Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
Cloud SessionsArea: what it touches
New FeaturesKind: in v2.1.251,
New FeaturesSection of the release
What
The bridge that registers a session with the worker service now validates the short-lived token it uses, rejecting one issued for a different session, declining to register a token no fresher than the one already held, and continuing to reuse a held token past a caller-supplied age threshold when the host has nothing newer to offer.
Details
Applies to bridge sessions that register via this token; registration goes to the worker register endpoint.
Rejections are logged as "work secret rejected".
Evidence
work secret rejected
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
