Update - February 9, 2026
OrbVPN App (v20.0.6) — Real-Time Notifications
- WebSocket Notification System: Real-time notifications for device kicks, force logouts, and security alerts across all platforms
- Firebase Cloud Messaging: FCM token registration and push notification support for mobile platforms
- Auth Race Condition Fix: Consolidated token refresh to prevent concurrent refresh calls causing frequent logouts
- Offer Code Redemption: Promotional offer code support with SVG-based glass UI on subscription gate screen
- IAP Error Messaging: Improved error messages and real-time subscription status tracking during purchases
- Credit Balance Fix: Resolved double popup issue and NoCreditsSheet not showing correctly
- Sign Out All Devices: Fixed navigation after signing out all devices with proper token revocation
- RFC 7807 Error Parsing: Updated API error response handling to standard Problem Details format
- Desktop Device ID: Proper device identification for Windows, macOS, and Linux platforms
- Email Normalization: Lowercase and whitespace trimming for consistent email handling
OrbNET Go Backend (v1.6.0)
- WebSocket Hub: Real-time notification infrastructure for desktop clients (device kicks, force logouts)
- NotificationHub for Desktop: Push notification fallback when FCM is not available (desktop platforms)
- StoreKit 2 JWS Verification: Apple in-app purchase transaction verification with signed JWS tokens
- Trial & Grace Period Tracking: Apple subscription trial period and grace period state management
- Public OrbMesh Stats: Public-facing endpoint for server network statistics
- VPN Auth Denial Reasons: Detailed error messages when VPN authorization is rejected
- Magic Link Callback URL: Support for custom callback URLs in magic link authentication
- Device Token Refresh Rejection: Prevent token refresh for deleted/revoked devices
- Sandbox IAP Support: Allow expired subscriptions in sandbox mode for development testing
Security & Reliability
- Synchronous WebSocket Notifications: Notifications sent before session revocation to ensure delivery
- Device Registration on Login: Devices always registered during authentication for accurate tracking
- Enhanced Logging: Verbose WebSocket message delivery tracking for debugging connectivity issues