core/appview/oauth/ at 2713446b0bee9cac6541007394e95c8a0ae27358 · alice.pds.demo.boltless.dev/core · Tangled

alice.pds.demo.boltless.dev / core

0

This repository has no description

0

core / appview / oauth

7 files

at 2713446b0bee9cac6541007394e95c8a0ae27358

Seongmin Lee appview/{oauth,pages}: cleanup unused codes 7mo ago

appview/{oauth,pages}: cleanup unused codes - `AccountRegistry.OtherAccounts()` is not used anywhere - Removed several legacy session value names from `oauth/consts.go` - We can just embed the `oauth.GetUser()` now Signed-off-by: Seongmin Lee <git@boltless.me>

7 months ago

accounts_test.go

appview/{oauth,pages}: cleanup unused codes - `AccountRegistry.OtherAccounts()` is not used anywhere - Removed several legacy session value names from `oauth/consts.go` - We can just embed the `oauth.GetUser()` now Signed-off-by: Seongmin Lee <git@boltless.me>

7 months ago

appview/{oauth,pages}: cleanup unused codes - `AccountRegistry.OtherAccounts()` is not used anywhere - Removed several legacy session value names from `oauth/consts.go` - We can just embed the `oauth.GetUser()` now Signed-off-by: Seongmin Lee <git@boltless.me>

7 months ago

appview/oauth: refresh sessions in bsky post updater makes the homepage more "live". Signed-off-by: oppiliappan <me@oppi.li>

4 months ago

appview/{oauth,pages}: cleanup unused codes - `AccountRegistry.OtherAccounts()` is not used anywhere - Removed several legacy session value names from `oauth/consts.go` - We can just embed the `oauth.GetUser()` now Signed-off-by: Seongmin Lee <git@boltless.me>

7 months ago

oauth: add granular scope request for atproto records & everything tangled-related

7 months ago

appview/oauth: invalidate sessions if inactive for too long if sessions are inactive for too long, tokens will not be refreshed, and calling authorized xrpc methods will error out with invalid_grant. this changeset does two things: - tracks the last time a session was active using a new redis pair: `oauth:session_meta:<did>:<session>`, this is updated every time `SaveSession` is called - checks for session inactivity every time `GetSession` is called, and deletes the session if so this way, `GetSession` will never return a session with expired tokens. Signed-off-by: oppiliappan <me@oppi.li>

10 months ago