iHome Platform Dev Log · Sep 25

The platform closed the loop on session security today: 'sign out other devices' shipped — revoke every other session without changing your password, while this device stays logged in via a reissued session. One easy-to-flip detail inside: the reissue must happen after the revocation counter updates, or you kick yourself offline; the revoke call also returns an explicit boolean, guarding against the 'looks successful' kind of success. With identity passthrough in place, China-region users' logins and phone numbers now work in off-platform apps, and revocation covers both in-site kicks and off-platform push. Elsewhere, the deploy system quietly changed blood: software sites moved to nginx static export, and CI builds only what actually changed instead of running everything for nothing.