fix(clerk-js): backport fail-fast slow-origin load for Core 2 - #9123

Merged
nikosdouvlis merged 1 commit into
release/core-2from
backport/9065-fail-fast-slow-origin-core-2
Jul 12, 2026
Merged

fix(clerk-js): backport fail-fast slow-origin load for Core 2#9123
nikosdouvlis merged 1 commit into
release/core-2from
backport/9065-fail-fast-slow-origin-core-2

Conversation

@nikosdouvlis

Copy link
Copy Markdown
Member

Backports the fail-fast slow-origin load fix from #9065 to the release/core-2 line.

When Clerk's Frontend API is slow or unreachable during load, a cold Clerk.load() could hang for a long time. The /client request had no timeout, and on a 5xx or network error the recovery path burned the full retry budget before Clerk was marked loaded, so during an origin outage the app sat unresponsive instead of degrading and rendering.

What changed
The /client fetch and the load-recovery token mint are now bounded by a 7s timeout, and the timed-out /client request is aborted instead of being left in flight (via a new optional abortSignal threaded through Client.fetch down to the native fetch signal). On a slow or failed /client, recovery renders identity from the __session cookie, clears the session's token cache so the mint bypasses the cache, and keeps the cookie identity if the mint times out. After a degraded load, the client is re-fetched in the background without a time limit so a slow-but-healthy origin recovers full client data without a reload. Also adds a timeLimit utility to @clerk/shared/utils.

As-is backport
This matches main's current behavior, including the known gaps documented on #9065: the /environment request is not yet bounded, and the recovery mint stops waiting but isn't cancellable. Those are intentionally carried over so core-2 tracks main, and will be backported once they're addressed there.

Adapted to core-2
release/core-2 diverged from main about 7 months ago, so this is an adaptation rather than a cherry-pick. Core-2 already had createClientFromJwt and the tokenFreshness guard (backported in #9090), so only the initClient recovery body in load() was swapped; the abortSignal plumbing and the timeLimit util are net-new. No #clientUpdateGeneration guard exists on core-2 and none was added.

Verification
On the core-2 branch: timeLimit 6/6, clerk.test.ts 109/109 (including 7 new degraded-load tests), jwt-client.test.ts 3/3, fapiClient.test.ts 26 passing, and the clerk-js declarations typecheck is clean.

Backports the fail-fast slow-origin load fix (#9065) to the release/core-2
line. When FAPI is slow or unreachable during load, a cold Clerk.load()
could hang for minutes. The /client request and the load-recovery token mint
are now bounded by a 7s timeout, the timed-out request is aborted, and
recovery renders identity from the session cookie while an unbounded
background refetch restores full client data. Adds a timeLimit util to
@clerk/shared/utils.
@changeset-bot

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 7853518

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 22 packages
NameType
@clerk/clerk-jsPatch
@clerk/sharedPatch
@clerk/chrome-extensionPatch
@clerk/clerk-expoPatch
@clerk/agent-toolkitPatch
@clerk/astroPatch
@clerk/backendPatch
@clerk/elementsPatch
@clerk/expo-passkeysPatch
@clerk/expressPatch
@clerk/fastifyPatch
@clerk/nextjsPatch
@clerk/nuxtPatch
@clerk/react-routerPatch
@clerk/clerk-reactPatch
@clerk/remixPatch
@clerk/tanstack-react-startPatch
@clerk/testingPatch
@clerk/themesPatch
@clerk/typesPatch
@clerk/vuePatch
@clerk/localizationsPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@vercel

vercelBot commented Jul 10, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreview, CommentJul 10, 2026 11:00am
swingsetErrorErrorJul 10, 2026 11:00am

Request Review

@coderabbitai

Copy link
Copy Markdown
Contributor

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 1f286482-13b4-4559-b25b-8572594962ba

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch backport/9065-fail-fast-slow-origin-core-2

Comment @coderabbitai help to get the list of available commands.

@pkg-pr-new

Copy link
Copy Markdown

Open in StackBlitz

@clerk/agent-toolkit

npm i https://pkg.pr.new/@clerk/agent-toolkit@9123

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9123

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9123

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9123

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9123

@clerk/dev-cli

npm i https://pkg.pr.new/@clerk/dev-cli@9123

@clerk/elements

npm i https://pkg.pr.new/@clerk/elements@9123

@clerk/clerk-expo

npm i https://pkg.pr.new/@clerk/clerk-expo@9123

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9123

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9123

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9123

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9123

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9123

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9123

@clerk/clerk-react

npm i https://pkg.pr.new/@clerk/clerk-react@9123

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9123

@clerk/remix

npm i https://pkg.pr.new/@clerk/remix@9123

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9123

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9123

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9123

@clerk/themes

npm i https://pkg.pr.new/@clerk/themes@9123

@clerk/types

npm i https://pkg.pr.new/@clerk/types@9123

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9123

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9123

commit: 7853518

@nikosdouvlis
nikosdouvlis merged commit 4093b03 into release/core-2Jul 12, 2026
42 of 47 checks passed
@nikosdouvlis
nikosdouvlis deleted the backport/9065-fail-fast-slow-origin-core-2 branch July 12, 2026 17:12
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@nikosdouvlis
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
Skip to content

fix(clerk-js): backport fail-fast slow-origin load for Core 2 - #9123

Merged
nikosdouvlis merged 1 commit into
release/core-2from
backport/9065-fail-fast-slow-origin-core-2
Jul 12, 2026
Merged

fix(clerk-js): backport fail-fast slow-origin load for Core 2#9123
nikosdouvlis merged 1 commit into
release/core-2from
backport/9065-fail-fast-slow-origin-core-2

Conversation

@nikosdouvlis

Copy link
Copy Markdown
Member

Backports the fail-fast slow-origin load fix from #9065 to the release/core-2 line.

