Under the hood
Useful2 Signal3
The live event stream for remote sessions now sends your trusted-device credential too.
What's wrong with this entry?
Anonymous. No account, no email.
What
The live event stream for remote sessions now attaches the same trusted-device credential other API calls already send, as an X-Trusted-Device-Token header. If the token cannot be loaded it logs and connects without it, as before.
Details
- The token is loaded once and reused for the life of the connection.
Evidence
trusted-device token unavailable, sending no td-v1 header
Strings lifted out of the shipped bundle, so the claim above can be checked against them.