Update - February 9, 2026

OrbVPN App (v20.0.6) — Real-Time Notifications

  • WebSocket Notification System: Real-time notifications for device kicks, force logouts, and security alerts across all platforms
  • Firebase Cloud Messaging: FCM token registration and push notification support for mobile platforms
  • Auth Race Condition Fix: Consolidated token refresh to prevent concurrent refresh calls causing frequent logouts
  • Offer Code Redemption: Promotional offer code support with SVG-based glass UI on subscription gate screen
  • IAP Error Messaging: Improved error messages and real-time subscription status tracking during purchases
  • Credit Balance Fix: Resolved double popup issue and NoCreditsSheet not showing correctly
  • Sign Out All Devices: Fixed navigation after signing out all devices with proper token revocation
  • RFC 7807 Error Parsing: Updated API error response handling to standard Problem Details format
  • Desktop Device ID: Proper device identification for Windows, macOS, and Linux platforms
  • Email Normalization: Lowercase and whitespace trimming for consistent email handling

OrbNET Go Backend (v1.6.0)

  • WebSocket Hub: Real-time notification infrastructure for desktop clients (device kicks, force logouts)
  • NotificationHub for Desktop: Push notification fallback when FCM is not available (desktop platforms)
  • StoreKit 2 JWS Verification: Apple in-app purchase transaction verification with signed JWS tokens
  • Trial & Grace Period Tracking: Apple subscription trial period and grace period state management
  • Public OrbMesh Stats: Public-facing endpoint for server network statistics
  • VPN Auth Denial Reasons: Detailed error messages when VPN authorization is rejected
  • Magic Link Callback URL: Support for custom callback URLs in magic link authentication
  • Device Token Refresh Rejection: Prevent token refresh for deleted/revoked devices
  • Sandbox IAP Support: Allow expired subscriptions in sandbox mode for development testing

Security & Reliability

  • Synchronous WebSocket Notifications: Notifications sent before session revocation to ensure delivery
  • Device Registration on Login: Devices always registered during authentication for accurate tracking
  • Enhanced Logging: Verbose WebSocket message delivery tracking for debugging connectivity issues