tangled-core/appview/oauth/ at 993e89732453643b84e56fa8ec520df596bcfe2b · oyster.cafe/tangled-core · Tangled

oyster.cafe / tangled-core

forked from tangled.org/core

0

Monorepo for Tangled

0

tangled-core / appview / oauth /

at 993e89732453643b84e56fa8ec520df596bcfe2b 4 files

Seongmin Lee appview/oauth: support local PDS 8mo ago

appview/oauth: support local PDS override `Client.Transport` to support PDS served in localhost Signed-off-by: Seongmin Lee <git@boltless.me>

8 months ago

appview/oauth: add client name and uri to metadata responses Signed-off-by: oppiliappan <me@oppi.li>

8 months ago

appview/oauth: support local PDS override `Client.Transport` to support PDS served in localhost Signed-off-by: Seongmin Lee <git@boltless.me>

8 months ago

appview/oauth: invalidate sessions if inactive for too long if sessions are inactive for too long, tokens will not be refreshed, and calling authorized xrpc methods will error out with invalid_grant. this changeset does two things: - tracks the last time a session was active using a new redis pair: `oauth:session_meta:<did>:<session>`, this is updated every time `SaveSession` is called - checks for session inactivity every time `GetSession` is called, and deletes the session if so this way, `GetSession` will never return a session with expired tokens. Signed-off-by: oppiliappan <me@oppi.li>

8 months ago