When Clerk's Frontend API is slow or unreachable during load, a cold Clerk.load() could hang for a long time. The /client request had no timeout, and on a 5xx or network error the recovery path burned the full retry budget before Clerk was marked loaded, so during an origin outage the app sat unresponsive instead of degrading and rendering.

What changed
The /client fetch and the load-recovery token mint are now bounded by a 7s timeout, and the timed-out /client request is aborted instead of being left in flight (via a new optional abortSignal threaded through Client.fetch down to the native fetch signal). On a slow or failed /client, recovery renders identity from the __session cookie, clears the session's token cache so the mint bypasses the cache, and keeps the cookie identity if the mint times out. After a degraded load, the client is re-fetched in the background without a time limit so a slow-but-healthy origin recovers full client data without a reload. Also adds a timeLimit utility to @clerk/shared/utils.

As-is backport
This matches main's current behavior, including the known gaps documented on #9065: the /environment request is not yet bounded, and the recovery mint stops waiting but isn't cancellable. Those are intentionally carried over so core-2 tracks main, and will be backported once they're addressed there.

Adapted to core-2
release/core-2 diverged from main about 7 months ago, so this is an adaptation rather than a cherry-pick. Core-2 already had createClientFromJwt and the tokenFreshness guard (backported in #9090), so only the initClient recovery body in load() was swapped; the abortSignal plumbing and the timeLimit util are net-new. No #clientUpdateGeneration guard exists on core-2 and none was added.

Verification
On the core-2 branch: timeLimit 6/6, clerk.test.ts 109/109 (including 7 new degraded-load tests), jwt-client.test.ts 3/3, fapiClient.test.ts 26 passing, and the clerk-js declarations typecheck is clean.

Backports the fail-fast slow-origin load fix (#9065) to the release/core-2
line. When FAPI is slow or unreachable during load, a cold Clerk.load()
could hang for minutes. The /client request and the load-recovery token mint
are now bounded by a 7s timeout, the timed-out request is aborted, and
recovery renders identity from the session cookie while an unbounded
background refetch restores full client data. Adds a timeLimit util to
@clerk/shared/utils.
@changeset-bot

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 7853518

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 22 packages
NameType
@clerk/clerk-jsPatch
@clerk/sharedPatch
@clerk/chrome-extensionPatch
@clerk/clerk-expoPatch
@clerk/agent-toolkitPatch
@clerk/astroPatch
@clerk/backendPatch
@clerk/elementsPatch
@clerk/expo-passkeysPatch
@clerk/expressPatch
@clerk/fastifyPatch
@clerk/nextjsPatch
@clerk/nuxtPatch
@clerk/react-routerPatch
@clerk/clerk-reactPatch
@clerk/remixPatch
@clerk/tanstack-react-startPatch
@clerk/testingPatch
@clerk/themesPatch
@clerk/typesPatch
@clerk/vuePatch
@clerk/localizationsPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@vercel

vercelBot commented Jul 10, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreview, CommentJul 10, 2026 11:00am
swingsetErrorErrorJul 10, 2026 11:00am

Request Review

@coderabbitai

Copy link
Copy Markdown
Contributor

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 1f286482-13b4-4559-b25b-8572594962ba

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch backport/9065-fail-fast-slow-origin-core-2

Comment @coderabbitai help to get the list of available commands.

@pkg-pr-new

Copy link
Copy Markdown

Open in StackBlitz

@clerk/agent-toolkit

npm i https://pkg.pr.new/@clerk/agent-toolkit@9123

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9123

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9123

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9123

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9123

@clerk/dev-cli

npm i https://pkg.pr.new/@clerk/dev-cli@9123

@clerk/elements

npm i https://pkg.pr.new/@clerk/elements@9123

@clerk/clerk-expo

npm i https://pkg.pr.new/@clerk/clerk-expo@9123

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9123

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9123

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9123

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9123

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9123

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9123

@clerk/clerk-react

npm i https://pkg.pr.new/@clerk/clerk-react@9123

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9123

@clerk/remix

npm i https://pkg.pr.new/@clerk/remix@9123

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9123

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9123

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9123

@clerk/themes

npm i https://pkg.pr.new/@clerk/themes@9123

@clerk/types

npm i https://pkg.pr.new/@clerk/types@9123

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9123

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9123

commit: 7853518

@nikosdouvlis
nikosdouvlis merged commit 4093b03 into release/core-2Jul 12, 2026
42 of 47 checks passed
@nikosdouvlis
nikosdouvlis deleted the backport/9065-fail-fast-slow-origin-core-2 branch July 12, 2026 17:12
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@nikosdouvlis
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix"); } } catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

fix(clerk-js): backport fail-fast slow-origin load for Core 2 - #9123

Merged
nikosdouvlis merged 1 commit into
release/core-2from
backport/9065-fail-fast-slow-origin-core-2
Jul 12, 2026
Merged

fix(clerk-js): backport fail-fast slow-origin load for Core 2#9123
nikosdouvlis merged 1 commit into
release/core-2from
backport/9065-fail-fast-slow-origin-core-2

Conversation

@nikosdouvlis

Copy link
Copy Markdown
Member

Backports the fail-fast slow-origin load fix from #9065 to the release/core-2 line.

