IGUSDIDRegistrationMutation — registers (or refreshes) the device's USDID
binding (usdid_uuid, public key, fdid) server-side and caches the matching
x-meta-usdid HTTP header in MobileSession for byte-identical reuse on
every subsequent request until the next re-register.
Lives outside of simulation/ because this is not just app-mimicry traffic
— it is a load-bearing identity step that other flows depend on. Pre-login,
post-login, idle-session warmup, and any long-running automation should call
this before authenticating real client behavior at scale.
On a fresh device, EnsureUsdidIdentity generates the persistent EC P-256
keypair + USDID UUID and writes them to MobileDevice. Each call re-signs
a fresh JWS with the current iat (the real app does the same on cold start
and roughly every ~5 minutes thereafter).
IGUSDIDRegistrationMutation— registers (or refreshes) the device's USDID binding(usdid_uuid, public key, fdid)server-side and caches the matchingx-meta-usdidHTTP header inMobileSessionfor byte-identical reuse on every subsequent request until the next re-register.Lives outside of
simulation/because this is not just app-mimicry traffic — it is a load-bearing identity step that other flows depend on. Pre-login, post-login, idle-session warmup, and any long-running automation should call this before authenticating real client behavior at scale.On a fresh device,
EnsureUsdidIdentitygenerates the persistent EC P-256 keypair + USDID UUID and writes them toMobileDevice. Each call re-signs a fresh JWS with the currentiat(the real app does the same on cold start and roughly every ~5 minutes thereafter).