Skip to content

feat(clerk): backend + frontend API compatibility with @clerk/backend and clerk-js#171

Open
pjsny wants to merge 8 commits into
vercel-labs:mainfrom
pjsny:clerk-compat
Open

feat(clerk): backend + frontend API compatibility with @clerk/backend and clerk-js#171
pjsny wants to merge 8 commits into
vercel-labs:mainfrom
pjsny:clerk-compat

Conversation

@pjsny

@pjsny pjsny commented May 29, 2026

Copy link
Copy Markdown

Verified against @clerk/react 6.7.x

Adds FAPI, M2M tokens, org domains, and webhooks

@vercel

vercel Bot commented May 29, 2026

Copy link
Copy Markdown
Contributor

@pjsny is attempting to deploy a commit to the Vercel Labs Team on Vercel.

A member of the Team first needs to authorize it.

@socket-security

socket-security Bot commented May 29, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addednpm/​@​clerk/​backend@​3.4.137910095100100

View full report

if (tokenFormat === "jwt") {
const { privateKey } = await keyPairPromise;
const jwtClaims: Record<string, unknown> = {
scopes: subject,

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
scopes: subject,
scopes: [subject],

JWT M2M token sets the scopes claim to the bare subject string instead of an array, inconsistent with the stored record's scopes: [subject]

Fix on Vercel

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant