mirrors/tranquil-pds
1
0
Fork 0
mirror of https://tangled.org/tranquil.farm/tranquil-pds synced 2026-07-19 22:42:25 +00:00
Code Issues Packages Projects Releases Wiki Activity
437 Commits 8 Branches 26 Tags
28f2e04019648882ed7b2be4ca4adb4a4e7f104f
Commit Graph

193 Commits

Author SHA1 Message Date
Lewis 28f2e04019 plc: always keep signing key in rotationKeys 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-06-26 18:52:12 +03:00
Lewis 39a2e40b35 invite codes: dedup consumption, iron out kinks 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-06-26 13:28:49 +03:00
Lewis 1b489776c5 server healthcheck in-bin 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-06-18 09:34:36 +03:00
ave 6838976969 fix(cors): Allow User-Agent header in CORS 2026-06-15 13:27:31 +03:00
Lewis e13ba7f4c7 ripple: anti-entropy gossip sync 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-06-14 18:46:41 +03:00
Lewis a3f729c3cd ripple: fail-closed startup, bind policy 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-06-14 18:46:41 +03:00
Lewis 637b817a33 ripple: cluster-key oomf authentication 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-06-14 18:46:41 +03:00
Lewis 562f970bc3 ripple: transport backpressure & connect coalesing 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-06-14 18:46:41 +03:00
Lewis 06fd6a1ce9 ripple: transport from tcp to quic 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-06-14 18:46:41 +03:00
nelind 3b07cdfb24 fix(api): dont verify signature or DID during importRepo 2026-06-13 23:33:57 +03:00
Lewis 5bbe2146ff server: serve xrpc over http/3 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-06-10 13:18:49 +03:00
Lewis b009ccdaf2 repo: the pg side of MST structural repair 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-06-08 16:58:51 +03:00
ave a231d7da29 feat(auth): accept totp/backup codes in legacy login createSession 2026-06-06 10:42:24 +03:00
ave 63d84d38fb refactor(auth): unify short-code generation onto util::generate_token_code 
Collapse the three ad-hoc short-code generators into one canonical generator
plus a shared normalizer:

- util::generate_token_code now emits the uppercase base32 XXXXX-XXXXX display
  form; new util::normalize_token_code canonicalizes user input (uppercase,
  strip hyphen/whitespace).
- email_token and legacy_2fa now generate via util, store the normalized form,
  and compare normalized input. Their private generate_short_token/generate_code
  (and BASE32_CHARS/CODE_LENGTH) are removed.
- PLC (request/sign) and password reset inline util::generate_token_code,
  persist the normalized form, email the display form, and normalize input
  before lookup. The generate_plc_token/generate_reset_code wrappers are removed.

Behavior changes: legacy login-2FA codes go from 8-digit numeric to XXXXX-XXXXX;
PLC and password-reset codes go from lowercase to uppercase. All four code types
are now accepted case-/hyphen-insensitively. OAuth web-login 2FA, account
deletion, and the long verification_token blobs are intentionally untouched.

Tests: add util normalize tests + email_token/legacy_2fa case/hyphen tests;
update integration tests to expect the canonical stored form and the new
emailed format.
 2026-06-06 09:36:08 +03:00
ave fe9b88141c chore(auth): align at+jwt/refresh+jwt expiry with reference PDS 2026-06-06 01:43:46 +03:00
nelind cd7e01100e chore(auth): also mention that atproto spec requiers typ be "JWT" for inter-service tokens 2026-06-05 12:49:25 +02:00
ave 7c248be153 fix(auth): emit uppercase "JWT" typ in service-auth header 
RFC 7519 §5.1 recommends the uppercase "JWT" typ for compatibility with
legacy implementations, and it matches the reference @atproto/pds. Parsing
already lowercases, so existing lowercase "jwt" tokens still verify.
 2026-06-05 13:34:43 +03:00
ave 91999819c6 fix(proxy): limit audience of getFeed service-auth to the feed generator 2026-06-04 22:39:14 +03:00
Tyler 8e6ace2fe2 fix: derive lexicon DNS authority from all-but-last NSID segment 
Permission-set expansion resolved the lexicon's DNS authority using a
fixed `parts[..2]`, which only works for three-segment NSIDs. For a
four-segment NSID such as community.lexicon.bookmarks.authManageBookmarks
this dropped a segment and queried _lexicon.lexicon.community instead of
_lexicon.bookmarks.lexicon.community, failing with "DNS resolution
failed: ... no record found".

