cometchat-react-native-production

Ground truth: @cometchat/chat-uikit-react-native@5 + catalogs/rn-sdk-v4.json. Docs: /ui-kit/react-native/react-native-cli-integration · /sdk/react-native/authentication-overview.

Companion skills (read first)

• cometchat-react-native-core — install, provider chain, init→login→render. Assumed, not repeated here.
• cometchat-security — the enterprise auth model this client-side hardening plugs into: wiring your IdP / SSO into the token flow (your IdP → your server → mint the CometChat auth token; CometChat is not an IdP), token expiry/refresh + re-login, RBAC roles + group (SBAC) scopes, and Auth Key vs auth token vs REST API Key. Load it for a security review or any SSO question.

Use this skill when

• "is this safe to ship" · "swap the auth key for a token" · "prepare the release build"

Prerequisites & install

None beyond core, plus a backend endpoint you control for minting tokens.

The one rule: the Auth Key never ships

login({ uid }) uses the Auth Key, which can create and impersonate any user in your app. Fine on your laptop; unacceptable in a shipped binary.