v1.8.0: SuperTokens behind an AUTH_MODE switch - #7

Merged

NeverEndingCode merged 16 commits into

mainfrom

worktree-v1.8-supertokens

Aug 8, 2026

Commits on Aug 6, 2026

Add the v1.8 SuperTokens implementation plan

Evan Phyillaier
and
claude
committed
11beb3c
v1.8 Task 1: AUTH_MODE switch and its containment guarantee

Evan Phyillaier
and
claude
committed
21de00b
v1.8 Task 2: SuperTokens init and provider config, behind the guard

Evan Phyillaier
and
claude
committed
f66a894
v1.8: make CI actually prove supertokens-node loads on Node 20

Evan Phyillaier
and
claude
committed
75af294
v1.8 Task 3: identity mapping, ordered before the session

Evan Phyillaier
and
claude
committed
c163948
v1.8 Task 4: the authentication chain across all three modes

Evan Phyillaier
and
claude
committed
435d09f
v1.8 Task 5: the shadow-mode verification gate

Evan Phyillaier
and
claude
committed
8e5ffed
v1.8 Tasks 6 and 7: OAuth guidance, deployment docs, release prep

Evan Phyillaier
and
claude
committed
340ccc9
Pin the SDK surface the mapping override depends on

Evan Phyillaier
and
claude
committed
be68275
Correct two stale status lines in the v1.8 docs

Evan Phyillaier
and
claude
committed
671130d
Fix an authentication bypass and a Discord outage found by security review

Evan Phyillaier
and
claude
committed
65778bc

Commits on Aug 7, 2026

Add the auth migration and extension guide; correct a understated blocker

Evan Phyillaier
and
claude
committed
8a1f224
Fix the final review's findings: the gate wrote, the core ran open

Evan Phyillaier
and
claude
committed
50bea27
Correct the docs the review found overstating what was true

Evan Phyillaier
and
claude
committed
7904281
Bring the migration plan up to date with the review, and pin the DB role

Evan Phyillaier
and
claude
committed
675e17e
Fix the fix-verification review: the signout fix stopped one door short

Evan Phyillaier
and
claude
committed
a8a37e6