Cross-origin authentication verification (cherry-pick from master)#773

Merged

MasterKale merged 8 commits into

milestone/v14.0.0from

feat/cross-origin-authentication-verification

Jun 19, 2026

Commits on Jun 19, 2026

feat: implement cross-origin authentication verification with topOrigin support

agektmr
authored and
MasterKale
committed
fix: throw error for unexpected cross-origin requests when expectedTopOrigin is missing

agektmr
authored and
MasterKale
committed
Update packages/server/src/authentication/verifyAuthenticationResponse.ts

agektmr
and
MasterKale
committed
Update packages/server/src/authentication/verifyAuthenticationResponse.ts

agektmr
and
MasterKale
committed
fix: throw error when topOrigin is present without cross-origin request

agektmr
authored and
MasterKale
committed
test: update cross-origin error messages and validate topOrigin constraints in verifyAuthenticationResponse

agektmr
authored and
MasterKale
committed
Update packages/server/src/authentication/verifyAuthenticationResponse.ts

agektmr
and
MasterKale
committed
fix: update verifyAuthenticationResponse tests to allow Safari cross-origin behavior and refine cross-origin error messages

agektmr
authored and
MasterKale
committed