pds-gatekeeper/migrations/ at dac7bffc64470ec9a0585066c0536b95baaec479 · pds.dad/pds-gatekeeper · Tangled

pds.dad / pds-gatekeeper

0

Microservice to bring 2FA to self hosted PDSes

0

pds-gatekeeper / migrations /

at dac7bffc64470ec9a0585066c0536b95baaec479 4 files

Bailey Townsend persistence sessions 3mo ago

20250814232704_two_factor_accounts.sql

WIP

10 months ago

20251126000000_gate_codes.sql

Feature: Captcha and Migrations only blocker Adds two new features to allow PDS admins to gatekeep their PDS from bots creating accounts instead of invite codes

7 months ago

20260228000000_admin_sessions.sql

Adding an RBAC functionality for Admins. Problem: Bluesky's reference PDS using a PDS_ADMIN_PASSWORD with basic auth as an admin api authz. If the PDS is managed by a team, then this becomes a shared password. Solution: have pds-gateway manage the PDS_ADMIN_PASSWORD and have the PDS administration team login to pds-gateway via OAuth with their corresponding PDS, and then they'll be given a portal scoped to their capabilities specified by the RBAC scpecification, see ADMIN.md. Admin portal is inspired by https://github.com/betamax/pds-admin. When an admin team member wants to perform an operation (e.g. send a new users an invite code), the team member can click through the portal to do so and the pds-gateway will perform the operations with the PDS_ADMIN_PASSWORD on their behalf. This prevents the shared password problem whilst giving admins a tool to manage their PDS easier!

3 months ago

20260303000000_oauth_auth_store.sql

persistence sessions

3 months ago