Skip to content

intercom: HMAC / JWT (auth_tokens) identity verification as typed required field #11

@productdevbook

Description

@productdevbook

Intercom's Identity Verification (HMAC of `user_id` with the app secret) plus the newer `intercom_user_jwt` flow keeps getting added as prop strings with no type enforcement — so devs forget and bots leak data.

Evidence

Tasks

  • `load({ appId, verification: "hmac" | "jwt" | "none" })`
  • When `verification !== "none"`, `identify()` requires `{ hash }` or `{ token }` at type level
  • Docs page with Node / Python / Ruby / Go snippets for server-side HMAC
  • Warn in dev if `identify()` called with email but no hash and app enforces verification

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions