feat(backend): Signal support for handshake nonce

packages/backend/src/constants.ts

@@ -35,6 +35,7 @@ const QueryParameters = {
   LegacyDevBrowser: '__dev_session',
   HandshakeReason: '__clerk_hs_reason',
   HandshakeNonce: Cookies.HandshakeNonce,
+  SupportsHandshakeNonce: '__clerk_supports_handshake_nonce',
 } as const;
 
 const Headers = {

packages/backend/src/tokens/__tests__/handshake.test.ts

@@ -154,6 +154,7 @@ describe('HandshakeService', () => {
       expect(url.searchParams.get('redirect_url')).toBe('https://example.com/');
       expect(url.searchParams.get(constants.QueryParameters.SuffixedCookies)).toBe('true');
       expect(url.searchParams.get(constants.QueryParameters.HandshakeReason)).toBe('test-reason');
+      expect(url.searchParams.get(constants.QueryParameters.SupportsHandshakeNonce)).toBe('true');
     });
 
     it('should include dev browser token in development mode', () => {
@@ -167,6 +168,7 @@ describe('HandshakeService', () => {
       const url = new URL(location);
 
       expect(url.searchParams.get(constants.QueryParameters.DevBrowser)).toBe('dev-token');
+      expect(url.searchParams.get(constants.QueryParameters.SupportsHandshakeNonce)).toBe('true');
     });
 
     it('should throw error if clerkUrl is missing', () => {

packages/backend/src/tokens/handshake.ts

@@ -145,6 +145,7 @@ export class HandshakeService {
       this.authenticateContext.usesSuffixedCookies().toString(),
     );
     url.searchParams.append(constants.QueryParameters.HandshakeReason, reason);
+    url.searchParams.append(constants.QueryParameters.SupportsHandshakeNonce, 'true');
 
     if (this.authenticateContext.instanceType === 'development' && this.authenticateContext.devBrowserToken) {
       url.searchParams.append(constants.QueryParameters.DevBrowser, this.authenticateContext.devBrowserToken);