skip token signature in dev mode

[ryanbarlow97]

Description:

Skip token signature when in dev, I keep getting issues 😢

Please complete the following:

• I have added screenshots for all UI updates
• I process any text displayed to the user through translateText() and I've added it to the en.json file
• I have added relevant tests to the test directory
• I confirm I have thoroughly tested these changes and take full responsibility for any bugs introduced

Please put your Discord username so you can be contacted if a bug or regression is found:

w.o.n

[coderabbitai]

Note

Other AI code review bot(s) detected

CodeRabbit has detected other AI code review bot(s) in this pull request and will avoid duplicating their findings in the review comments. This may lead to a less comprehensive review.

Pre-merge checks

✅ Passed checks (3 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly describes the main change: skipping token signature verification in development mode, which matches the core modification in Worker.ts and jwt.ts files.
Description check	✅ Passed	The description relates to the changeset by explaining the motivation (avoiding token signature issues in dev mode) and confirms testing, aligning with the dev-mode token verification bypass implemented in the code changes.
Docstring Coverage	✅ Passed	Docstring coverage is 100.00% which is sufficient. The required threshold is 80.00%.

---

📜 Recent review details

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between f7ccee6 and a573487.

📒 Files selected for processing (1)

• src/server/Worker.ts

🚧 Files skipped from review as they are similar to previous changes (1)

• src/server/Worker.ts

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (2)

• GitHub Check: Analyze (javascript-typescript)
• GitHub Check: Deploy to openfront.dev

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Pull request overview

This PR adds logic to skip token signature verification in development mode to avoid authentication issues during local development. The changes allow developers to bypass JWT validation and user permission checks when GAME_ENV is set to "dev".

Key changes:

• Skip verifyClientToken() in dev mode, using clientID as persistentId instead
• Skip getUserMe() call in dev mode, leaving roles and flares undefined
• Add conditional logic to handle both production (authenticated) and dev (unauthenticated) flows

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[VectorSophie]

I was thinking of fixing this whenever i would locally test my PRs, this is a really good QoL change.