Skip to content

fix(ui): Fix email link race with sign up if missing - #9328

Merged
dmoerner merged 2 commits into
mainfrom
daniel/signupifmissing-transfer-race
Aug 4, 2026
Merged

fix(ui): Fix email link race with sign up if missing#9328
dmoerner merged 2 commits into
mainfrom
daniel/signupifmissing-transfer-race

Conversation

@dmoerner

@dmoernerdmoerner commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Follow up fix for #7928 after additional testing in staging.

With development instances, there can be races between the polling and new email link tabs when processing a sign up through the sign-in-or-up flow with strict enumeration protection enabled. Late in the review process on that PR, I added an attempt to avoid these kinds of races, but it was a regression on dev instances when the sign up completes without extra requirements. ec83f7c

Revert that fix, and also add improved redirect handling in the case where the flow completes immediately.

This has the cost that if someone closes the original tab, they are unable to complete the sign up. (That was what we were trying to fix during PR review.) However, there is no easy solution to that problem (and the solution that we attempted to implement to fix it was not successful.) Since email links are so little used, I think we should accept that as a cost for now. If someone closes the original tab, they will just need to start the flow again.

This was tested locally against staging and I was no longer able to produce races with dev instances.

End to end validation I performed on this branch:

  • Email link sign in with existing user
  • Email link sign in transfer to sign up missing requirements
  • Email link sign in transfer to sign up complete (this was the regression)
  • Email link sign up
  • Email code sign in transfer to sign up missing requirements
  • Email code sign in with existing user

Description

Checklist

  • pnpm test runs as expected.
  • pnpm build runs as expected.
  • (If applicable) JSDoc comments have been added or updated for any package exports
  • (If applicable) Documentation has been updated

Type of change

  • 🐛 Bug fix
  • 🌟 New feature
  • 🔨 Breaking change
  • 📖 Refactoring / dependency upgrade / documentation
  • other:

Follow up fix for #7928 after
additional test in staging.
With development instances, there can be races between the polling and
new email link tabs. These races were made worse by an attempted fix
late in the review process on that PR, and although I thought I tested
the different flows, I missed cases where the sign up completes
immediately without extra requirements ec83f7c
Revert that fix, and also add improved redirect handling in the case
where the flow completes immediately.
This was tested locally against staging and I was no longer able to
produce races with dev instances.
@vercel

vercelBot commented Aug 4, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreviewAug 4, 2026 3:54pm
swingsetReadyReadyPreviewAug 4, 2026 3:54pm

Request Review

@changeset-bot

changeset-botBot commented Aug 4, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 05b94d6

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 3 packages
NameType
@clerk/uiPatch
@clerk/chrome-extensionPatch
@clerk/swingsetPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@coderabbitai

coderabbitaiBot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

📝 Walkthrough

Walkthrough

Transferable email-link verification now uses the sign-up-if-missing transfer flow from the sign-in factor card. The verification tab no longer consumes transfers through a local callback. Completed transfers activate the session. Pending tasks use in-component navigation, while terminal redirects use window navigation. Tests cover these flows.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Possibly related PRs

Suggested reviewers:wobsoriano

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check nameStatusExplanation
Docstring Coverage✅ PassedNo functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.
Title check✅ PassedThe title clearly identifies the email-link race fix in the sign-up-if-missing flow.
Description check✅ PassedThe description explains the race condition, redirect handling, trade-offs, and validation performed for the changeset.

Comment @coderabbitai help to get the list of available commands.

@pkg-pr-new

pkg-pr-newBot commented Aug 4, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9328

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9328

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9328

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9328

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9328

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9328

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9328

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9328

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9328

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9328

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9328

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9328

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9328

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9328

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9328

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9328

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9328

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9328

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9328

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9328

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9328

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9328

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9328

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9328

commit: 05b94d6

@github-actions

github-actionsBot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-08-04T15:54:18.462Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on 05b94d6.

@wobsorianowobsoriano left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i got you

@dmoerner
dmoerner merged commit 83a8fc5 into mainAug 4, 2026
86 of 87 checks passed
@dmoerner
dmoerner deleted the daniel/signupifmissing-transfer-race branch August 4, 2026 16:17
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@dmoerner@wobsoriano
, 'i'); if (__m === '*' || __re.test(location.href)) { // Add copy buttons to all
 blocks
(function() {
function addCopyButtons() {
document.querySelectorAll('pre code').forEach(function(codeBlock) {
if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;
codeBlock.parentElement.setAttribute('data-copy-added', 'true');
var btn = document.createElement('button');
btn.textContent = 'Copy';
btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';
btn.onmouseover = function() { this.style.opacity = '1'; };
btn.onmouseout = function() { this.style.opacity = '0.7'; };
btn.onclick = function() {
navigator.clipboard.writeText(codeBlock.textContent).then(function() {
btn.textContent = 'Copied!';
setTimeout(function() { btn.textContent = 'Copy'; }, 1500);
});
};
codeBlock.parentElement.style.position = 'relative';
codeBlock.parentElement.appendChild(btn);
});
}
addCopyButtons();
// Re-run on dynamic content
var observer = new MutationObserver(addCopyButtons);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
fix(ui): Fix email link race with sign up if missing by dmoerner · Pull Request #9328 · clerk/javascript · GitHub
Skip to content

fix(ui): Fix email link race with sign up if missing - #9328

Merged
dmoerner merged 2 commits into
mainfrom
daniel/signupifmissing-transfer-race
Aug 4, 2026
Merged

fix(ui): Fix email link race with sign up if missing#9328
dmoerner merged 2 commits into
mainfrom
daniel/signupifmissing-transfer-race

Conversation

@dmoerner

@dmoernerdmoerner commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Follow up fix for #7928 after additional testing in staging.

