core/appview/state/ at 3877a2b24f0b0ef00da6831d3e23954e0e2bf56d · tangled.org/core · Tangled

tangled.org / core

9

Monorepo for Tangled tangled.org

9

core / appview / state /

at 3877a2b24f0b0ef00da6831d3e23954e0e2bf56d 1 folder 17 files

Seongmin Lee appview: remove `oauth.User` type 5mo ago

appview: remove `@` from URLs and interface old URLs that refer to users with the `@` are redirected to the version without `@`. the leading motivation for this change is that valid atproto handles do not contain the prefix. it is purely stylistic. Signed-off-by: oppiliappan <me@oppi.li>

8 months ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview/state: replace log package with structured slog logging Replace all log.Println/log.Printf calls across follow.go, star.go, reaction.go, gfi.go, and profile.go with s.logger.Error/Warn/Info using structured key-value pairs. Each handler opens with a child logger via s.logger.With("handler", "FuncName"). Firehose-idempotent delete failures (follow, star, reaction) use Warn; all other failures use Error. Signed-off-by: Matías Insaurralde <matias@insaurral.de>

2 months ago

appview/notify: add Clone notifier, enqueue posthog event for clones Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>

2 months ago

appview/sites: use repoIdentifier for archive requests we could just use the knotmirror here directly instead of deploying from the knot, but we'd need the knotmirror to update before the site. for now just deploy from the knot. Signed-off-by: oppiliappan <me@oppi.li>

2 months ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview/state: fix open redirect via return_url after OAuth login Validate return_url before storing it in the session: only relative paths starting with "/" (and not "//") are accepted. Anything else — absolute URLs and protocol-relative URLs — is replaced with "/". Add tests covering the accepted and rejected cases. Signed-off-by: Matías Insaurralde <matias@insaurral.de>

2 months ago

appview/state: refactor manifest.json incorporates changes suggested by @boltless.me Co-authored-by: Seongmin Lee <git@boltless.me> Signed-off-by: oppiliappan <me@oppi.li>

5 months ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview: don't trust `oauth.ClientSessionData` `oauth.ClientSessionData.HostURL` is not validated after first session creation. If user switches the PDS while logged in, `.HostURL` will still point to old PDS, showing account management options for `tngl.sh` users. This can confuse users to accidentally put account in odd state (activated in both PDSes) Instead, always resolve Handles and PDS hosts on-demand. Technically `HostURL` is used on creating authorized atpclient, but that's ok because request to old PDS will reject the request. Ideally we should revoke user sessions on `#account` event, indigo currently doesn't support DID based revoking. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appvie/notify: add DeleteRepo event to unindex repos when deleted. this changeset also includes a tweak to the NewRepo event, to fix a bug with the document IDs of new repos (it was always zero). Signed-off-by: oppiliappan <me@oppi.li>

2 months ago

appview/state: add test for parseSortParam Signed-off-by: Matías Insaurralde <matias@insaurral.de>

2 months ago

spindlestream.go

appview/db: propagate context through GetSpindles and AddPipelineStatus Update all call sites of db.GetSpindles and db.AddPipelineStatus to pass a context.Context, enabling proper cancellation and timeout propagation to the database layer. Signed-off-by: Matías Insaurralde <matias@insaurral.de>

2 months ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago