src/lib · indiko · Tangled

my own indieAuth provider! indiko.dunkirk.sh/docs

indieauth oauth2-server

1 folder · 11 files

· feat: let people choose to stay signed in to IndieAuth apps · 1w ago

feat: let people choose to stay signed in to IndieAuth apps

feat: serve agent-readable site metadata and public content pages

feat: fix refresh token expiry

fix: close login, session, and LDAP gaps found in security review

content-pages.ts

feat: serve agent-readable site metadata and public content pages

docs-renderer.ts

feat: serve agent-readable site metadata and public content pages

feat: serve agent-readable site metadata and public content pages

fix: close login, session, and LDAP gaps found in security review

feat: redesign admin pages

security-headers.ts

security: close CSRF gaps, rate limit bypasses, and SSRF IPv6 holes

fix: let signed-in pages recover from a stale CSRF cookie

ssrf-safe-fetch.ts

fix: make app revocation real and bound untrusted input