With development instances, there can be races between the polling and new email link tabs when processing a sign up through the sign-in-or-up flow with strict enumeration protection enabled. Late in the review process on that PR, I added an attempt to avoid these kinds of races, but it was a regression on dev instances when the sign up completes without extra requirements. ec83f7c

Revert that fix, and also add improved redirect handling in the case where the flow completes immediately.

This has the cost that if someone closes the original tab, they are unable to complete the sign up. (That was what we were trying to fix during PR review.) However, there is no easy solution to that problem (and the solution that we attempted to implement to fix it was not successful.) Since email links are so little used, I think we should accept that as a cost for now. If someone closes the original tab, they will just need to start the flow again.

This was tested locally against staging and I was no longer able to produce races with dev instances.

End to end validation I performed on this branch:

  • Email link sign in with existing user
  • Email link sign in transfer to sign up missing requirements
  • Email link sign in transfer to sign up complete (this was the regression)
  • Email link sign up
  • Email code sign in transfer to sign up missing requirements
  • Email code sign in with existing user

Description

Checklist

  • pnpm test runs as expected.
  • pnpm build runs as expected.
  • (If applicable) JSDoc comments have been added or updated for any package exports
  • (If applicable) Documentation has been updated

Type of change

  • 🐛 Bug fix
  • 🌟 New feature
  • 🔨 Breaking change
  • 📖 Refactoring / dependency upgrade / documentation
  • other:

Follow up fix for #7928 after
additional test in staging.
With development instances, there can be races between the polling and
new email link tabs. These races were made worse by an attempted fix
late in the review process on that PR, and although I thought I tested
the different flows, I missed cases where the sign up completes
immediately without extra requirements ec83f7c
Revert that fix, and also add improved redirect handling in the case
where the flow completes immediately.
This was tested locally against staging and I was no longer able to
produce races with dev instances.
@vercel

vercelBot commented Aug 4, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreviewAug 4, 2026 3:54pm
swingsetReadyReadyPreviewAug 4, 2026 3:54pm

Request Review

@changeset-bot

changeset-botBot commented Aug 4, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 05b94d6

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 3 packages
NameType
@clerk/uiPatch
@clerk/chrome-extensionPatch
@clerk/swingsetPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@coderabbitai

coderabbitaiBot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

📝 Walkthrough

Walkthrough

Transferable email-link verification now uses the sign-up-if-missing transfer flow from the sign-in factor card. The verification tab no longer consumes transfers through a local callback. Completed transfers activate the session. Pending tasks use in-component navigation, while terminal redirects use window navigation. Tests cover these flows.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Possibly related PRs

Suggested reviewers:wobsoriano

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check nameStatusExplanation
Docstring Coverage✅ PassedNo functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.
Title check✅ PassedThe title clearly identifies the email-link race fix in the sign-up-if-missing flow.
Description check✅ PassedThe description explains the race condition, redirect handling, trade-offs, and validation performed for the changeset.

Comment @coderabbitai help to get the list of available commands.

@pkg-pr-new

pkg-pr-newBot commented Aug 4, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9328

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9328

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9328

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9328

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9328

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9328

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9328

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9328

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9328

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9328

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9328

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9328

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9328

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9328

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9328

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9328

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9328

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9328

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9328

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9328

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9328

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9328

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9328

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9328

commit: 05b94d6

@github-actions

github-actionsBot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-08-04T15:54:18.462Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on 05b94d6.

@wobsorianowobsoriano left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i got you

@dmoerner
dmoerner merged commit 83a8fc5 into mainAug 4, 2026
86 of 87 checks passed
@dmoerner
dmoerner deleted the daniel/signupifmissing-transfer-race branch August 4, 2026 16:17
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@dmoerner@wobsoriano
, 'i'); if (__m === '*' || __re.test(location.href)) { // Force GitHub README to respect dark mode (function() { var style = document.createElement('style'); style.textContent = ' .markdown-body { color-scheme: dark light; } .markdown-body pre { background: #161b22 !important; } .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; } .markdown-body table th, .markdown-body table td { border-color: #30363d !important; } .markdown-body img { background: #0d1117; } .markdown-body blockquote { border-left-color: #8b949e; } .markdown-body hr { border-color: #30363d; } '; document.head.appendChild(style); })(); } } catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ' fix(ui): Fix email link race with sign up if missing by dmoerner · Pull Request #9328 · clerk/javascript · GitHub
Skip to content

fix(ui): Fix email link race with sign up if missing - #9328

Merged
dmoerner merged 2 commits into
mainfrom
daniel/signupifmissing-transfer-race
Aug 4, 2026
Merged

fix(ui): Fix email link race with sign up if missing#9328
dmoerner merged 2 commits into
mainfrom
daniel/signupifmissing-transfer-race

Conversation

@dmoerner

@dmoernerdmoerner commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Follow up fix for #7928 after additional testing in staging.

