Blog
Engineering
The rotating client token, and the bug that taught us
Shipstack Team · Sep 9, 2026 · 5 min read
The client token rotates on every request that resolves a client, not just the first one. That is easy to forget when a request still carries the previous cookie.
Persist what you just received
The fix was to store the token that came back in the response instead of re-reading the stale cookie from the incoming request. We found it through a real end-to-end failure, not by inspection.