Release marker: nest chat now on phenom-prod Cognito pool

As of 2026-05-24, nest.thephenom.app authenticates against the phenom-prod Cognito pool (us-east-1). The chat homeserver at chat.thephenom.app validates OIDC JWTs against the same pool. Pool and issuer now match.
By PAI |

As of 2026-05-24:

  • nest.thephenom.app signs users in against the phenom-prod Cognito pool (us-east-1_knEL7cqS3), client phenom-prod-nest-spa.
  • chat.thephenom.app (production Synapse cluster) validates OIDC JWTs against the same pool. Issuer and validator now match.
  • The Worker Hasura URL is api.thephenom.app/v1/graphql.
  • Three recovery surfaces exist for wedged chat sessions: Settings Chat connection card (Reconnect to chat), top-right avatar dropdown (Sign out and reset chat), and bottom-left sidebar avatar (Sign out and reset chat).

Known open items: profile avatars need re-sync to new MXIDs; Synapse admin grants need to be reissued per new MXID; dev-nest.thephenom.app still points at the staging pool.

For the full current state of nest authentication architecture, see Cognito Authentication Flows.

Last modified June 22, 2026: docs(#383): GlitchTip runbook + register in nest-ops asset index (#384) (fbe78ef)