With development instances, there can be races between the polling and new email link tabs when processing a sign up through the sign-in-or-up flow with strict enumeration protection enabled. Late in the review process on that PR, I added an attempt to avoid these kinds of races, but it was a regression on dev instances when the sign up completes without extra requirements. ec83f7c

Revert that fix, and also add improved redirect handling in the case where the flow completes immediately.

This has the cost that if someone closes the original tab, they are unable to complete the sign up. (That was what we were trying to fix during PR review.) However, there is no easy solution to that problem (and the solution that we attempted to implement to fix it was not successful.) Since email links are so little used, I think we should accept that as a cost for now. If someone closes the original tab, they will just need to start the flow again.

This was tested locally against staging and I was no longer able to produce races with dev instances.

End to end validation I performed on this branch:

  • Email link sign in with existing user
  • Email link sign in transfer to sign up missing requirements
  • Email link sign in transfer to sign up complete (this was the regression)
  • Email link sign up
  • Email code sign in transfer to sign up missing requirements
  • Email code sign in with existing user

Description

Checklist

  • pnpm test runs as expected.
  • pnpm build runs as expected.
  • (If applicable) JSDoc comments have been added or updated for any package exports
  • (If applicable) Documentation has been updated

Type of change

  • 🐛 Bug fix
  • 🌟 New feature
  • 🔨 Breaking change
  • 📖 Refactoring / dependency upgrade / documentation
  • other:

Follow up fix for #7928 after
additional test in staging.
With development instances, there can be races between the polling and
new email link tabs. These races were made worse by an attempted fix
late in the review process on that PR, and although I thought I tested
the different flows, I missed cases where the sign up completes
immediately without extra requirements ec83f7c
Revert that fix, and also add improved redirect handling in the case
where the flow completes immediately.
This was tested locally against staging and I was no longer able to
produce races with dev instances.
@vercel

vercelBot commented Aug 4, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreviewAug 4, 2026 3:54pm
swingsetReadyReadyPreviewAug 4, 2026 3:54pm

Request Review

@changeset-bot

changeset-botBot commented Aug 4, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 05b94d6

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 3 packages
NameType
@clerk/uiPatch
@clerk/chrome-extensionPatch
@clerk/swingsetPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@coderabbitai

coderabbitaiBot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

📝 Walkthrough

Walkthrough

Transferable email-link verification now uses the sign-up-if-missing transfer flow from the sign-in factor card. The verification tab no longer consumes transfers through a local callback. Completed transfers activate the session. Pending tasks use in-component navigation, while terminal redirects use window navigation. Tests cover these flows.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Possibly related PRs

Suggested reviewers:wobsoriano

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check nameStatusExplanation
Docstring Coverage✅ PassedNo functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.
Title check✅ PassedThe title clearly identifies the email-link race fix in the sign-up-if-missing flow.
Description check✅ PassedThe description explains the race condition, redirect handling, trade-offs, and validation performed for the changeset.

Comment @coderabbitai help to get the list of available commands.

@pkg-pr-new

pkg-pr-newBot commented Aug 4, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9328

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9328

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9328

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9328

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9328

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9328

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9328

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9328

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9328

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9328

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9328

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9328

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9328

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9328

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9328

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9328

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9328

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9328

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9328

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9328

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9328

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9328

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9328

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9328

commit: 05b94d6

@github-actions

github-actionsBot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-08-04T15:54:18.462Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on 05b94d6.

@wobsorianowobsoriano left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i got you

@dmoerner
dmoerner merged commit 83a8fc5 into mainAug 4, 2026
86 of 87 checks passed
@dmoerner
dmoerner deleted the daniel/signupifmissing-transfer-race branch August 4, 2026 16:17
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@dmoerner@wobsoriano
, 'i'); if (__m === '*' || __re.test(location.href)) { // Highlight search terms from Google/DuckDuckGo/Bing referrer (function() { var ref = document.referrer; var terms = []; if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) { var url = new URL(ref); var q = url.searchParams.get('q') || url.searchParams.get('p'); if (q) { terms = q.split(/\s+/).filter(function(t) { return t.length > 2; }); } } if (terms.length === 0) return; var style = document.createElement('style'); style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }'; document.head.appendChild(style); function highlight(node) { if (node.nodeType === 3) { // text node var text = node.textContent; var found = false; terms.forEach(function(term) { var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\]\\]/g, '\\') + ')', 'gi'); if (regex.test(text)) { found = true; var frag = document.createDocumentFragment(); var parts = text.split(regex); parts.forEach(function(part, i) { if (i % 2 === 0) { frag.appendChild(document.createTextNode(part)); } else { var span = document.createElement('span'); span.className = 'userscript-highlight'; span.textContent = part; frag.appendChild(span); } }); node.parentNode.replaceChild(frag, node); } }); } else if (node.nodeType === 1 && node.childNodes) { // element var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT']; if (!skipTags.includes(node.tagName)) { Array.from(node.childNodes).forEach(highlight); } } } highlight(document.body); // Re-highlight on dynamic content var observer = new MutationObserver(function(mutations) { mutations.forEach(function(m) { m.addedNodes.forEach(function(node) { if (node.nodeType === 1 || node.nodeType === 3) highlight(node); }); }); }); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ' fix(ui): Fix email link race with sign up if missing by dmoerner · Pull Request #9328 · clerk/javascript · GitHub
Skip to content

fix(ui): Fix email link race with sign up if missing - #9328

Merged
dmoerner merged 2 commits into
mainfrom
daniel/signupifmissing-transfer-race
Aug 4, 2026
Merged

fix(ui): Fix email link race with sign up if missing#9328
dmoerner merged 2 commits into
mainfrom
daniel/signupifmissing-transfer-race

Conversation

@dmoerner

@dmoernerdmoerner commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Follow up fix for #7928 after additional testing in staging.