When Clerk's Frontend API is slow or unreachable during load, a cold Clerk.load() could hang for a long time. The /client request had no timeout, and on a 5xx or network error the recovery path burned the full retry budget before Clerk was marked loaded, so during an origin outage the app sat unresponsive instead of degrading and rendering.

What changed
The /client fetch and the load-recovery token mint are now bounded by a 7s timeout, and the timed-out /client request is aborted instead of being left in flight (via a new optional abortSignal threaded through Client.fetch down to the native fetch signal). On a slow or failed /client, recovery renders identity from the __session cookie, clears the session's token cache so the mint bypasses the cache, and keeps the cookie identity if the mint times out. After a degraded load, the client is re-fetched in the background without a time limit so a slow-but-healthy origin recovers full client data without a reload. Also adds a timeLimit utility to @clerk/shared/utils.

As-is backport
This matches main's current behavior, including the known gaps documented on #9065: the /environment request is not yet bounded, and the recovery mint stops waiting but isn't cancellable. Those are intentionally carried over so core-2 tracks main, and will be backported once they're addressed there.

Adapted to core-2
release/core-2 diverged from main about 7 months ago, so this is an adaptation rather than a cherry-pick. Core-2 already had createClientFromJwt and the tokenFreshness guard (backported in #9090), so only the initClient recovery body in load() was swapped; the abortSignal plumbing and the timeLimit util are net-new. No #clientUpdateGeneration guard exists on core-2 and none was added.

Verification
On the core-2 branch: timeLimit 6/6, clerk.test.ts 109/109 (including 7 new degraded-load tests), jwt-client.test.ts 3/3, fapiClient.test.ts 26 passing, and the clerk-js declarations typecheck is clean.

Backports the fail-fast slow-origin load fix (#9065) to the release/core-2
line. When FAPI is slow or unreachable during load, a cold Clerk.load()
could hang for minutes. The /client request and the load-recovery token mint
are now bounded by a 7s timeout, the timed-out request is aborted, and
recovery renders identity from the session cookie while an unbounded
background refetch restores full client data. Adds a timeLimit util to
@clerk/shared/utils.
@changeset-bot

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 7853518

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 22 packages
NameType
@clerk/clerk-jsPatch
@clerk/sharedPatch
@clerk/chrome-extensionPatch
@clerk/clerk-expoPatch
@clerk/agent-toolkitPatch
@clerk/astroPatch
@clerk/backendPatch
@clerk/elementsPatch
@clerk/expo-passkeysPatch
@clerk/expressPatch
@clerk/fastifyPatch
@clerk/nextjsPatch
@clerk/nuxtPatch
@clerk/react-routerPatch
@clerk/clerk-reactPatch
@clerk/remixPatch
@clerk/tanstack-react-startPatch
@clerk/testingPatch
@clerk/themesPatch
@clerk/typesPatch
@clerk/vuePatch
@clerk/localizationsPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@vercel

vercelBot commented Jul 10, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreview, CommentJul 10, 2026 11:00am
swingsetErrorErrorJul 10, 2026 11:00am

Request Review

@coderabbitai

Copy link
Copy Markdown
Contributor

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 1f286482-13b4-4559-b25b-8572594962ba

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch backport/9065-fail-fast-slow-origin-core-2

Comment @coderabbitai help to get the list of available commands.

@pkg-pr-new

Copy link
Copy Markdown

Open in StackBlitz

@clerk/agent-toolkit

npm i https://pkg.pr.new/@clerk/agent-toolkit@9123

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9123

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9123

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9123

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9123

@clerk/dev-cli

npm i https://pkg.pr.new/@clerk/dev-cli@9123

@clerk/elements

npm i https://pkg.pr.new/@clerk/elements@9123

@clerk/clerk-expo

npm i https://pkg.pr.new/@clerk/clerk-expo@9123

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9123

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9123

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9123

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9123

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9123

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9123

@clerk/clerk-react

npm i https://pkg.pr.new/@clerk/clerk-react@9123

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9123

@clerk/remix

npm i https://pkg.pr.new/@clerk/remix@9123

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9123

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9123

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9123

@clerk/themes

npm i https://pkg.pr.new/@clerk/themes@9123

@clerk/types

npm i https://pkg.pr.new/@clerk/types@9123

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9123

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9123

commit: 7853518

@nikosdouvlis
nikosdouvlis merged commit 4093b03 into release/core-2Jul 12, 2026
42 of 47 checks passed
@nikosdouvlis
nikosdouvlis deleted the backport/9065-fail-fast-slow-origin-core-2 branch July 12, 2026 17:12
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@nikosdouvlis
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms"); } } catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

fix(clerk-js): backport fail-fast slow-origin load for Core 2 - #9123

Merged
nikosdouvlis merged 1 commit into
release/core-2from
backport/9065-fail-fast-slow-origin-core-2
Jul 12, 2026
Merged

fix(clerk-js): backport fail-fast slow-origin load for Core 2#9123
nikosdouvlis merged 1 commit into
release/core-2from
backport/9065-fail-fast-slow-origin-core-2

Conversation

@nikosdouvlis

Copy link
Copy Markdown
Member

Backports the fail-fast slow-origin load fix from #9065 to the release/core-2 line.