The authority is every NSID segment except the last (the name),
reversed. Use parts[..parts.len() - 1] to match the spec and the
existing extract_namespace_authority helper, and update the DNS
authority test with three/four-segment and bookmarks regression cases.
 2026-06-04 01:28:13 +03:00
Lewis 3018a20843 fix(plc): allow arbitrary services to sign 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-06-03 11:23:51 +03:00
Lewis 37fc06fb39 fix(store): unblock eventlog sync&freeze when writer dies 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-06-02 17:29:21 +03:00
Lewis 728a8c4d3b test(store): cross-store, firehose, read-validation coverage w/ faults 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-06-02 17:29:21 +03:00
Lewis 3d49e99cc3 test(store): generic consistency checker, gauntlet fault/read 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-06-02 17:29:21 +03:00
Lewis 7e823673ca test(store): untested metastore, eventlog, & archival stuff 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-06-02 17:29:21 +03:00
Lewis 320933598c fix(auth): error num 401 for oauth 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-06-01 19:38:45 +03:00
Lewis 500dc2e0e6 test(store): gauntlet sweep configs for time-travel & fsync repro 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-06-01 19:01:04 +03:00
Lewis a220611a8b test(store): D gauntlet faults, crash-loss oracley, recoverable scenarios 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-06-01 19:01:04 +03:00
Lewis ca7a4b4b73 fix(store): recover eventlog lastseq from tail not sidecar 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-06-01 19:01:04 +03:00
Lewis 8ff02610e4 feat(store): inline-commit mode, committed-extent recovery, failsafe verify&rollback 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-06-01 19:01:04 +03:00
Lewis 22f82489d5 test(pds): e2e & durability coverage for MST self-heal 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-05-31 21:11:36 +03:00
Lewis cee483e358 feat(pds): selfhealing repo writing by detecting corruption & retrying 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-05-31 21:11:36 +03:00
Lewis 7f8e858137 test(store): gauntlet MST-repairable & misdirected-write scenario 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-05-31 21:11:36 +03:00
Lewis 44d73dac58 feat(store): rebuild & rewrite missing/corrupt MST blocks 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-05-31 21:11:36 +03:00
Lewis b8cae15c12 feat(store): detect foreign&corrupt blocks on read & preserve blocks thru recovery 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-05-31 21:11:36 +03:00
Lewis 9b58961bba feat(repo): missing $type? invent one 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-05-31 13:02:11 +03:00
Lewis 31ee12ecd3 fix(store): torn hint-file tail should be recoverable on reopen 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-05-31 11:37:21 +03:00
Lewis 4015217a2e feat(store): Clock trait for DST 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-05-30 23:46:22 +03:00
Lewis e9dc57d6f4 fix(firehose): lost events if seq commits out of order 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-05-30 21:10:38 +03:00
Lewis 7a54ccf6a3 fix(tranquil-config): reject unknown keys in TlsConfig, bump rust 1.96 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-05-29 09:39:14 +03:00
isabel 28aa7ab7fc feat!(tranquil-config): error on unknown keys 
an attempt to make it so that fixes like
fc6063dba8 never have to occur again
 2026-05-27 20:13:58 +03:00
Lewis a7052e878c feat: tranquil's own TLS handling 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-05-27 13:54:33 +03:00
Lewis 96c8375706 fix(test): oauth token eviction should be agnostic 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-05-25 16:17:10 +03:00
Lewis 86c5995568 fix(config): signal gate is useless since needs admin work to activate anyway 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-05-24 22:50:14 +03:00
Lewis 036c317fd6 fix(migrate): oauth refreshing, embedded db first invite code 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-05-24 19:28:57 +03:00
Lewis 4d2c7d4723 feat(auth): verification-gate override, inbound-migration bypass, store deleter improvement 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-05-23 23:02:43 +03:00
karitham.dev a3bd7c59ad feat(locales): add french locale, fix missing error keys, remove dead keys 
Adds french locale registration and translation file. Fixes 4 missing error keys that were referenced in code but absent from all locale files. Removes 2 unreferenced keys from `register.validation` that duplicated `registerPasskey.errors`.

I *think* that's all that's needed for french locale? Couldn't find anything else required to make it work!
 2026-05-20 22:20:20 +03:00
Trezy 76f22b801b chore: allow native certs during local dev 
Allows Traefik certs to be trusted by Tranquil.

Signed-off-by: Trezy <tre@trezy.com>
 2026-05-19 19:46:58 +03:00
Lewis bdaf510898 build: bump workspace to 0.6.2 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-05-17 12:32:05 +03:00
Lewis deb2502112 feat(pds): phantom-file self-heal goes in scheduled compaction + reachability walk 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-05-17 12:32:05 +03:00
Lewis 1815ddba9f feat(gauntlet): index-backed/hint-backed/readable invariants, ExternalCorruption scenario 
Lewis: May this revision serve well! <lu5a@proton.me>
 2026-05-17 12:32:05 +03:00