iHome Platform Dev Log · Sep 25

The platform's theme today was closing the credential-security loop: "sign out other devices" shipped — revoke every other session without changing your password, while this device gets a fresh session and stays logged in; combined with yesterday's identity passthrough, China-region users' logins and phone numbers now work in off-platform apps too. Revocation covers both in-site forced sign-outs and targeted off-platform push — a three-layer loop.

The quieter thread was a bloodless transplant of the deploy system: sites under the software category now serve via nginx static export, and CI builds only the sites that actually changed instead of running everything for nothing. The goal: adding a site should someday feel as boring as dropping in a static file.