When Clerk's Frontend API is slow or unreachable during load, a cold Clerk.load() could hang for a long time. The /client request had no timeout, and on a 5xx or network error the recovery path burned the full retry budget before Clerk was marked loaded, so during an origin outage the app sat unresponsive instead of degrading and rendering.

What changed
The /client fetch and the load-recovery token mint are now bounded by a 7s timeout, and the timed-out /client request is aborted instead of being left in flight (via a new optional abortSignal threaded through Client.fetch down to the native fetch signal). On a slow or failed /client, recovery renders identity from the __session cookie, clears the session's token cache so the mint bypasses the cache, and keeps the cookie identity if the mint times out. After a degraded load, the client is re-fetched in the background without a time limit so a slow-but-healthy origin recovers full client data without a reload. Also adds a timeLimit utility to @clerk/shared/utils.

As-is backport
This matches main's current behavior, including the known gaps documented on #9065: the /environment request is not yet bounded, and the recovery mint stops waiting but isn't cancellable. Those are intentionally carried over so core-2 tracks main, and will be backported once they're addressed there.

Adapted to core-2
release/core-2 diverged from main about 7 months ago, so this is an adaptation rather than a cherry-pick. Core-2 already had createClientFromJwt and the tokenFreshness guard (backported in #9090), so only the initClient recovery body in load() was swapped; the abortSignal plumbing and the timeLimit util are net-new. No #clientUpdateGeneration guard exists on core-2 and none was added.

Verification
On the core-2 branch: timeLimit 6/6, clerk.test.ts 109/109 (including 7 new degraded-load tests), jwt-client.test.ts 3/3, fapiClient.test.ts 26 passing, and the clerk-js declarations typecheck is clean.

Backports the fail-fast slow-origin load fix (#9065) to the release/core-2
line. When FAPI is slow or unreachable during load, a cold Clerk.load()
could hang for minutes. The /client request and the load-recovery token mint
are now bounded by a 7s timeout, the timed-out request is aborted, and
recovery renders identity from the session cookie while an unbounded
background refetch restores full client data. Adds a timeLimit util to
@clerk/shared/utils.
@changeset-bot

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 7853518

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 22 packages
NameType
@clerk/clerk-jsPatch
@clerk/sharedPatch
@clerk/chrome-extensionPatch
@clerk/clerk-expoPatch
@clerk/agent-toolkitPatch
@clerk/astroPatch
@clerk/backendPatch
@clerk/elementsPatch
@clerk/expo-passkeysPatch
@clerk/expressPatch
@clerk/fastifyPatch
@clerk/nextjsPatch
@clerk/nuxtPatch
@clerk/react-routerPatch
@clerk/clerk-reactPatch
@clerk/remixPatch
@clerk/tanstack-react-startPatch
@clerk/testingPatch
@clerk/themesPatch
@clerk/typesPatch
@clerk/vuePatch
@clerk/localizationsPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@vercel

vercelBot commented Jul 10, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreview, CommentJul 10, 2026 11:00am
swingsetErrorErrorJul 10, 2026 11:00am

Request Review

@coderabbitai

Copy link
Copy Markdown
Contributor

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 1f286482-13b4-4559-b25b-8572594962ba

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch backport/9065-fail-fast-slow-origin-core-2

Comment @coderabbitai help to get the list of available commands.

@pkg-pr-new

Copy link
Copy Markdown

Open in StackBlitz

@clerk/agent-toolkit

npm i https://pkg.pr.new/@clerk/agent-toolkit@9123

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9123

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9123

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9123

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9123

@clerk/dev-cli

npm i https://pkg.pr.new/@clerk/dev-cli@9123

@clerk/elements

npm i https://pkg.pr.new/@clerk/elements@9123

@clerk/clerk-expo

npm i https://pkg.pr.new/@clerk/clerk-expo@9123

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9123

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9123

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9123

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9123

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9123

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9123

@clerk/clerk-react

npm i https://pkg.pr.new/@clerk/clerk-react@9123

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9123

@clerk/remix

npm i https://pkg.pr.new/@clerk/remix@9123

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9123

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9123

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9123

@clerk/themes

npm i https://pkg.pr.new/@clerk/themes@9123

@clerk/types

npm i https://pkg.pr.new/@clerk/types@9123

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9123

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9123

commit: 7853518

@nikosdouvlis
nikosdouvlis merged commit 4093b03 into release/core-2Jul 12, 2026
42 of 47 checks passed
@nikosdouvlis
nikosdouvlis deleted the backport/9065-fail-fast-slow-origin-core-2 branch July 12, 2026 17:12
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@nikosdouvlis
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links"); } } catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); } })(); (function(){ try { var __m = "youtube.com"; var __re = new RegExp('^' + "youtube\\.com" + '
Skip to content

fix(clerk-js): backport fail-fast slow-origin load for Core 2 - #9123

Merged
nikosdouvlis merged 1 commit into
release/core-2from
backport/9065-fail-fast-slow-origin-core-2
Jul 12, 2026
Merged

fix(clerk-js): backport fail-fast slow-origin load for Core 2#9123
nikosdouvlis merged 1 commit into
release/core-2from
backport/9065-fail-fast-slow-origin-core-2

Conversation

@nikosdouvlis

Copy link
Copy Markdown
Member

Backports the fail-fast slow-origin load fix from #9065 to the release/core-2 line.

