feat(auth): route all backend-v2 calls through the authed fetch chokepoint (#2879)#2880

Draft

piyalbasu wants to merge 21 commits into

feat/2769-derive-auth-keypairfrom

feat/2879-backend-v2-authed-chokepoint

Commits on Jun 30, 2026

feat(auth): per-request EdDSA JWT builder in @shared/api (#2770)

piyalbasu
and
claude
committed
feat(auth): authedFetch wrapper with retry-once-on-401 (#2770)

piyalbasu
and
claude
committed
test(auth): cover authedFetch Content-Type default + override (#2770)
piyalbasu
committed
feat(auth): runnable E2E script for backend JWT round-trip (#2770)
piyalbasu
committed
fix(auth): E2E script records per-case failures instead of aborting (#2770)

piyalbasu
and
claude
committed
fix(auth): uppercase signed method, normalize baseUrl join, pin tsx in script (#2770)

piyalbasu
and
claude
committed
refactor(auth): narrow JWT body to string, drop unused authedFetch headers override (#2770)
piyalbasu
committed
test(auth): replace E2E script with gated Playwright integration test (#2770)
piyalbasu
committed
test(auth): add gated Playwright auth e2e test (dropped from the replace-script commit) (#2770)
piyalbasu
committed
fix(auth): upper-case authedFetch wire method to match signed methodAndPath

piyalbasu
and
claude
committed
fix(auth): sign the full request target in authedFetch, not the bare path

piyalbasu
and
claude
committed
feat(auth): callBackendV2 chokepoint for backend-v2 requests (#2879)

piyalbasu
and
claude
committed
test(auth): cover callBackendV2 authed-POST headers + signed query path (#2879)
piyalbasu
committed
feat(auth): route getDiscoverData through callBackendV2 via FETCH_BACKEND_V2 (#2879)

piyalbasu
and
claude
committed
fix(auth): gate FETCH_BACKEND_V2 behind isFromExtensionPage (#2879)

piyalbasu
and
claude
committed
feat(auth): route getLedgerKeyAccounts through callBackendV2 (#2879)

piyalbasu
and
claude
committed
fix(auth): add type param to sendMessageToBackground in getLedgerKeyAccounts

piyalbasu
and
claude
committed
test(auth): cover getLedgerKeyAccounts non-200 path + richer error log (#2879)

piyalbasu
and
claude
committed
feat(auth): route collectibles fetch through FETCH_BACKEND_V2 message (#2879)

piyalbasu
and
claude
committed
feat(auth): route rpc-health through callBackendV2 (#2879)

piyalbasu
and
claude
committed
fix(auth): break circular import exposing sessionSlice; fix account.test types (#2879)

piyalbasu
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(auth): route all backend-v2 calls through the authed fetch chokepoint (#2879)#2880

feat(auth): route all backend-v2 calls through the authed fetch chokepoint (#2879)#2880
piyalbasu wants to merge 21 commits into
feat/2769-derive-auth-keypairfrom
feat/2879-backend-v2-authed-chokepoint

Commits on Jun 30, 2026

feat(auth): per-request EdDSA JWT builder in @shared/api (#2770)

feat(auth): authedFetch wrapper with retry-once-on-401 (#2770)

test(auth): cover authedFetch Content-Type default + override (#2770)

feat(auth): runnable E2E script for backend JWT round-trip (#2770)

fix(auth): E2E script records per-case failures instead of aborting (#2770)

fix(auth): uppercase signed method, normalize baseUrl join, pin tsx in script (#2770)

refactor(auth): narrow JWT body to string, drop unused authedFetch headers override (#2770)

test(auth): replace E2E script with gated Playwright integration test (#2770)

test(auth): add gated Playwright auth e2e test (dropped from the replace-script commit) (#2770)

fix(auth): upper-case authedFetch wire method to match signed methodAndPath

fix(auth): sign the full request target in authedFetch, not the bare path

feat(auth): callBackendV2 chokepoint for backend-v2 requests (#2879)

test(auth): cover callBackendV2 authed-POST headers + signed query path (#2879)

feat(auth): route getDiscoverData through callBackendV2 via FETCH_BACKEND_V2 (#2879)

fix(auth): gate FETCH_BACKEND_V2 behind isFromExtensionPage (#2879)

feat(auth): route getLedgerKeyAccounts through callBackendV2 (#2879)

fix(auth): add type param to sendMessageToBackground in getLedgerKeyAccounts

test(auth): cover getLedgerKeyAccounts non-200 path + richer error log (#2879)

feat(auth): route collectibles fetch through FETCH_BACKEND_V2 message (#2879)

feat(auth): route rpc-health through callBackendV2 (#2879)

fix(auth): break circular import exposing sessionSlice; fix account.test types (#2879)