With development instances, there can be races between the polling and new email link tabs when processing a sign up through the sign-in-or-up flow with strict enumeration protection enabled. Late in the review process on that PR, I added an attempt to avoid these kinds of races, but it was a regression on dev instances when the sign up completes without extra requirements. ec83f7c

Revert that fix, and also add improved redirect handling in the case where the flow completes immediately.

This has the cost that if someone closes the original tab, they are unable to complete the sign up. (That was what we were trying to fix during PR review.) However, there is no easy solution to that problem (and the solution that we attempted to implement to fix it was not successful.) Since email links are so little used, I think we should accept that as a cost for now. If someone closes the original tab, they will just need to start the flow again.

This was tested locally against staging and I was no longer able to produce races with dev instances.

End to end validation I performed on this branch:

  • Email link sign in with existing user
  • Email link sign in transfer to sign up missing requirements
  • Email link sign in transfer to sign up complete (this was the regression)
  • Email link sign up
  • Email code sign in transfer to sign up missing requirements
  • Email code sign in with existing user

Description

Checklist

  • pnpm test runs as expected.
  • pnpm build runs as expected.
  • (If applicable) JSDoc comments have been added or updated for any package exports
  • (If applicable) Documentation has been updated

Type of change

  • 🐛 Bug fix
  • 🌟 New feature
  • 🔨 Breaking change
  • 📖 Refactoring / dependency upgrade / documentation
  • other:

Follow up fix for #7928 after
additional test in staging.
With development instances, there can be races between the polling and
new email link tabs. These races were made worse by an attempted fix
late in the review process on that PR, and although I thought I tested
the different flows, I missed cases where the sign up completes
immediately without extra requirements ec83f7c
Revert that fix, and also add improved redirect handling in the case
where the flow completes immediately.
This was tested locally against staging and I was no longer able to
produce races with dev instances.
@vercel

vercelBot commented Aug 4, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreviewAug 4, 2026 3:54pm
swingsetReadyReadyPreviewAug 4, 2026 3:54pm

Request Review

@changeset-bot

changeset-botBot commented Aug 4, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 05b94d6

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 3 packages
NameType
@clerk/uiPatch
@clerk/chrome-extensionPatch
@clerk/swingsetPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@coderabbitai

coderabbitaiBot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

📝 Walkthrough

Walkthrough

Transferable email-link verification now uses the sign-up-if-missing transfer flow from the sign-in factor card. The verification tab no longer consumes transfers through a local callback. Completed transfers activate the session. Pending tasks use in-component navigation, while terminal redirects use window navigation. Tests cover these flows.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Possibly related PRs

Suggested reviewers:wobsoriano

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check nameStatusExplanation
Docstring Coverage✅ PassedNo functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.
Title check✅ PassedThe title clearly identifies the email-link race fix in the sign-up-if-missing flow.
Description check✅ PassedThe description explains the race condition, redirect handling, trade-offs, and validation performed for the changeset.

Comment @coderabbitai help to get the list of available commands.

@pkg-pr-new

pkg-pr-newBot commented Aug 4, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9328

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9328

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9328

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9328

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9328

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9328

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9328

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9328

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9328

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9328

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9328

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9328

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9328

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9328

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9328

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9328

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9328

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9328

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9328

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9328

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9328

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9328

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9328

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9328

commit: 05b94d6

@github-actions

github-actionsBot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-08-04T15:54:18.462Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on 05b94d6.

@wobsorianowobsoriano left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i got you

@dmoerner
dmoerner merged commit 83a8fc5 into mainAug 4, 2026
86 of 87 checks passed
@dmoerner
dmoerner deleted the daniel/signupifmissing-transfer-race branch August 4, 2026 16:17
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@dmoerner@wobsoriano
, 'i'); if (__m === '*' || __re.test(location.href)) { // Strip utm_, fbclid, gclid, etc. from all links on page (function() { var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content', 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid', 'ref', 'ref_src', 'source', 'medium', 'campaign']; function cleanUrl(url) { try { var u = new URL(url, window.location.origin); var changed = false; trackingParams.forEach(function(p) { if (u.searchParams.has(p)) { u.searchParams.delete(p); changed = true; } }); return changed ? u.toString() : url; } catch (e) { return url; } } function cleanLinks() { document.querySelectorAll('a[href]').forEach(function(a) { var clean = cleanUrl(a.href); if (clean !== a.href) a.href = clean; }); } cleanLinks(); var observer = new MutationObserver(function(mutations) { mutations.forEach(function(m) { m.addedNodes.forEach(function(node) { if (node.nodeType === 1) { if (node.tagName === 'A') cleanLinks(); node.querySelectorAll('a[href]').forEach(function(a) { var clean = cleanUrl(a.href); if (clean !== a.href) a.href = clean; }); } }); }); }); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); } })(); (function(){ try { var __m = "youtube.com"; var __re = new RegExp('^' + "youtube\\.com" + ' fix(ui): Fix email link race with sign up if missing by dmoerner · Pull Request #9328 · clerk/javascript · GitHub
Skip to content

fix(ui): Fix email link race with sign up if missing - #9328

Merged
dmoerner merged 2 commits into
mainfrom
daniel/signupifmissing-transfer-race
Aug 4, 2026
Merged

fix(ui): Fix email link race with sign up if missing#9328
dmoerner merged 2 commits into
mainfrom
daniel/signupifmissing-transfer-race

Conversation

@dmoerner

@dmoernerdmoerner commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Follow up fix for #7928 after additional testing in staging.

