[OPIK-8183] [BE] feat: accept CIPX device tokens and record device_id on cipx identities - #8094

Merged

LifeXplorer merged 24 commits into

mainfrom

avinahradau/OPIK-8183-cipx-device-token-auth

Sep 3, 2026

Commits on Sep 1, 2026

[OPIK-8183] [BE] feat: accept CIPX device tokens and record device_id on cipx identities

LifeXplorer
and
claude
committed
0b1f43d
[OPIK-8183] [BE] perf: cache the resolved credential on the CIPX token path

LifeXplorer
and
claude
committed
82b15b1
[OPIK-8183] [BE] feat: authenticate the CIPX validate call with a service credential

LifeXplorer
and
claude
committed
c3bed02
[OPIK-8183] [BE] refactor: drop device_id from SpansCreated

LifeXplorer
and
claude
committed
c7813de
[OPIK-8183] [BE] fix: resolve the CIPX caller from the validate response, not the react service

LifeXplorer
and
claude
committed
028c467
[OPIK-8183] [BE] test: cover the CIPX ingest-only allowlist

LifeXplorer
and
claude
committed
41af213

Commits on Sep 2, 2026

OPIK-8183 refactor comments
LifeXplorer
committed
c566039
[OPIK-8183] [BE] fix: move the CIPX validator off the publicly routed prefix

LifeXplorer
and
claude
committed
403f094
[OPIK-8183] [BE] refactor: drop the CIPX validator service credential

LifeXplorer
and
claude
committed
460b995
OPIK-8183 refactor comments
LifeXplorer
committed
3c58630
[OPIK-8183] [BE] refactor: validate CIPX device tokens by token alone

LifeXplorer
and
claude
committed
a6794a0
[OPIK-8183] [BE] docs: say that a device token's user name is an email

LifeXplorer
and
claude
committed
08a6410
OPIK-8183 refactor
LifeXplorer
committed
0fef387
[OPIK-8183] [BE] test: generate the opaque ids in the CIPX tests

LifeXplorer
and
claude
committed
6c05e84
[OPIK-8183] [BE] test: give the CIPX fixtures the user name a validator really returns

LifeXplorer
and
claude
committed
7d79b86
Merge branch 'main' into avinahradau/OPIK-8183-cipx-device-token-auth
LifeXplorer
authored
dcc66e3
OPIK-8183 update generate rate limit principal
LifeXplorer
committed
6c77ef1
OPIK-8183 update validation
LifeXplorer
committed
2cb3edb
OPIK-8183 cache by token sha, not raw value
LifeXplorer
committed
60b0143
OPIK-8183 resolve review items
LifeXplorer
committed
5b11640
OPIK-8183 reduce validation t/o
LifeXplorer
committed
a8016c8
Merge branch 'main' into avinahradau/OPIK-8183-cipx-device-token-auth
LifeXplorer
authored
7c070a3
Merge branch 'main' into avinahradau/OPIK-8183-cipx-device-token-auth
LifeXplorer
authored
c83c05f

Commits on Sep 3, 2026

Merge branch 'main' into avinahradau/OPIK-8183-cipx-device-token-auth
LifeXplorer
authored
240a215