feat(auth): per-request backend JWT + E2E round-trip (#2770)#2877

Draft

piyalbasu wants to merge 8 commits into

feat/2769-derive-auth-keypairfrom

feat/2770-per-request-backend-jwt

Commits on Jun 26, 2026

feat(auth): per-request EdDSA JWT builder in @shared/api (#2770)

piyalbasu
and
claude
committed
feat(auth): authedFetch wrapper with retry-once-on-401 (#2770)

piyalbasu
and
claude
committed
test(auth): cover authedFetch Content-Type default + override (#2770)
piyalbasu
committed
feat(auth): runnable E2E script for backend JWT round-trip (#2770)
piyalbasu
committed
fix(auth): E2E script records per-case failures instead of aborting (#2770)

piyalbasu
and
claude
committed
fix(auth): uppercase signed method, normalize baseUrl join, pin tsx in script (#2770)

piyalbasu
and
claude
committed
refactor(auth): narrow JWT body to string, drop unused authedFetch headers override (#2770)
piyalbasu
committed
test(auth): replace E2E script with gated Playwright integration test (#2770)
piyalbasu
committed