[NO MERGE] Clarify user claim handling for presence and annotations#3200
Open
[NO MERGE] Clarify user claim handling for presence and annotations#3200
Conversation
|
Important Review skippedAuto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the You can disable this status message by setting the Use the checkbox below for a quick retry:
✨ Finishing touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
AndyTWF
force-pushed
the
claude/custom-restrictions-docs-Hzp8B
branch
from
0558b5d to
5072d7c
Compare
Add clarification that custom restrictions also apply to presence messages and individual annotations. The user claim is included in extras.userClaim for both cases (presence.extras.userClaim and annotation.extras.userClaim). https://claude.ai/code/session_01TKV8vHU7MP62PNzDJuKwiF
AndyTWF
force-pushed
the
claude/custom-restrictions-docs-Hzp8B
branch
from
5072d7c to
17048d1
Compare
AndyTWF
changed the title
Contributor
Author
|
@ably/team-deved Not ready to merge until next week, but ready for review :) |
m-hulbert
approved these changes
Feb 17, 2026
Contributor
m-hulbert
left a comment
m-hulbert
left a comment
There was a problem hiding this comment.
Small suggestion but otherwise LGTM
| Messages can be annotated with trusted metadata copied from the client's authentication token by Ably servers. Clients are unable to directly publish messages with user claim metadata, and claims contained within the authentication token are signed to prevent tampering. Claims can be scoped to individual channels or to namespaces of [channels](/docs/channels). The most specific user claim will be added to the message as part of the `extras` object. Note that this does not apply to presence or metadata messages. | ||
| Messages can be annotated with trusted metadata copied from the client's authentication token by Ably servers. Clients are unable to directly publish messages with user claim metadata, and claims contained within the authentication token are signed to prevent tampering. Claims can be scoped to individual channels or to namespaces of [channels](/docs/channels). The most specific user claim will be added to the message as part of the `extras` object. | ||
|
|
||
| Custom restrictions also apply to presence messages and individual annotations. In both cases, the user claim is included in `extras.userClaim`. |
Contributor
There was a problem hiding this comment.
Worth a link to presence and annotations pages I think
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
This PR updates the documentation for JWT user claims in Ably to include Presence and Annotations.
CHA-1243
Checklist
https://claude.ai/code/session_01TKV8vHU7MP62PNzDJuKwiF