core/appview/oauth/ at e326cc53ad4e9123552bdf20a192aff6ca1eb135 · alice.pds.demo.boltless.dev/core · Tangled

alice.pds.demo.boltless.dev / core

0

This repository has no description

0

core / appview / oauth

7 files

at e326cc53ad4e9123552bdf20a192aff6ca1eb135

did:plc:3fwecdnvtcscjnrx2p4n7a… appview/oauth: recover from corrupted session cookies on login 5mo ago

appview/oauth: recover from corrupted session cookies on login

5 months ago

accounts_test.go

fmt: * Signed-off-by: oppiliappan <me@oppi.li>

6 months ago

fmt: * Signed-off-by: oppiliappan <me@oppi.li>

6 months ago

appview/oauth: store and reuse the same app password session We seem to be hammering bsky's PDS, which explains the 429s. Perhaps re-using the session alleviates the pressure. It's hard to test this locally since their rate limits vanish (different host/IP). Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>

5 months ago

appview/oauth: recover from corrupted session cookies on login

5 months ago

oauth: add granular scope request for atproto records & everything tangled-related

6 months ago

appview/oauth: invalidate sessions if inactive for too long if sessions are inactive for too long, tokens will not be refreshed, and calling authorized xrpc methods will error out with invalid_grant. this changeset does two things: - tracks the last time a session was active using a new redis pair: `oauth:session_meta:<did>:<session>`, this is updated every time `SaveSession` is called - checks for session inactivity every time `GetSession` is called, and deletes the session if so this way, `GetSession` will never return a session with expired tokens. Signed-off-by: oppiliappan <me@oppi.li>

9 months ago