Code

OAuth#42

Code

Draft

DavidBuchanan314 wants to merge 23 commits intomainDavidBuchanan314/millipds:mainfrom oauthDavidBuchanan314/millipds:oauthCopy head branch name to clipboard

+936-320

Commits

Commits on Jan 17, 2025

• make oauth login form actually verify creds

  DavidBuchanan314

  committed
  a0e1e8d

  Copy full SHA for a0e1e8d

• create session cookie on successful auth

  DavidBuchanan314

  committed
  769a828

  Copy full SHA for 769a828

• new table to track oauth grants

  DavidBuchanan314

  committed
  1bc99b8

  Copy full SHA for 1bc99b8

• split authz and authn into dedicated routes

  DavidBuchanan314

  committed
  9a2bb78

  Copy full SHA for 9a2bb78

• actually store PARs

  DavidBuchanan314

  committed
  9f68f9b

  Copy full SHA for 9f68f9b

• pass 'next' parameter to authentication endpoint, use it to redirect back to the original page

  DavidBuchanan314

  committed
  4886ff1

  Copy full SHA for 4886ff1

• retreive PAR, client_id, list authz scopes in web ui

  DavidBuchanan314

  committed
  e82f695

  Copy full SHA for e82f695

• old-python compat

  DavidBuchanan314

  committed
  c82f705

  Copy full SHA for c82f705

• old-python compat, take 2

  DavidBuchanan314

  committed
  991b156

  Copy full SHA for 991b156

• fix error icon alignment

  DavidBuchanan314

  committed
  254fa63

  Copy full SHA for 254fa63

Commits on Jan 19, 2025

• refactoring

  DavidBuchanan314

  committed
  8376c45

  Copy full SHA for 8376c45

• hand out some fake tokens just so we can complete the flow

  DavidBuchanan314

  committed
  2961123

  Copy full SHA for 2961123

• send some real auth tokens

  DavidBuchanan314

  committed
  32ea4a6

  Copy full SHA for 32ea4a6

Commits on Jan 20, 2025

• implement jwk fingerprinting for dpop

  DavidBuchanan314

  committed
  7e5de4c

  Copy full SHA for 7e5de4c

• forbid redirects when fetching client metadata

  DavidBuchanan314

  committed
  4f02f5f

  Copy full SHA for 4f02f5f

• refactor dpop header processing into a middleware

  DavidBuchanan314

  committed
  92b4686

  Copy full SHA for 92b4686

Commits on Jan 22, 2025

• refactor authentication into a middleware

  DavidBuchanan314

  committed
  c880469

  Copy full SHA for c880469

• refactor service auth token generation, check for chat.bsky scope

  DavidBuchanan314

  committed
  0d39403

  Copy full SHA for 0d39403

• fix inbound lxm check

  DavidBuchanan314

  committed
  ce168c0

  Copy full SHA for ce168c0

• fix service proxying

  DavidBuchanan314

  committed
  53ebf02

  Copy full SHA for 53ebf02

Commits on Jan 23, 2025

• make scope grant flow work again, remember granted scopes

  DavidBuchanan314

  committed
  e5ba5ce

  Copy full SHA for e5ba5ce

• prevent open redirects after login, clean up server metadata doc

  DavidBuchanan314

  committed
  adc9a2b

  Copy full SHA for adc9a2b

• reuse app password api for oauth scope management

  DavidBuchanan314

  committed
  9074f36

  Copy full SHA for 9074f36