When Clerk's Frontend API is slow or unreachable during load, a cold Clerk.load() could hang for a long time. The /client request had no timeout, and on a 5xx or network error the recovery path burned the full retry budget before Clerk was marked loaded, so during an origin outage the app sat unresponsive instead of degrading and rendering.

What changed
The /client fetch and the load-recovery token mint are now bounded by a 7s timeout, and the timed-out /client request is aborted instead of being left in flight (via a new optional abortSignal threaded through Client.fetch down to the native fetch signal). On a slow or failed /client, recovery renders identity from the __session cookie, clears the session's token cache so the mint bypasses the cache, and keeps the cookie identity if the mint times out. After a degraded load, the client is re-fetched in the background without a time limit so a slow-but-healthy origin recovers full client data without a reload. Also adds a timeLimit utility to @clerk/shared/utils.

As-is backport
This matches main's current behavior, including the known gaps documented on #9065: the /environment request is not yet bounded, and the recovery mint stops waiting but isn't cancellable. Those are intentionally carried over so core-2 tracks main, and will be backported once they're addressed there.

Adapted to core-2
release/core-2 diverged from main about 7 months ago, so this is an adaptation rather than a cherry-pick. Core-2 already had createClientFromJwt and the tokenFreshness guard (backported in #9090), so only the initClient recovery body in load() was swapped; the abortSignal plumbing and the timeLimit util are net-new. No #clientUpdateGeneration guard exists on core-2 and none was added.

Verification
On the core-2 branch: timeLimit 6/6, clerk.test.ts 109/109 (including 7 new degraded-load tests), jwt-client.test.ts 3/3, fapiClient.test.ts 26 passing, and the clerk-js declarations typecheck is clean.

Backports the fail-fast slow-origin load fix (#9065) to the release/core-2
line. When FAPI is slow or unreachable during load, a cold Clerk.load()
could hang for minutes. The /client request and the load-recovery token mint
are now bounded by a 7s timeout, the timed-out request is aborted, and
recovery renders identity from the session cookie while an unbounded
background refetch restores full client data. Adds a timeLimit util to
@clerk/shared/utils.
@changeset-bot

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 7853518

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 22 packages
NameType
@clerk/clerk-jsPatch
@clerk/sharedPatch
@clerk/chrome-extensionPatch
@clerk/clerk-expoPatch
@clerk/agent-toolkitPatch
@clerk/astroPatch
@clerk/backendPatch
@clerk/elementsPatch
@clerk/expo-passkeysPatch
@clerk/expressPatch
@clerk/fastifyPatch
@clerk/nextjsPatch
@clerk/nuxtPatch
@clerk/react-routerPatch
@clerk/clerk-reactPatch
@clerk/remixPatch
@clerk/tanstack-react-startPatch
@clerk/testingPatch
@clerk/themesPatch
@clerk/typesPatch
@clerk/vuePatch
@clerk/localizationsPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@vercel

vercelBot commented Jul 10, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreview, CommentJul 10, 2026 11:00am
swingsetErrorErrorJul 10, 2026 11:00am

Request Review

@coderabbitai

Copy link
Copy Markdown
Contributor

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 1f286482-13b4-4559-b25b-8572594962ba

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch backport/9065-fail-fast-slow-origin-core-2

Comment @coderabbitai help to get the list of available commands.

@pkg-pr-new

Copy link
Copy Markdown

Open in StackBlitz

@clerk/agent-toolkit

npm i https://pkg.pr.new/@clerk/agent-toolkit@9123

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9123

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9123

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9123

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9123

@clerk/dev-cli

npm i https://pkg.pr.new/@clerk/dev-cli@9123

@clerk/elements

npm i https://pkg.pr.new/@clerk/elements@9123

@clerk/clerk-expo

npm i https://pkg.pr.new/@clerk/clerk-expo@9123

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9123

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9123

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9123

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9123

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9123

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9123

@clerk/clerk-react

npm i https://pkg.pr.new/@clerk/clerk-react@9123

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9123

@clerk/remix

npm i https://pkg.pr.new/@clerk/remix@9123

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9123

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9123

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9123

@clerk/themes

npm i https://pkg.pr.new/@clerk/themes@9123

@clerk/types

npm i https://pkg.pr.new/@clerk/types@9123

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9123

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9123

commit: 7853518

@nikosdouvlis
nikosdouvlis merged commit 4093b03 into release/core-2Jul 12, 2026
42 of 47 checks passed
@nikosdouvlis
nikosdouvlis deleted the backport/9065-fail-fast-slow-origin-core-2 branch July 12, 2026 17:12
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@nikosdouvlis
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default"); } } catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

fix(clerk-js): backport fail-fast slow-origin load for Core 2 - #9123

Merged
nikosdouvlis merged 1 commit into
release/core-2from
backport/9065-fail-fast-slow-origin-core-2
Jul 12, 2026
Merged

fix(clerk-js): backport fail-fast slow-origin load for Core 2#9123
nikosdouvlis merged 1 commit into
release/core-2from
backport/9065-fail-fast-slow-origin-core-2

Conversation

@nikosdouvlis

Copy link
Copy Markdown
Member

Backports the fail-fast slow-origin load fix from #9065 to the release/core-2 line.

