v0.11.1 — Auth Fixes, Number Formatting, Font Consistency

Crossmark Auth (Complete Rewrite)

• Crossmark no longer requires a second signing step — uses public key from sign-in as session proof

• Removed Memos from challenge transaction (caused blank screen in Crossmark)

• Fixed methods.sign returning UUID instead of tx blob

• Wallet only shows as connected after auth token is stored — no more unauthenticated API calls racing ahead

Auth System

• Fixed challenge colon-splitting — the challenge format meridian:address:timestamp:nonce was being split at colons, so only "meridian" was compared. The address-only fallback was masking this the entire time.

• Auth sessions survive backend restarts — valid client tokens are restored instead of rejected

• getAuthHeader() returns null when no auth token exists (was sending address-only headers)

Number Formatting

• All prices now display with commas (e.g., $1,234.56 instead of $1234.56)

• XRP amounts formatted with thousand separators

• Applied across 14 files: listing cards, detail pages, admin, analytics, rewards, orders, disputes, profile, wallet balance

Font Consistency

• Added font-cormorant alias to Tailwind config — 8+ files using this class were silently falling back to Outfit instead of Cormorant Garamond

Cleanup

• Removed address-only auth fallback (security hardening)

• Removed debug console logging from analytics

• Removed dead code: xamanWallet.ts, xrpl-utils.ts

• Removed redundant /orders page (profile already has order tabs)