core/appview/oauth/ at 87ef8daee0ca7e68edd270cf9adb1eea0e565d22 · alice.pds.demo.boltless.dev/core · Tangled

alice.pds.demo.boltless.dev / core

0

This repository has no description

0

core / appview / oauth

7 files

at 87ef8daee0ca7e68edd270cf9adb1eea0e565d22

Anirudh Oppiliappan appview/oauth: create tangled profile on first login 6mo ago

appview/oauth: create tangled profile on first login Creates an empty sh.tangled.actor.profile on first login. This should prevent profile picture uploads from breaking due to profile record existing beforehand. This should also allow for us to estimate total users better globally. Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>

6 months ago

accounts_test.go

fmt: * Signed-off-by: oppiliappan <me@oppi.li>

6 months ago

fmt: * Signed-off-by: oppiliappan <me@oppi.li>

6 months ago

appview/oauth: create tangled profile on first login Creates an empty sh.tangled.actor.profile on first login. This should prevent profile picture uploads from breaking due to profile record existing beforehand. This should also allow for us to estimate total users better globally. Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>

6 months ago

oauth: add granular scope request for atproto records & everything tangled-related

6 months ago

oauth: add granular scope request for atproto records & everything tangled-related

6 months ago

appview/oauth: invalidate sessions if inactive for too long if sessions are inactive for too long, tokens will not be refreshed, and calling authorized xrpc methods will error out with invalid_grant. this changeset does two things: - tracks the last time a session was active using a new redis pair: `oauth:session_meta:<did>:<session>`, this is updated every time `SaveSession` is called - checks for session inactivity every time `GetSession` is called, and deletes the session if so this way, `GetSession` will never return a session with expired tokens. Signed-off-by: oppiliappan <me@oppi.li>

9 months ago