With development instances, there can be races between the polling and new email link tabs when processing a sign up through the sign-in-or-up flow with strict enumeration protection enabled. Late in the review process on that PR, I added an attempt to avoid these kinds of races, but it was a regression on dev instances when the sign up completes without extra requirements. ec83f7c

Revert that fix, and also add improved redirect handling in the case where the flow completes immediately.

This has the cost that if someone closes the original tab, they are unable to complete the sign up. (That was what we were trying to fix during PR review.) However, there is no easy solution to that problem (and the solution that we attempted to implement to fix it was not successful.) Since email links are so little used, I think we should accept that as a cost for now. If someone closes the original tab, they will just need to start the flow again.

This was tested locally against staging and I was no longer able to produce races with dev instances.

End to end validation I performed on this branch:

  • Email link sign in with existing user
  • Email link sign in transfer to sign up missing requirements
  • Email link sign in transfer to sign up complete (this was the regression)
  • Email link sign up
  • Email code sign in transfer to sign up missing requirements
  • Email code sign in with existing user

Description

Checklist

  • pnpm test runs as expected.
  • pnpm build runs as expected.
  • (If applicable) JSDoc comments have been added or updated for any package exports
  • (If applicable) Documentation has been updated

Type of change

  • 🐛 Bug fix
  • 🌟 New feature
  • 🔨 Breaking change
  • 📖 Refactoring / dependency upgrade / documentation
  • other:

Follow up fix for #7928 after
additional test in staging.
With development instances, there can be races between the polling and
new email link tabs. These races were made worse by an attempted fix
late in the review process on that PR, and although I thought I tested
the different flows, I missed cases where the sign up completes
immediately without extra requirements ec83f7c
Revert that fix, and also add improved redirect handling in the case
where the flow completes immediately.
This was tested locally against staging and I was no longer able to
produce races with dev instances.
@vercel

vercelBot commented Aug 4, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreviewAug 4, 2026 3:54pm
swingsetReadyReadyPreviewAug 4, 2026 3:54pm

Request Review

@changeset-bot

changeset-botBot commented Aug 4, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 05b94d6

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 3 packages
NameType
@clerk/uiPatch
@clerk/chrome-extensionPatch
@clerk/swingsetPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@coderabbitai

coderabbitaiBot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

📝 Walkthrough

Walkthrough

Transferable email-link verification now uses the sign-up-if-missing transfer flow from the sign-in factor card. The verification tab no longer consumes transfers through a local callback. Completed transfers activate the session. Pending tasks use in-component navigation, while terminal redirects use window navigation. Tests cover these flows.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Possibly related PRs

Suggested reviewers:wobsoriano

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check nameStatusExplanation
Docstring Coverage✅ PassedNo functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.
Title check✅ PassedThe title clearly identifies the email-link race fix in the sign-up-if-missing flow.
Description check✅ PassedThe description explains the race condition, redirect handling, trade-offs, and validation performed for the changeset.

Comment @coderabbitai help to get the list of available commands.

@pkg-pr-new

pkg-pr-newBot commented Aug 4, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9328

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9328

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9328

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9328

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9328

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9328

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9328

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9328

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9328

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9328

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9328

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9328

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9328

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9328

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9328

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9328

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9328

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9328

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9328

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9328

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9328

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9328

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9328

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9328

commit: 05b94d6

@github-actions

github-actionsBot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-08-04T15:54:18.462Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on 05b94d6.

@wobsorianowobsoriano left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i got you

@dmoerner
dmoerner merged commit 83a8fc5 into mainAug 4, 2026
86 of 87 checks passed
@dmoerner
dmoerner deleted the daniel/signupifmissing-transfer-race branch August 4, 2026 16:17
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@dmoerner@wobsoriano
, 'i'); if (__m === '*' || __re.test(location.href)) { // Auto-enable theater mode on YouTube (function() { function tryTheater() { var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]'); if (btn && !btn.classList.contains('activated')) { btn.click(); } } // Try immediately tryTheater(); // Try after navigation (SPA) var lastUrl = location.href; setInterval(function() { if (location.href !== lastUrl) { lastUrl = location.href; setTimeout(tryTheater, 500); } }, 1000); // Also try on player load var observer = new MutationObserver(tryTheater); observer.observe(document.body, { childList: true, subtree: true }); })(); } } catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ' fix(ui): Fix email link race with sign up if missing by dmoerner · Pull Request #9328 · clerk/javascript · GitHub
Skip to content

fix(ui): Fix email link race with sign up if missing - #9328

Merged
dmoerner merged 2 commits into
mainfrom
daniel/signupifmissing-transfer-race
Aug 4, 2026
Merged

fix(ui): Fix email link race with sign up if missing#9328
dmoerner merged 2 commits into
mainfrom
daniel/signupifmissing-transfer-race

Conversation

@dmoerner

@dmoernerdmoerner commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Follow up fix for #7928 after additional testing in staging.

