Skip to content

fix: support Privy authentication without identity tokens - #1

Merged
daveynfts merged 3 commits into
mainfrom
agent/fix-privy-authentication
Jul 20, 2026
Merged

fix: support Privy authentication without identity tokens#1
daveynfts merged 3 commits into
mainfrom
agent/fix-privy-authentication

Conversation

@daveynfts

Copy link
Copy Markdown
Owner

What changed

  • Treat the verified Privy access token as the required backend credential.
  • Use an identity token when available; otherwise load the matching Privy user by DID.
  • Cache fallback user lookups briefly to avoid repeated API calls.
  • Show Allowed Domains guidance only for actual domain authorization errors.
  • Update the authentication documentation.

Root cause

The API required both access and identity tokens. Privy identity tokens are optional and were not enabled for this application, so signed-in users received 401 Authentication required.

Validation

  • Backend syntax checks passed.
  • 6/6 API tests passed.
  • Frontend ESLint and production build passed.

Verify the access token as the required credential and load the matching Privy user when optional identity tokens are disabled.
Only show Allowed Domains guidance for actual Privy domain errors and label other API failures accurately.
@vercel

vercel Bot commented Jul 20, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
paper-cut-apce Ready Ready Preview, Comment Jul 20, 2026 2:08am
papercut Ready Ready Preview, Comment Jul 20, 2026 2:08am

@daveynfts
daveynfts marked this pull request as ready for review July 20, 2026 02:09
@daveynfts
daveynfts merged commit ea30383 into main Jul 20, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant