distributed-pds/server/ at main · willdot.net/distributed-pds

oauth (#15)

1 year ago

feat: account switcher (#79) * feat: account switcher * fix(account-switch): merge redirect query params safely Parse redirect targets and query_params with net/url, then merge into a single encoded query string to avoid malformed URLs when next already has a query or query_params starts with ?. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * perf(session): avoid duplicate account lookups Reuse a single session-account fetch path for signin/account/oauth authorize flows by returning both the active repo and account list from one helper. This removes repeated per-account queries on page render while preserving existing behavior. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(auth): distinguish unauthenticated vs backend session errors Introduce ErrSessionUnauthenticated and treat only that case as a signin redirect. Return server errors for account/session lookup failures in account and oauth authorize/revoke flows so backend issues are not masked as re-login prompts. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(pr-review): address remaining account/oath review issues Populate authorize/account template render data for all paths, harden account switch against cross-site POSTs, and apply consistent account session cookie options on save. Also fix pointer-to-range-variable in session account lookup. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(pr-review): resolve remaining template/session threads Use explicit .Repo.Did in account switcher templates to avoid ambiguous embedded Did fields in RepoActor. Reuse the already-loaded session in oauth authorize by adding a helper variant that accepts an existing session instead of re-fetching it. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

1 month ago

account_sessions.go

remove log Signed-off-by: Will <did:plc:dadhhalkfcq3gucaq25hjqon>

1 week ago

blockstore_variant.go

refactor blockstore to be extensible (#21) * refactor blockstore to be extensible * add configuration for setting blockstore variant * use the configuration when getting blockstore

11 months ago

common.go

fix: return error for empty Did in getters (#65)

4 months ago

event_emmiter.go

fixed cursor on startup Signed-off-by: Will <did:plc:dadhhalkfcq3gucaq25hjqon>

1 week ago

handle_account.go

feat: account switcher (#79) * feat: account switcher * fix(account-switch): merge redirect query params safely Parse redirect targets and query_params with net/url, then merge into a single encoded query string to avoid malformed URLs when next already has a query or query_params starts with ?. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * perf(session): avoid duplicate account lookups Reuse a single session-account fetch path for signin/account/oauth authorize flows by returning both the active repo and account list from one helper. This removes repeated per-account queries on page render while preserving existing behavior. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(auth): distinguish unauthenticated vs backend session errors Introduce ErrSessionUnauthenticated and treat only that case as a signin redirect. Return server errors for account/session lookup failures in account and oauth authorize/revoke flows so backend issues are not masked as re-login prompts. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(pr-review): address remaining account/oath review issues Populate authorize/account template render data for all paths, harden account switch against cross-site POSTs, and apply consistent account session cookie options on save. Also fix pointer-to-range-variable in session account lookup. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(pr-review): resolve remaining template/session threads Use explicit .Repo.Did in account switcher templates to avoid ambiguous embedded Did fields in RepoActor. Reuse the already-loaded session in oauth authorize by adding a helper variant that accepts an existing session instead of re-fetching it. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

1 month ago

handle_account_revoke.go

feat: account switcher (#79) * feat: account switcher * fix(account-switch): merge redirect query params safely Parse redirect targets and query_params with net/url, then merge into a single encoded query string to avoid malformed URLs when next already has a query or query_params starts with ?. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * perf(session): avoid duplicate account lookups Reuse a single session-account fetch path for signin/account/oauth authorize flows by returning both the active repo and account list from one helper. This removes repeated per-account queries on page render while preserving existing behavior. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(auth): distinguish unauthenticated vs backend session errors Introduce ErrSessionUnauthenticated and treat only that case as a signin redirect. Return server errors for account/session lookup failures in account and oauth authorize/revoke flows so backend issues are not masked as re-login prompts. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(pr-review): address remaining account/oath review issues Populate authorize/account template render data for all paths, harden account switch against cross-site POSTs, and apply consistent account session cookie options on save. Also fix pointer-to-range-variable in session account lookup. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(pr-review): resolve remaining template/session threads Use explicit .Repo.Did in account switcher templates to avoid ambiguous embedded Did fields in RepoActor. Reuse the already-loaded session in oauth authorize by adding a helper variant that accepts an existing session instead of re-fetching it. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

1 month ago

handle_account_signin.go

feat: account switcher (#79) * feat: account switcher * fix(account-switch): merge redirect query params safely Parse redirect targets and query_params with net/url, then merge into a single encoded query string to avoid malformed URLs when next already has a query or query_params starts with ?. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * perf(session): avoid duplicate account lookups Reuse a single session-account fetch path for signin/account/oauth authorize flows by returning both the active repo and account list from one helper. This removes repeated per-account queries on page render while preserving existing behavior. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(auth): distinguish unauthenticated vs backend session errors Introduce ErrSessionUnauthenticated and treat only that case as a signin redirect. Return server errors for account/session lookup failures in account and oauth authorize/revoke flows so backend issues are not masked as re-login prompts. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(pr-review): address remaining account/oath review issues Populate authorize/account template render data for all paths, harden account switch against cross-site POSTs, and apply consistent account session cookie options on save. Also fix pointer-to-range-variable in session account lookup. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(pr-review): resolve remaining template/session threads Use explicit .Repo.Did in account switcher templates to avoid ambiguous embedded Did fields in RepoActor. Reuse the already-loaded session in oauth authorize by adding a helper variant that accepts an existing session instead of re-fetching it. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

1 month ago

handle_account_signout.go

feat: account switcher (#79) * feat: account switcher * fix(account-switch): merge redirect query params safely Parse redirect targets and query_params with net/url, then merge into a single encoded query string to avoid malformed URLs when next already has a query or query_params starts with ?. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * perf(session): avoid duplicate account lookups Reuse a single session-account fetch path for signin/account/oauth authorize flows by returning both the active repo and account list from one helper. This removes repeated per-account queries on page render while preserving existing behavior. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(auth): distinguish unauthenticated vs backend session errors Introduce ErrSessionUnauthenticated and treat only that case as a signin redirect. Return server errors for account/session lookup failures in account and oauth authorize/revoke flows so backend issues are not masked as re-login prompts. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(pr-review): address remaining account/oath review issues Populate authorize/account template render data for all paths, harden account switch against cross-site POSTs, and apply consistent account session cookie options on save. Also fix pointer-to-range-variable in session account lookup. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(pr-review): resolve remaining template/session threads Use explicit .Repo.Did in account switcher templates to avoid ambiguous embedded Did fields in RepoActor. Reuse the already-loaded session in oauth authorize by adding a helper variant that accepts an existing session instead of re-fetching it. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

1 month ago

handle_account_switch.go

feat: account switcher (#79) * feat: account switcher * fix(account-switch): merge redirect query params safely Parse redirect targets and query_params with net/url, then merge into a single encoded query string to avoid malformed URLs when next already has a query or query_params starts with ?. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * perf(session): avoid duplicate account lookups Reuse a single session-account fetch path for signin/account/oauth authorize flows by returning both the active repo and account list from one helper. This removes repeated per-account queries on page render while preserving existing behavior. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(auth): distinguish unauthenticated vs backend session errors Introduce ErrSessionUnauthenticated and treat only that case as a signin redirect. Return server errors for account/session lookup failures in account and oauth authorize/revoke flows so backend issues are not masked as re-login prompts. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(pr-review): address remaining account/oath review issues Populate authorize/account template render data for all paths, harden account switch against cross-site POSTs, and apply consistent account session cookie options on save. Also fix pointer-to-range-variable in session account lookup. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(pr-review): resolve remaining template/session threads Use explicit .Repo.Did in account switcher templates to avoid ambiguous embedded Did fields in RepoActor. Reuse the already-loaded session in oauth authorize by adding a helper variant that accepts an existing session instead of re-fetching it. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

1 month ago

handle_actor_get_preferences.go

various fixes (#29)

8 months ago

handle_actor_put_preferences.go

add withcontxt to all db calls

5 months ago

handle_age_assurance.go

add age assurance endpoint Signed-off-by: Will Andrews <will7989@hotmail.com>

5 months ago

handle_health.go

initial commit (squashed)

1 year ago

handle_identity_get_recommended_did_credentials.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_identity_request_plc_operation.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_identity_sign_plc_operation.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_identity_submit_plc_operation.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_identity_update_handle.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_import_repo.go

switch to use the new repo package (#71) * Switch to the new repo lib * Fix nil pointer * caching * clean

3 months ago

handle_label_query_labels.go

implement queryLabels and add new COCOON_REQUIRE_INVITE env (#47) * implement queryLabels * add a COCOON_REQUIRE_INVITE env to make invite codes be able to not be required (still required by default) * handle handles for http requests and stuff

6 months ago

handle_oauth_authorize.go

feat: account switcher (#79) * feat: account switcher * fix(account-switch): merge redirect query params safely Parse redirect targets and query_params with net/url, then merge into a single encoded query string to avoid malformed URLs when next already has a query or query_params starts with ?. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * perf(session): avoid duplicate account lookups Reuse a single session-account fetch path for signin/account/oauth authorize flows by returning both the active repo and account list from one helper. This removes repeated per-account queries on page render while preserving existing behavior. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(auth): distinguish unauthenticated vs backend session errors Introduce ErrSessionUnauthenticated and treat only that case as a signin redirect. Return server errors for account/session lookup failures in account and oauth authorize/revoke flows so backend issues are not masked as re-login prompts. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(pr-review): address remaining account/oath review issues Populate authorize/account template render data for all paths, harden account switch against cross-site POSTs, and apply consistent account session cookie options on save. Also fix pointer-to-range-variable in session account lookup. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(pr-review): resolve remaining template/session threads Use explicit .Repo.Did in account switcher templates to avoid ambiguous embedded Did fields in RepoActor. Reuse the already-loaded session in oauth authorize by adding a helper variant that accepts an existing session instead of re-fetching it. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

1 month ago

handle_oauth_jwks.go

oauth (#15)

1 year ago

handle_oauth_par.go

a bunch of fixes and cleanup (#54) Co-authored-by: Scan <103391616+scanash00@users.noreply.github.com>

5 months ago

handle_oauth_token.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_proxy.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_proxy_get_feed.go

Fix proxying getFeed to issue a token for the feed generator (#38)

7 months ago

handle_repo_apply_writes.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_repo_create_record.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_repo_delete_record.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_repo_describe_repo.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_repo_get_record.go

add withcontxt to all db calls

5 months ago

handle_repo_list_missing_blobs.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_repo_list_records.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_repo_list_repos.go

fix: empty array nil (#66) * fix: empty array nil * use make for array init --------- Co-authored-by: Hailey <me@haileyok.com>

4 months ago

handle_repo_put_record.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_repo_upload_blob.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_robots.go

initial commit (squashed)

1 year ago

handle_root.go

initial commit (squashed)

1 year ago

handle_server_activate_account.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_server_check_account_status.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_server_confirm_email.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_server_create_account.go

switch to use the new repo package (#71) * Switch to the new repo lib * Fix nil pointer * caching * clean

3 months ago

handle_server_create_invite_code.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_server_create_invite_codes.go

fix: empty array nil (#66) * fix: empty array nil * use make for array init --------- Co-authored-by: Hailey <me@haileyok.com>

4 months ago

handle_server_create_session.go

refactor so that there's a 2FA type on the repo which replaces EmailAuthFactor Signed-off-by: Will Andrews <did:plc:dadhhalkfcq3gucaq25hjqon>

5 months ago

handle_server_deactivate_account.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_server_delete_account.go

remove locking from database (#55)

5 months ago

handle_server_delete_session.go

add withcontxt to all db calls

5 months ago

handle_server_describe_server.go

implement queryLabels and add new COCOON_REQUIRE_INVITE env (#47) * implement queryLabels * add a COCOON_REQUIRE_INVITE env to make invite codes be able to not be required (still required by default) * handle handles for http requests and stuff

6 months ago

handle_server_get_service_auth.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_server_get_session.go

refactor so that there's a 2FA type on the repo which replaces EmailAuthFactor Signed-off-by: Will Andrews <did:plc:dadhhalkfcq3gucaq25hjqon>

5 months ago

handle_server_refresh_session.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_server_request_account_delete.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_server_request_email_confirmation.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_server_request_email_update.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_server_request_password_reset.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_server_reserve_signing_key.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_server_reset_password.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_server_resolve_handle.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_server_update_email.go

refactor so that there's a 2FA type on the repo which replaces EmailAuthFactor Signed-off-by: Will Andrews <did:plc:dadhhalkfcq3gucaq25hjqon>

5 months ago

handle_sync_get_blob.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_sync_get_blocks.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_sync_get_latest_commit.go

add withcontxt to all db calls

5 months ago

handle_sync_get_record.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_sync_get_repo.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

handle_sync_get_repo_status.go

add withcontxt to all db calls

5 months ago

handle_sync_list_blobs.go

fix: empty array nil (#66) * fix: empty array nil * use make for array init --------- Co-authored-by: Hailey <me@haileyok.com>

4 months ago

handle_sync_subscribe_repos.go

fix cursors for new relay (#64)

4 months ago

handle_well_known.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

mail.go

refactor so that there's a 2FA type on the repo which replaces EmailAuthFactor Signed-off-by: Will Andrews <did:plc:dadhhalkfcq3gucaq25hjqon>

5 months ago

middleware.go

add metrics, cleanup logger usages (#51) * cleanup logger usages and add some metrics * add some basic metrics

5 months ago

persist.go

remove log Signed-off-by: Will <did:plc:dadhhalkfcq3gucaq25hjqon>

1 week ago

repo.go

switch to use the new repo package (#71) * Switch to the new repo lib * Fix nil pointer * caching * clean

3 months ago

server.go

added some documentation and example config files Signed-off-by: Will <did:plc:dadhhalkfcq3gucaq25hjqon>

1 week ago

service_auth.go

feat: configurable session cookie key (#58) * feat: configurable session cookie key * chore: fmt

5 months ago

session.go

add withcontxt to all db calls

5 months ago

session_options.go

feat: account switcher (#79) * feat: account switcher * fix(account-switch): merge redirect query params safely Parse redirect targets and query_params with net/url, then merge into a single encoded query string to avoid malformed URLs when next already has a query or query_params starts with ?. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * perf(session): avoid duplicate account lookups Reuse a single session-account fetch path for signin/account/oauth authorize flows by returning both the active repo and account list from one helper. This removes repeated per-account queries on page render while preserving existing behavior. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(auth): distinguish unauthenticated vs backend session errors Introduce ErrSessionUnauthenticated and treat only that case as a signin redirect. Return server errors for account/session lookup failures in account and oauth authorize/revoke flows so backend issues are not masked as re-login prompts. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(pr-review): address remaining account/oath review issues Populate authorize/account template render data for all paths, harden account switch against cross-site POSTs, and apply consistent account session cookie options on save. Also fix pointer-to-range-variable in session account lookup. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(pr-review): resolve remaining template/session threads Use explicit .Repo.Did in account switcher templates to avoid ambiguous embedded Did fields in RepoActor. Reuse the already-loaded session in oauth authorize by adding a helper variant that accepts an existing session instead of re-fetching it. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

1 month ago

Configure Feed

Configure Feed