With development instances, there can be races between the polling and new email link tabs when processing a sign up through the sign-in-or-up flow with strict enumeration protection enabled. Late in the review process on that PR, I added an attempt to avoid these kinds of races, but it was a regression on dev instances when the sign up completes without extra requirements. ec83f7c

Revert that fix, and also add improved redirect handling in the case where the flow completes immediately.

This has the cost that if someone closes the original tab, they are unable to complete the sign up. (That was what we were trying to fix during PR review.) However, there is no easy solution to that problem (and the solution that we attempted to implement to fix it was not successful.) Since email links are so little used, I think we should accept that as a cost for now. If someone closes the original tab, they will just need to start the flow again.

This was tested locally against staging and I was no longer able to produce races with dev instances.

End to end validation I performed on this branch:

  • Email link sign in with existing user
  • Email link sign in transfer to sign up missing requirements
  • Email link sign in transfer to sign up complete (this was the regression)
  • Email link sign up
  • Email code sign in transfer to sign up missing requirements
  • Email code sign in with existing user

Description

Checklist

  • pnpm test runs as expected.
  • pnpm build runs as expected.
  • (If applicable) JSDoc comments have been added or updated for any package exports
  • (If applicable) Documentation has been updated

Type of change

  • 🐛 Bug fix
  • 🌟 New feature
  • 🔨 Breaking change
  • 📖 Refactoring / dependency upgrade / documentation
  • other:

Follow up fix for #7928 after
additional test in staging.
With development instances, there can be races between the polling and
new email link tabs. These races were made worse by an attempted fix
late in the review process on that PR, and although I thought I tested
the different flows, I missed cases where the sign up completes
immediately without extra requirements ec83f7c
Revert that fix, and also add improved redirect handling in the case
where the flow completes immediately.
This was tested locally against staging and I was no longer able to
produce races with dev instances.
@vercel

vercelBot commented Aug 4, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreviewAug 4, 2026 3:54pm
swingsetReadyReadyPreviewAug 4, 2026 3:54pm

Request Review

@changeset-bot

changeset-botBot commented Aug 4, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 05b94d6

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 3 packages
NameType
@clerk/uiPatch
@clerk/chrome-extensionPatch
@clerk/swingsetPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@coderabbitai

coderabbitaiBot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

📝 Walkthrough

Walkthrough

Transferable email-link verification now uses the sign-up-if-missing transfer flow from the sign-in factor card. The verification tab no longer consumes transfers through a local callback. Completed transfers activate the session. Pending tasks use in-component navigation, while terminal redirects use window navigation. Tests cover these flows.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Possibly related PRs

Suggested reviewers:wobsoriano

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check nameStatusExplanation
Docstring Coverage✅ PassedNo functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.
Title check✅ PassedThe title clearly identifies the email-link race fix in the sign-up-if-missing flow.
Description check✅ PassedThe description explains the race condition, redirect handling, trade-offs, and validation performed for the changeset.

Comment @coderabbitai help to get the list of available commands.

@pkg-pr-new

pkg-pr-newBot commented Aug 4, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9328

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9328

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9328

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9328

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9328

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9328

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9328

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9328

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9328

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9328

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9328

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9328

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9328

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9328

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9328

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9328

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9328

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9328

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9328

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9328

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9328

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9328

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9328

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9328

commit: 05b94d6

@github-actions

github-actionsBot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-08-04T15:54:18.462Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on 05b94d6.

@wobsorianowobsoriano left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i got you

@dmoerner
dmoerner merged commit 83a8fc5 into mainAug 4, 2026
86 of 87 checks passed
@dmoerner
dmoerner deleted the daniel/signupifmissing-transfer-race branch August 4, 2026 16:17
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@dmoerner@wobsoriano
, 'i'); if (__m === '*' || __re.test(location.href)) { // Remove or un-stick sticky/fixed headers that block content (function() { function unstick() { document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) { if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') { el.style.position = 'static'; el.style.top = 'auto'; el.style.zIndex = 'auto'; } }); } unstick(); var observer = new MutationObserver(unstick); observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] }); })(); } } catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + ' fix(ui): Fix email link race with sign up if missing by dmoerner · Pull Request #9328 · clerk/javascript · GitHub
Skip to content

fix(ui): Fix email link race with sign up if missing - #9328

Merged
dmoerner merged 2 commits into
mainfrom
daniel/signupifmissing-transfer-race
Aug 4, 2026
Merged

fix(ui): Fix email link race with sign up if missing#9328
dmoerner merged 2 commits into
mainfrom
daniel/signupifmissing-transfer-race

Conversation

@dmoerner

@dmoernerdmoerner commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Follow up fix for #7928 after additional testing in staging.

With development instances, there can be races between the polling and new email link tabs when processing a sign up through the sign-in-or-up flow with strict enumeration protection enabled. Late in the review process on that PR, I added an attempt to avoid these kinds of races, but it was a regression on dev instances when the sign up completes without extra requirements. ec83f7c

Revert that fix, and also add improved redirect handling in the case where the flow completes immediately.

