94 Commits

Author SHA1 Message Date
Evan Jarrett
7a0050235d background ensurecrew to prevent stalling oauth 2025-11-01 11:08:53 -05:00
Evan Jarrett
55afa99efa jwks 2025-10-29 12:21:50 -05:00
Evan Jarrett
6793ba6a50 use confidential oauth in production 2025-10-29 12:06:47 -05:00
Evan Jarrett
6ef2aaf709 more test coverage. clean up docs 2025-10-28 20:39:57 -05:00
Evan Jarrett
93b1d0d4ba add identity invalidation to logstream. refresh avatar urls on login 2025-10-28 10:12:34 -05:00
Evan Jarrett
1727801df3 clean up layouts, add favicons 2025-10-26 15:20:54 -05:00
Evan Jarrett
6bc929f2dc fix up ser creation logic when user doesn't have a bluesky profile record 2025-10-26 09:36:12 -05:00
Evan Jarrett
c831d3f735 auth/token needs GET 2025-10-25 19:42:54 -05:00
Evan Jarrett
d75a27557a use chi for routes in appview. refactor routes outside of serve.go 2025-10-25 14:20:23 -05:00
Evan Jarrett
e17600db28 slog and refactor config in appview 2025-10-25 11:00:48 -05:00
Evan Jarrett
35ba417a96 more slog 2025-10-25 10:14:19 -05:00
Evan Jarrett
ba97e19ef3 begin moving to slog 2025-10-25 09:54:26 -05:00
Evan Jarrett
f75d9ceafb big scary refactor. sync enable_bluesky_posts with captain record. implement oauth logout handler. implement crew assignment to hold. this caused a lot of circular dependencies and needed to move functions around in order to fix 2025-10-24 23:51:32 -05:00
Evan Jarrett
2a795ed5cd fix readmes not updating on repository page. attempt to fix not being able to send manifest to hold 2025-10-24 10:24:05 -05:00
Evan Jarrett
dd79b8a0ee actually wrap them in a envvar check 2025-10-23 16:43:58 -05:00
Evan Jarrett
751fa1a3f0 post to bluesky when manifests uploaded. linting fixes 2025-10-23 12:24:04 -05:00
Evan Jarrett
b5a0e19843 try and implement firehose cursor for subscribeRepo 2025-10-22 23:17:51 -05:00
Evan Jarrett
97d1b3cdd5 fix realip 2025-10-22 22:49:42 -05:00
Evan Jarrett
30ea5256f3 try and add cursor=0 to subscribe 2025-10-22 22:20:23 -05:00
Evan Jarrett
aff5d7248c try and implement getsession and app-password 2025-10-22 21:20:40 -05:00
Evan Jarrett
3809bcab25 add bluesky post with status 2025-10-22 18:38:43 -05:00
Evan Jarrett
0e4dd9af20 add middleware logging to xprc requests in hold. add tangled profile creation 2025-10-22 17:06:10 -05:00
Evan Jarrett
3e9a496a5d refactor how annotations are stored. add ability to create bsky profile for hold user 2025-10-22 11:08:13 -05:00
Evan Jarrett
1f72d90726 fix issue with mismatched scopes locally 2025-10-21 10:49:06 -05:00
Evan Jarrett
abf48407cc clean up db migrations and schema. implement a way to fetch readmes for documentation 2025-10-21 10:28:48 -05:00
Evan Jarrett
08fb8abb41 invalidate sessions when scopes change 2025-10-21 09:54:23 -05:00
Evan Jarrett
5d52007104 general bug fixes 2025-10-21 09:21:51 -05:00
Evan Jarrett
4ca90fc3af fix health checks on startup 2025-10-20 12:22:25 -05:00
Evan Jarrett
b155534d1b ui fixes, add ability to warn/hide unreachable manifests from the ui. clean up docs 2025-10-20 11:47:26 -05:00
Evan Jarrett
965e73881b try and support multi-arch manifest types. add more unit tests. add scope for oras blobs for future proofing 2025-10-19 22:26:47 -05:00
Evan Jarrett
7228b532ba bug fixes, code cleanup, tests. trying to get multipart uploads working for the 12th time 2025-10-19 20:55:18 -05:00
Evan Jarrett
1b3a4eea47 refactor hold pkg to separate oci image endpoints 2025-10-19 17:23:46 -05:00
Evan Jarrett
fa931aca3b combine s3 into multipart 2025-10-19 09:14:47 -05:00
Evan Jarrett
6f3c1fc0ba fix auth issues in appview xrpc calls 2025-10-18 12:48:28 -05:00
Evan Jarrett
f4b84ca75f more appview cleanup and test coverage 2025-10-17 21:12:05 -05:00
Evan Jarrett
80b65ee619 fix all the places where did used to be an endpoint 2025-10-17 20:40:04 -05:00
Evan Jarrett
48414be75d lots of unit testing for xrpc endpoints. start pointing appview to the new endpoints. remove legacy api endpoints 2025-10-17 15:41:20 -05:00
Evan Jarrett
003dab263d remove older endpoints add docs for blob migration to xrpc 2025-10-16 21:34:55 -05:00
Evan Jarrett
7cf6da09f9 add test coverage for xrpc endpoints, match spec as close as possible 2025-10-16 20:42:14 -05:00
Evan Jarrett
963786f7cc begin getRepo and subscribeRepos 2025-10-16 20:16:59 -05:00
Evan Jarrett
70e802764b crazy refactor to start using holds embedded pds for crew/captain validation 2025-10-16 00:05:45 -05:00
Evan Jarrett
fade86abaa remove user oauth flow. hold now contains captain record indicating owner 2025-10-15 14:47:53 -05:00
Evan Jarrett
12935490d4 try and create a crew record for the hold owner 2025-10-14 21:41:14 -05:00
Evan Jarrett
c0f1011ed6 actually use indigo atcrypto and k256 keys 2025-10-14 21:28:57 -05:00
Evan Jarrett
18fe0684d3 begin embedded pds with xrpc endpoints and well-known 2025-10-14 20:25:08 -05:00
Evan Jarrett
8c048d6279 implement writes for everyone 2025-10-13 10:40:03 -05:00
Evan Jarrett
9025c89cc6 attempt gorelease and goat builds 2025-10-12 22:09:03 -05:00
Evan Jarrett
75253e256d fix credential helper 2025-10-12 20:15:19 -05:00
Evan Jarrett
3646cf686a fixup credential helper and device auth flow 2025-10-12 15:05:40 -05:00
Evan Jarrett
6950346f7c fix security issue with refresh tokens. on logout force a full re-auth 2025-10-12 13:48:50 -05:00