When Clerk's Frontend API is slow or unreachable during load, a cold Clerk.load() could hang for a long time. The /client request had no timeout, and on a 5xx or network error the recovery path burned the full retry budget before Clerk was marked loaded, so during an origin outage the app sat unresponsive instead of degrading and rendering.

What changed
The /client fetch and the load-recovery token mint are now bounded by a 7s timeout, and the timed-out /client request is aborted instead of being left in flight (via a new optional abortSignal threaded through Client.fetch down to the native fetch signal). On a slow or failed /client, recovery renders identity from the __session cookie, clears the session's token cache so the mint bypasses the cache, and keeps the cookie identity if the mint times out. After a degraded load, the client is re-fetched in the background without a time limit so a slow-but-healthy origin recovers full client data without a reload. Also adds a timeLimit utility to @clerk/shared/utils.

As-is backport
This matches main's current behavior, including the known gaps documented on #9065: the /environment request is not yet bounded, and the recovery mint stops waiting but isn't cancellable. Those are intentionally carried over so core-2 tracks main, and will be backported once they're addressed there.

Adapted to core-2
release/core-2 diverged from main about 7 months ago, so this is an adaptation rather than a cherry-pick. Core-2 already had createClientFromJwt and the tokenFreshness guard (backported in #9090), so only the initClient recovery body in load() was swapped; the abortSignal plumbing and the timeLimit util are net-new. No #clientUpdateGeneration guard exists on core-2 and none was added.

Verification
On the core-2 branch: timeLimit 6/6, clerk.test.ts 109/109 (including 7 new degraded-load tests), jwt-client.test.ts 3/3, fapiClient.test.ts 26 passing, and the clerk-js declarations typecheck is clean.

Backports the fail-fast slow-origin load fix (#9065) to the release/core-2
line. When FAPI is slow or unreachable during load, a cold Clerk.load()
could hang for minutes. The /client request and the load-recovery token mint
are now bounded by a 7s timeout, the timed-out request is aborted, and
recovery renders identity from the session cookie while an unbounded
background refetch restores full client data. Adds a timeLimit util to
@clerk/shared/utils.
@changeset-bot

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 7853518

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 22 packages
NameType
@clerk/clerk-jsPatch
@clerk/sharedPatch
@clerk/chrome-extensionPatch
@clerk/clerk-expoPatch
@clerk/agent-toolkitPatch
@clerk/astroPatch
@clerk/backendPatch
@clerk/elementsPatch
@clerk/expo-passkeysPatch
@clerk/expressPatch
@clerk/fastifyPatch
@clerk/nextjsPatch
@clerk/nuxtPatch
@clerk/react-routerPatch
@clerk/clerk-reactPatch
@clerk/remixPatch
@clerk/tanstack-react-startPatch
@clerk/testingPatch
@clerk/themesPatch
@clerk/typesPatch
@clerk/vuePatch
@clerk/localizationsPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@vercel

vercelBot commented Jul 10, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreview, CommentJul 10, 2026 11:00am
swingsetErrorErrorJul 10, 2026 11:00am

Request Review

@coderabbitai

Copy link
Copy Markdown
Contributor

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 1f286482-13b4-4559-b25b-8572594962ba

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch backport/9065-fail-fast-slow-origin-core-2

Comment @coderabbitai help to get the list of available commands.

@pkg-pr-new

Copy link
Copy Markdown

Open in StackBlitz

@clerk/agent-toolkit

npm i https://pkg.pr.new/@clerk/agent-toolkit@9123

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9123

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9123

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9123

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9123

@clerk/dev-cli

npm i https://pkg.pr.new/@clerk/dev-cli@9123

@clerk/elements

npm i https://pkg.pr.new/@clerk/elements@9123

@clerk/clerk-expo

npm i https://pkg.pr.new/@clerk/clerk-expo@9123

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9123

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9123

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9123

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9123

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9123

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9123

@clerk/clerk-react

npm i https://pkg.pr.new/@clerk/clerk-react@9123

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9123

@clerk/remix

npm i https://pkg.pr.new/@clerk/remix@9123

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9123

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9123

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9123

@clerk/themes

npm i https://pkg.pr.new/@clerk/themes@9123

@clerk/types

npm i https://pkg.pr.new/@clerk/types@9123

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9123

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9123

commit: 7853518

@nikosdouvlis
nikosdouvlis merged commit 4093b03 into release/core-2Jul 12, 2026
42 of 47 checks passed
@nikosdouvlis
nikosdouvlis deleted the backport/9065-fail-fast-slow-origin-core-2 branch July 12, 2026 17:12
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@nikosdouvlis
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers"); } } catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

fix(clerk-js): backport fail-fast slow-origin load for Core 2 - #9123

Merged
nikosdouvlis merged 1 commit into
release/core-2from
backport/9065-fail-fast-slow-origin-core-2
Jul 12, 2026
Merged

fix(clerk-js): backport fail-fast slow-origin load for Core 2#9123
nikosdouvlis merged 1 commit into
release/core-2from
backport/9065-fail-fast-slow-origin-core-2

Conversation

@nikosdouvlis

Copy link
Copy Markdown
Member

Backports the fail-fast slow-origin load fix from #9065 to the release/core-2 line.