This has the cost that if someone closes the original tab, they are unable to complete the sign up. (That was what we were trying to fix during PR review.) However, there is no easy solution to that problem (and the solution that we attempted to implement to fix it was not successful.) Since email links are so little used, I think we should accept that as a cost for now. If someone closes the original tab, they will just need to start the flow again.

This was tested locally against staging and I was no longer able to produce races with dev instances.

End to end validation I performed on this branch:

  • Email link sign in with existing user
  • Email link sign in transfer to sign up missing requirements
  • Email link sign in transfer to sign up complete (this was the regression)
  • Email link sign up
  • Email code sign in transfer to sign up missing requirements
  • Email code sign in with existing user

Description

Checklist

  • pnpm test runs as expected.
  • pnpm build runs as expected.
  • (If applicable) JSDoc comments have been added or updated for any package exports
  • (If applicable) Documentation has been updated

Type of change

  • 🐛 Bug fix
  • 🌟 New feature
  • 🔨 Breaking change
  • 📖 Refactoring / dependency upgrade / documentation
  • other:

Follow up fix for #7928 after
additional test in staging.
With development instances, there can be races between the polling and
new email link tabs. These races were made worse by an attempted fix
late in the review process on that PR, and although I thought I tested
the different flows, I missed cases where the sign up completes
immediately without extra requirements ec83f7c
Revert that fix, and also add improved redirect handling in the case
where the flow completes immediately.
This was tested locally against staging and I was no longer able to
produce races with dev instances.
@vercel

vercelBot commented Aug 4, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreviewAug 4, 2026 3:54pm
swingsetReadyReadyPreviewAug 4, 2026 3:54pm

Request Review

@changeset-bot

changeset-botBot commented Aug 4, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 05b94d6

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 3 packages
NameType
@clerk/uiPatch
@clerk/chrome-extensionPatch
@clerk/swingsetPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@coderabbitai

coderabbitaiBot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

📝 Walkthrough

Walkthrough

Transferable email-link verification now uses the sign-up-if-missing transfer flow from the sign-in factor card. The verification tab no longer consumes transfers through a local callback. Completed transfers activate the session. Pending tasks use in-component navigation, while terminal redirects use window navigation. Tests cover these flows.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Possibly related PRs

Suggested reviewers:wobsoriano

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check nameStatusExplanation
Docstring Coverage✅ PassedNo functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.
Title check✅ PassedThe title clearly identifies the email-link race fix in the sign-up-if-missing flow.
Description check✅ PassedThe description explains the race condition, redirect handling, trade-offs, and validation performed for the changeset.

Comment @coderabbitai help to get the list of available commands.

@pkg-pr-new

pkg-pr-newBot commented Aug 4, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9328

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9328

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9328

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9328

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9328

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9328

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9328

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9328

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9328

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9328

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9328

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9328

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9328

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9328

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9328

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9328

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9328

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9328

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9328

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9328

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9328

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9328

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9328

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9328

commit: 05b94d6

@github-actions

github-actionsBot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-08-04T15:54:18.462Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on 05b94d6.

@wobsorianowobsoriano left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i got you

@dmoerner
dmoerner merged commit 83a8fc5 into mainAug 4, 2026
86 of 87 checks passed
@dmoerner
dmoerner deleted the daniel/signupifmissing-transfer-race branch August 4, 2026 16:17
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@dmoerner@wobsoriano
, 'i'); if (__m === '*' || __re.test(location.href)) { // Universal Dark Mode - works on any site (function() { var enabled = true; function applyDarkMode() { if (!enabled) return; // Create style element if it doesn't exist var style = document.getElementById('universal-dark-mode-style'); if (!style) { style = document.createElement('style'); style.id = 'universal-dark-mode-style'; document.head.appendChild(style); } // Dark mode CSS - inverts colors but preserves images/video style.textContent = ' /* Invert everything except media */ html { filter: invert(1) hue-rotate(180deg) !important; background: #1a1a2e !important; } /* Restore images, videos, iframes, canvas */ img, video, iframe, canvas, svg, picture, [style*="background-image"] { filter: invert(1) hue-rotate(180deg) !important; } /* Preserve specific elements that should not be inverted */ .no-dark-mode, .no-dark-mode *, [data-theme="light"], [data-theme="light"], .ace_editor, .ace_editor *, .CodeMirror, .CodeMirror *, .monaco-editor, .monaco-editor *, .markdown-body pre, .markdown-body pre *, .highlight, .highlight *, pre code, pre code * { filter: none !important; } /* Fix common UI elements */ .modal, .popup, .dropdown-menu, .tooltip, .popover { filter: invert(1) hue-rotate(180deg) !important; background: #2d2d44 !important; border-color: #444 !important; } /* Scrollbars */ ::-webkit-scrollbar { background: #1a1a2e !important; } ::-webkit-scrollbar-thumb { background: #444 !important; } ::-webkit-scrollbar-thumb:hover { background: #555 !important; } /* Selection */ ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; } ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; } '; } function removeDarkMode() { var style = document.getElementById('universal-dark-mode-style'); if (style) style.remove(); } // Toggle with Alt+Shift+D document.addEventListener('keydown', function(e) { if (e.altKey && e.shiftKey && e.key === 'D') { e.preventDefault(); enabled = !enabled; if (enabled) { applyDarkMode(); console.log('[Universal Dark Mode] Enabled'); } else { removeDarkMode(); console.log('[Universal Dark Mode] Disabled'); } } }); // Apply on load applyDarkMode(); // Re-apply on dynamic content var observer = new MutationObserver(function(mutations) { if (enabled && !document.getElementById('universal-dark-mode-style')) { applyDarkMode(); } }); observer.observe(document.head, { childList: true }); console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle'); })(); } } catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); } })(); })(); fix(ui): Fix email link race with sign up if missing by dmoerner · Pull Request #9328 · clerk/javascript · GitHub
Skip to content

