From 35fbf26e2e2d3d304679b329bf0edca91c7ecc70 Mon Sep 17 00:00:00 2001
From: DTTerastar
Date: Sat, 9 May 2026 11:07:34 -0400
Subject: [PATCH] fix(auth): bump default API host to v2-13-10
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
The previous bump landed on v2-12-5, which the probe picked because it
didn't return "server is deprecated". v2-12-5 turned out to return 500
"database is unreachable" for every call — not actually a working host.
Manual sweep across the full v2-13-x range (anchored on the current
iOS app version 2.13.10, released 2026-05-08) shows v2-13-6 through
v2-13-10 are healthy: they return "Session not found" for an
invalid-token probe, which is the expected 4xx-style response from a
working backend. v2-13-5 and below are deprecated.
v2-13-10 verified against a live refresh:
$ LIFTOFF_API_BASE=https://v2-13-10.api.getgymbros.com \
liftoff-export auth refresh
Token valid: eyJhbGciOiJIUzI1NiIs...
The probe will get a separate PR teaching it to distinguish "live"
(healthy 4xx) from "broken/transient" (500) from "deprecated", so it
doesn't fall into the same trap on the next rotation.
Co-Authored-By: Claude Opus 4.7 (1M context)
Co-authored-by: Orca
---
internal/auth/auth.go | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/internal/auth/auth.go b/internal/auth/auth.go
index 060e564..c28fa37 100644
--- a/internal/auth/auth.go
+++ b/internal/auth/auth.go
@@ -15,7 +15,7 @@ import (
)
const (
- defaultAPIBase = "https://v2-12-5.api.getgymbros.com"
+ defaultAPIBase = "https://v2-13-10.api.getgymbros.com"
refreshProcedure = "user.refreshToken"
userAgent = "Liftoff/528 CFNetwork/3860.400.51 Darwin/25.3.0"
)