test · indiko · Tangled

my own indieAuth provider! indiko.dunkirk.sh/docs

indieauth oauth2-server

1 folder · 22 files

· feat: let people choose to stay signed in to IndieAuth apps · 1w ago

feat: split up the mega file

feat: serve agent-readable site metadata and public content pages

auth-ldap.test.ts

fix: close login, session, and LDAP gaps found in security review

fix: close login, session, and LDAP gaps found in security review

authorize.test.ts

fix: close login, session, and LDAP gaps found in security review

cleanup.test.ts

chore: run biome check --write

client-ip.test.ts

fix: close login, session, and LDAP gaps found in security review

client-metadata.test.ts

feat: tighten client id metadata document (CIMD) compliance

feat: allow public clients to register without a secret

indieauth-rocks.test.ts

feat: let people choose to stay signed in to IndieAuth apps

fix: make app revocation real and bound untrusted input

oidc-keys.test.ts

test: cover oidc key generation on a fresh install

feat: link the full client URL on the consent screen

security: fix session, LDAP, and rate limiting gaps

rate-limit.test.ts

fix: close login, session, and LDAP gaps found in security review

register.test.ts

feat: allow public clients to register without a secret

revocation.test.ts

fix: make app revocation real and bound untrusted input

secrets.test.ts

feat: use timing safe comparison

session.test.ts

fix: let signed-in pages recover from a stale CSRF cookie

feat: serve agent-readable site metadata and public content pages

fix: make app revocation real and bound untrusted input

feat: redesign admin pages

feat: split up the mega file