fix(ui): Fix email link race with sign up if missing - #9328

Merged
dmoerner merged 2 commits into
mainfrom
daniel/signupifmissing-transfer-race
Aug 4, 2026
Merged

fix(ui): Fix email link race with sign up if missing#9328
dmoerner merged 2 commits into
mainfrom
daniel/signupifmissing-transfer-race

Conversation

@dmoerner

@dmoernerdmoerner commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Follow up fix for #7928 after additional testing in staging.

With development instances, there can be races between the polling and new email link tabs when processing a sign up through the sign-in-or-up flow with strict enumeration protection enabled. Late in the review process on that PR, I added an attempt to avoid these kinds of races, but it was a regression on dev instances when the sign up completes without extra requirements. ec83f7c

Revert that fix, and also add improved redirect handling in the case where the flow completes immediately.

This has the cost that if someone closes the original tab, they are unable to complete the sign up. (That was what we were trying to fix during PR review.) However, there is no easy solution to that problem (and the solution that we attempted to implement to fix it was not successful.) Since email links are so little used, I think we should accept that as a cost for now. If someone closes the original tab, they will just need to start the flow again.

This was tested locally against staging and I was no longer able to produce races with dev instances.

End to end validation I performed on this branch:

  • Email link sign in with existing user
  • Email link sign in transfer to sign up missing requirements
  • Email link sign in transfer to sign up complete (this was the regression)
  • Email link sign up
  • Email code sign in transfer to sign up missing requirements
  • Email code sign in with existing user

Description

Checklist

  • pnpm test runs as expected.
  • pnpm build runs as expected.
  • (If applicable) JSDoc comments have been added or updated for any package exports
  • (If applicable) Documentation has been updated

Type of change

  • 🐛 Bug fix
  • 🌟 New feature
  • 🔨 Breaking change
  • 📖 Refactoring / dependency upgrade / documentation
  • other:

Follow up fix for #7928 after
additional test in staging.
With development instances, there can be races between the polling and
new email link tabs. These races were made worse by an attempted fix
late in the review process on that PR, and although I thought I tested
the different flows, I missed cases where the sign up completes
immediately without extra requirements ec83f7c
Revert that fix, and also add improved redirect handling in the case
where the flow completes immediately.
This was tested locally against staging and I was no longer able to
produce races with dev instances.
@vercel

vercelBot commented Aug 4, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
clerk-js-sandboxReadyReadyPreviewAug 4, 2026 3:54pm
swingsetReadyReadyPreviewAug 4, 2026 3:54pm

Request Review

@changeset-bot

changeset-botBot commented Aug 4, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 05b94d6

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 3 packages
NameType
@clerk/uiPatch
@clerk/chrome-extensionPatch
@clerk/swingsetPatch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@coderabbitai

coderabbitaiBot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

📝 Walkthrough

Walkthrough

Transferable email-link verification now uses the sign-up-if-missing transfer flow from the sign-in factor card. The verification tab no longer consumes transfers through a local callback. Completed transfers activate the session. Pending tasks use in-component navigation, while terminal redirects use window navigation. Tests cover these flows.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Possibly related PRs

Suggested reviewers:wobsoriano

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check nameStatusExplanation
Docstring Coverage✅ PassedNo functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.
Title check✅ PassedThe title clearly identifies the email-link race fix in the sign-up-if-missing flow.
Description check✅ PassedThe description explains the race condition, redirect handling, trade-offs, and validation performed for the changeset.

Comment @coderabbitai help to get the list of available commands.

@pkg-pr-new

pkg-pr-newBot commented Aug 4, 2026

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@9328

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@9328

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@9328

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@9328

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@9328

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@9328

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@9328

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@9328

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@9328

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@9328

@clerk/express

npm i https://pkg.pr.new/@clerk/express@9328

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@9328

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@9328

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@9328

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@9328

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@9328

@clerk/react

npm i https://pkg.pr.new/@clerk/react@9328

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@9328

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@9328

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@9328

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@9328

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@9328

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@9328

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@9328

commit: 05b94d6

@github-actions

github-actionsBot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-08-04T15:54:18.462Z

Summary

MetricCount
Packages analyzed19
Packages with changes0
🔴 Breaking changes0
🟡 Non-breaking changes0
🟢 Additions0

No API Changes Detected

All packages have stable APIs with no detected changes.


Report generated by Break Check

Last ran on 05b94d6.

@wobsorianowobsoriano left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i got you

@dmoerner
dmoerner merged commit 83a8fc5 into mainAug 4, 2026
86 of 87 checks passed
@dmoerner
dmoerner deleted the daniel/signupifmissing-transfer-race branch August 4, 2026 16:17
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@dmoerner@wobsoriano