When Clerk's Frontend API is slow or unreachable during load, a cold Clerk.load() could hang for a long time. The /client request had no timeout, and on a 5xx or network error the recovery path burned the full retry budget before Clerk was marked loaded, so during an origin outage the app sat unresponsive instead of degrading and rendering.

What changed
The /client fetch and the load-recovery token mint are now bounded by a 7s timeout, and the timed-out /client request is aborted instead of being left in flight (via a new optional abortSignal threaded through Client.fetch down to the native fetch signal). On a slow or failed /client, recovery renders identity from the __session cookie, clears the session's token cache so the mint bypasses the cache, and keeps the cookie identity if the mint times out. After a degraded load, the client is re-fetched in the background without a time limit so a slow-but-healthy origin recovers full client data without a reload. Also adds a timeLimit utility to @clerk/shared/utils.

As-is backport
This matches main's current behavior, including the known gaps documented on #9065: the /environment request is not yet bounded, and the recovery mint stops waiting but isn't cancellable. Those are intentionally carried over so core-2 tracks main, and will be backported once they're addressed there.

Adapted to core-2
release/core-2 diverged from main about 7 months ago, so this is an adaptation rather than a cherry-pick. Core-2 already had createClientFromJwt and the tokenFreshness guard (backported in #9090), so only the initClient recovery body in load() was swapped; the abortSignal plumbing and the timeLimit util are net-new. No #clientUpdateGeneration guard exists on core-2 and none was added.

Verification
On the core-2 branch: timeLimit 6/6, clerk.test.ts 109/109 (including 7 new degraded-load tests), jwt-client.test.ts 3/3, fapiClient.test.ts 26 passing, and the clerk-js declarations typecheck is clean.

Backports the fail-fast slow-origin load fix (#9065) to the release/core-2
line. When FAPI is slow or unreachable during load, a cold Clerk.load()
could hang for minutes. The /client request and the load-recovery token mint
are now bounded by a 7s timeout, the timed-out request is aborted, and
recovery renders identity from the session cookie while an unbounded
background refetch restores full client data. Adds a timeLimit util to
@clerk/shared/utils.
@changeset-bot

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 7853518

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 22 packages
NameType
@clerk/clerk-jsPatch
@clerk/sharedPatch
@clerk/chrome-extensionPatch
@clerk/clerk-expoPatch
@clerk/agent-toolkitPatch
@clerk/astroPatch
@clerk/backendPatch
@clerk/elementsPatch
@clerk/expo-passkeysPatch
@clerk/expressPatch
@clerk/fastifyPatch
@clerk/nextjsPatch
@clerk/nuxtPatch
@clerk/react-routerPatch
@clerk/clerk-reactPatch
@clerk/remixPatch
@clerk/tanstack-react-startPatch
@clerk/testingPatch
@clerk/themesPatch
@clerk/typesPatch
@clerk/vuePatch
@clerk/localizationsPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@vercel

vercelBot commented Jul 10, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreview, CommentJul 10, 2026 11:00am
swingsetErrorErrorJul 10, 2026 11:00am

Request Review

@coderabbitai

Copy link
Copy Markdown
Contributor

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 1f286482-13b4-4559-b25b-8572594962ba

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch backport/9065-fail-fast-slow-origin-core-2

Comment @coderabbitai help to get the list of available commands.

@pkg-pr-new

Copy link
Copy Markdown

Open in StackBlitz

@clerk/agent-toolkit

npm i https://pkg.pr.new/@clerk/agent-toolkit@9123

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9123

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9123

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9123

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9123

@clerk/dev-cli

npm i https://pkg.pr.new/@clerk/dev-cli@9123

@clerk/elements

npm i https://pkg.pr.new/@clerk/elements@9123

@clerk/clerk-expo

npm i https://pkg.pr.new/@clerk/clerk-expo@9123

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9123

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9123

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9123

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9123

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9123

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9123

@clerk/clerk-react

npm i https://pkg.pr.new/@clerk/clerk-react@9123

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9123

@clerk/remix

npm i https://pkg.pr.new/@clerk/remix@9123

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9123

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9123

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9123

@clerk/themes

npm i https://pkg.pr.new/@clerk/themes@9123

@clerk/types

npm i https://pkg.pr.new/@clerk/types@9123

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9123

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9123

commit: 7853518

@nikosdouvlis
nikosdouvlis merged commit 4093b03 into release/core-2Jul 12, 2026
42 of 47 checks passed
@nikosdouvlis
nikosdouvlis deleted the backport/9065-fail-fast-slow-origin-core-2 branch July 12, 2026 17:12
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@nikosdouvlis
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode"); } } catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); } })(); })();
Skip to content

fix(clerk-js): backport fail-fast slow-origin load for Core 2 - #9123

Merged
nikosdouvlis merged 1 commit into
release/core-2from
backport/9065-fail-fast-slow-origin-core-2
Jul 12, 2026
Merged

fix(clerk-js): backport fail-fast slow-origin load for Core 2#9123
nikosdouvlis merged 1 commit into
release/core-2from
backport/9065-fail-fast-slow-origin-core-2

Conversation

@nikosdouvlis

Copy link
Copy Markdown
Member

Backports the fail-fast slow-origin load fix from #9065 to the release/core-2 line.

