Production Hardening
What This Is
A release checklist for production Sign in with Lovelace deployments.
Who This Is For
Engineers and operators responsible for release readiness.
What You Will Finish With
- A verified configuration and verification pipeline.
- Predictable fallback behavior.
- Safer operational defaults.
Configuration Checklist
- Set
NEXT_PUBLIC_LOVELACE_OAUTH_CLIENT_ID. - Register exact production origins in client configuration.
- Set explicit Accounts URL overrides only when needed.
- Use HTTPS in production environments.
Verification Checklist
- Verify route validates issuer and audience.
- Verify route creates app session only on successful token validation.
- User-facing UI messages remain generic and actionable.
- Server logs include structured diagnostic context.
Browser Behavior Checklist
- FedCM path works in supported Chromium browsers.
- Unsupported browsers redirect immediately.
- No polling loops in auth initiation path.