From a22dc5facbf7ae2225ab829f8a67ad9b5db981c1 Mon Sep 17 00:00:00 2001
From: Neal Shah <30693865+ProgrammerIn-wonderland@users.noreply.github.com>
Date: Wed, 24 Jun 2026 14:28:02 -0400
Subject: [PATCH] fix whoami user token check (#3299)

---
 extensions/whoami.test.ts | 4 ++++
 extensions/whoami.ts      | 2 ++
 2 files changed, 6 insertions(+)

diff --git a/extensions/whoami.test.ts b/extensions/whoami.test.ts
index 5a1d35cbc..b2ba66e2a 100644
--- a/extensions/whoami.test.ts
+++ b/extensions/whoami.test.ts
@@ -107,6 +107,8 @@ describe('whoami extension — handleWhoami', () => {
         expect(body.email).toBe(user.email);
         expect(body.is_temp).toBe(false);
         expect(body.oidc_only).toBe(false);
+        // is_user_token is present (true) for user actors.
+        expect(body.is_user_token).toBe(true);
         // `directories` is only sent to user actors — confirm it’s present.
         expect(body.directories).toBeDefined();
         // taskbar_items is only sent to user actors.
@@ -146,6 +148,8 @@ describe('whoami extension — handleWhoami', () => {
 
         const body = captured.body as Record<string, unknown>;
         expect(body.app_name).toBe('app-test-actor');
+        // is_user_token is stripped for app actors.
+        expect(body.is_user_token).toBeUndefined();
         expect(body.desktop_bg_url).toBeUndefined();
         expect(body.desktop_bg_color).toBeUndefined();
         expect(body.desktop_bg_fit).toBeUndefined();
diff --git a/extensions/whoami.ts b/extensions/whoami.ts
index 64752fcc2..8182988a0 100644
--- a/extensions/whoami.ts
+++ b/extensions/whoami.ts
@@ -79,6 +79,7 @@ export const handleWhoami = async (
         desktop_bg_color: user.desktop_bg_color,
         desktop_bg_fit: user.desktop_bg_fit,
         is_temp: user.password === null && user.email === null,
+        is_user_token: true,
         oidc_only: oidcOnly,
         taskbar_items: isUser
             ? await getTaskbarItems(
@@ -160,6 +161,7 @@ export const handleWhoami = async (
         delete details.desktop_bg_color;
         delete details.desktop_bg_fit;
         delete details.human_readable_age;
+        delete details.is_user_token;
     }
 
     if (actor.app) {