend JWT + apiFactory wiring (#865)#925

Open

piyalbasu wants to merge 21 commits into

feat/864-derive-auth-keypairfrom

feat/865-per-request-jwt

Commits on Jul 8, 2026

feat(auth): per-request EdDSA JWT builder for mobile (#865)
piyalbasu
committed
feat(auth): attach per-request JWT + retry-once-on-401 to freighterBackendV2 (#865)

piyalbasu
and
claude
committed
fix(auth): register JWT interceptors before apiFactory normalizer so 401 retry fires (#865)

piyalbasu
and
claude
committed
test(auth): gated E2E round-trip vs staging whoami (#865)

piyalbasu
and
claude
committed
feat(auth): migrate v2 POST call sites to string body + query-in-url for correct JWT signing (#865)
piyalbasu
committed
test(auth): read whoami { data } envelope; E2E verified green vs staging (#865)
piyalbasu
committed
fix(auth): idempotent error normalizer (preserve 401 on retry) + skip retry for anonymous 401s (#865)

piyalbasu
and
claude
committed
feat(auth): enforce string-only V2 request bodies at compile time so JWT bodyHash always matches (#865)
piyalbasu
committed
fix(auth): fold config.params into the signed JWT path; refresh body/path contract doc (#865)

piyalbasu
and
claude
committed
fix(auth): strip stale Authorization header on locked/anonymous requests (#865)
piyalbasu
committed
fix(auth): handle URLSearchParams when folding params into signed path (#865)
piyalbasu
committed

Commits on Jul 9, 2026

Commits on Jul 10, 2026