When Clerk's Frontend API is slow or unreachable during load, a cold Clerk.load() could hang for a long time. The /client request had no timeout, and on a 5xx or network error the recovery path burned the full retry budget before Clerk was marked loaded, so during an origin outage the app sat unresponsive instead of degrading and rendering.

What changed
The /client fetch and the load-recovery token mint are now bounded by a 7s timeout, and the timed-out /client request is aborted instead of being left in flight (via a new optional abortSignal threaded through Client.fetch down to the native fetch signal). On a slow or failed /client, recovery renders identity from the __session cookie, clears the session's token cache so the mint bypasses the cache, and keeps the cookie identity if the mint times out. After a degraded load, the client is re-fetched in the background without a time limit so a slow-but-healthy origin recovers full client data without a reload. Also adds a timeLimit utility to @clerk/shared/utils.

As-is backport
This matches main's current behavior, including the known gaps documented on #9065: the /environment request is not yet bounded, and the recovery mint stops waiting but isn't cancellable. Those are intentionally carried over so core-2 tracks main, and will be backported once they're addressed there.

Adapted to core-2
release/core-2 diverged from main about 7 months ago, so this is an adaptation rather than a cherry-pick. Core-2 already had createClientFromJwt and the tokenFreshness guard (backported in #9090), so only the initClient recovery body in load() was swapped; the abortSignal plumbing and the timeLimit util are net-new. No #clientUpdateGeneration guard exists on core-2 and none was added.

Verification
On the core-2 branch: timeLimit 6/6, clerk.test.ts 109/109 (including 7 new degraded-load tests), jwt-client.test.ts 3/3, fapiClient.test.ts 26 passing, and the clerk-js declarations typecheck is clean.

Backports the fail-fast slow-origin load fix (#9065) to the release/core-2
line. When FAPI is slow or unreachable during load, a cold Clerk.load()
could hang for minutes. The /client request and the load-recovery token mint
are now bounded by a 7s timeout, the timed-out request is aborted, and
recovery renders identity from the session cookie while an unbounded
background refetch restores full client data. Adds a timeLimit util to
@clerk/shared/utils.
@changeset-bot

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 7853518

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 22 packages
NameType
@clerk/clerk-jsPatch
@clerk/sharedPatch
@clerk/chrome-extensionPatch
@clerk/clerk-expoPatch
@clerk/agent-toolkitPatch
@clerk/astroPatch
@clerk/backendPatch
@clerk/elementsPatch
@clerk/expo-passkeysPatch
@clerk/expressPatch
@clerk/fastifyPatch
@clerk/nextjsPatch
@clerk/nuxtPatch
@clerk/react-routerPatch
@clerk/clerk-reactPatch
@clerk/remixPatch
@clerk/tanstack-react-startPatch
@clerk/testingPatch
@clerk/themesPatch
@clerk/typesPatch
@clerk/vuePatch
@clerk/localizationsPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@vercel

vercelBot commented Jul 10, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreview, CommentJul 10, 2026 11:00am
swingsetErrorErrorJul 10, 2026 11:00am

Request Review

@coderabbitai

Copy link
Copy Markdown
Contributor

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 1f286482-13b4-4559-b25b-8572594962ba

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch backport/9065-fail-fast-slow-origin-core-2

Comment @coderabbitai help to get the list of available commands.

@pkg-pr-new

Copy link
Copy Markdown

Open in StackBlitz

@clerk/agent-toolkit

npm i https://pkg.pr.new/@clerk/agent-toolkit@9123

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9123

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9123

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9123

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9123

@clerk/dev-cli

npm i https://pkg.pr.new/@clerk/dev-cli@9123

@clerk/elements

npm i https://pkg.pr.new/@clerk/elements@9123

@clerk/clerk-expo

npm i https://pkg.pr.new/@clerk/clerk-expo@9123

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9123

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9123

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9123

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9123

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9123

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9123

@clerk/clerk-react

npm i https://pkg.pr.new/@clerk/clerk-react@9123

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9123

@clerk/remix

npm i https://pkg.pr.new/@clerk/remix@9123

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9123

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9123

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9123

@clerk/themes

npm i https://pkg.pr.new/@clerk/themes@9123

@clerk/types

npm i https://pkg.pr.new/@clerk/types@9123

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9123

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9123

commit: 7853518

@nikosdouvlis
nikosdouvlis merged commit 4093b03 into release/core-2Jul 12, 2026
42 of 47 checks passed
@nikosdouvlis
nikosdouvlis deleted the backport/9065-fail-fast-slow-origin-core-2 branch July 12, 2026 17:12
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@nikosdouvlis