Known Pitfalls

These pitfalls appear repeatedly during migration and integration work.

Domain Mismatch in Signed Auth

Using mismatched domain/uri values in signed messages causes verify failures.

Mode Guard Confusion

Developers can misread behavior when site mode, access session, and wallet state overlap.

Token Reuse in WS Flows

One-time or short-lived token reuse can cause replay-related disconnects.

Runtime URL Drift

Frontend fallback and backend catalog runtime URL must stay aligned.

Role Wiring Gaps After Deploy

Contracts may deploy successfully but fail operationally until roles/signers are granted.

Metadata Cleanup Risk

Unsafe cleanup can remove needed metadata if current references are not protected.