core/appview/ at d8144484c72c00aa0674493fb5afc90dadaa661f · tangled.org/core · Tangled

tangled.org / core

11

Monorepo for Tangled tangled.org

11

core / appview /

at d8144484c72c00aa0674493fb5afc90dadaa661f 35 folders 1 file

Seongmin Lee appview: remove `oauth.User` type 5mo ago

appview: don't trust `oauth.ClientSessionData` `oauth.ClientSessionData.HostURL` is not validated after first session creation. If user switches the PDS while logged in, `.HostURL` will still point to old PDS, showing account management options for `tngl.sh` users. This can confuse users to accidentally put account in odd state (activated in both PDSes) Instead, always resolve Handles and PDS hosts on-demand. Technically `HostURL` is used on creating authorized atpclient, but that's ok because request to old PDS will reject the request. Ideally we should revoke user sessions on `#account` event, indigo currently doesn't support DID based revoking. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

commitverify: skip unsigned commits before DB lookup Signed-off-by: Matías Insaurralde <matias@insaurral.de>

2 months ago

appview: use explicit `TANGLED_PDS_USER_DOMAIN` for user handle check PDS might have different domain for PDS hostname & user handles Signed-off-by: Seongmin Lee <git@boltless.me>

3 months ago

appview/state: paginate starred repos page in user profiles Signed-off-by: oppiliappan <me@oppi.li>

2 months ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview/pages: differentiate open/close icons in filetree the giant tailwind safelist is used because nested groups cannot be styled using tailwind, and therefore we need named groups. we pre-populate the source html with up to 12-deep named groups and their variants so that tailwind generates the right css. Signed-off-by: oppiliappan <me@oppi.li>

3 months ago

appview/indexer: propagate SearchInContext error instead of nil, nil Search was returning nil,nil on error, silently bypassing every caller's error guard and causing a nil pointer dereference on the result. Return nil,err instead. Signed-off-by: Matías Insaurralde <matias@insaurral.de>

2 months ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview: rename refresolver module to mentions usage of the resolver is now mentionsResolver. Signed-off-by: oppiliappan <me@oppi.li>

6 months ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview: bubble up error on `PullFromRecord` Signed-off-by: Seongmin Lee <git@boltless.me>

2 months ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview/pulls: update handlers for new pull model Signed-off-by: oppiliappan <me@oppi.li>

3 months ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview/pages: don't access `MultiAccountUser.Active` from template We are using `MultiAccountUser.Did()` to get current DID instead. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview: add basic issue indexer - Heavily inspired by gitea - add `GetAllIssues` which only receives a paginator and gathers all issues ignoring `repoAt` field Signed-off-by: Seongmin Lee <boltlessengineer@proton.me>

11 months ago

appview/pipelines: fix incorrect totals the default query limits to 30 items, we need a separate query for total pipeline counts. Signed-off-by: oppiliappan <me@oppi.li>

4 months ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

show branches in a dropdown

1 year ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview/searchquery: add dynamic tag extraction and shared resolution helpers Add KnownTags map and GetDynamicTags/GetNegatedDynamicTags methods to extract label-value search filters from parsed queries. Any tag:value pair whose key is not a known system tag (state, author, label) is treated as a dynamic label filter. Add resolve.go with shared helpers: IdentResolver type, ResolveAuthor, ExtractTextFilters, and ResolveDIDLabelValues. These keep resolution logic in the searchquery package without coupling it to idresolver. Signed-off-by: Thomas Karpiniec <tom.karpiniec@outlook.com>

3 months ago

orm: extract orm package from appview includes query and migration helpers Signed-off-by: oppiliappan <me@oppi.li>

6 months ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview/signup: fix HTML notice not being rendered Signed-off-by: oppiliappan <me@oppi.li>

2 months ago

appview/sites: use repoIdentifier for archive requests we could just use the knotmirror here directly instead of deploying from the knot, but we'd need the knotmirror to update before the site. for now just deploy from the knot. Signed-off-by: oppiliappan <me@oppi.li>

2 months ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview: remove `oauth.User` type This is not required anymore. `MultiAccountUser` can just hold active user DID. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago

appview/validator: write validators for pull records Signed-off-by: oppiliappan <me@oppi.li>

4 months ago

appview: switch to indigo oauth library Signed-off-by: oppiliappan <me@oppi.li>

8 months ago

appview: don't trust `oauth.ClientSessionData` `oauth.ClientSessionData.HostURL` is not validated after first session creation. If user switches the PDS while logged in, `.HostURL` will still point to old PDS, showing account management options for `tngl.sh` users. This can confuse users to accidentally put account in odd state (activated in both PDSes) Instead, always resolve Handles and PDS hosts on-demand. Technically `HostURL` is used on creating authorized atpclient, but that's ok because request to old PDS will reject the request. Ideally we should revoke user sessions on `#account` event, indigo currently doesn't support DID based revoking. Signed-off-by: Seongmin Lee <git@boltless.me>

5 months ago