tranquil-pds
Our Personal Data Server from scratch! forked from tranquil.farm/tranquil-pds
Star
Fork
Watch

Commits on main

Trezy
refactor: clean up property names and document stringy values
committed
Trezy
fix: show the user which scopes will not be granted based on delegation
committed
Trezy
fix: prevent rpc scopes from escaping permission set namespace
committed
Trezy
fix: prevent transient permission set publishers from causing auth refresh failures
committed
Trezy
feat: add handling for more scope failures
committed
Trezy
refactor: use Nsid newtype instead of strings
committed
Trezy
chore: clean up dead code
committed
Trezy
feat: display bundled permission-sets on consent screen
committed
Trezy
fix: use JWT scopes as source-of-truth for access and refresh tokens
committed
Trezy
feat: cache expanded permission sets
committed
Trezy
refactor: use tranquil-scopes instead of bespoke scope handling in delegation auth
committed
Lewis
identity: force did:web signkey check to #atproto verification
committed
nelind
chore: nix flake update
committed
nelind
chore(nix): use fetcherVersion 4 of fetchPnmpDeps
committed
nelind
feat(config): add more default crawlers/relays
committed
Lewis
db: newtype Rkey and final newtype touches for now
committed
Lewis
invite: newtype InviteCode for invite endpoints + store
committed
Lewis
db: Did type for repos and handlers
committed
Lewis
identity: Handle type for stored handles & extract_handle
committed
Lewis
repo: newtype commit cid & rev to CidLink & Tid
committed
Lewis
db: newtype PasswordHash for users & app passwords
committed
Lewis
auth: newtype jti claims, sessions, & store
committed
Lewis
oauth: newtype client, token, device & request ids
committed
Lewis
lexicon: Nsid instead of strs for collections
committed
Lewis
types: did, nsid, & rkey in AtUri::from_parts
committed
Lewis
auth: typed TokenVerifyError from es256k verifier
committed
Lewis
types: sqlx finally behind a feature -> derive Ord & Borrow on newtypes
committed
Alex van de Sandt
fix: enable autocomplete in totp verification
committed
Lewis
sqlx: add missing file
committed
Lewis
dns: fall back to defaults if smth bad
committed
Lewis
session: deletes scope to did, route muts by did
committed
ave
bsky(auth): add grace period to legacy session refresh
committed
Lewis
delegation: preset scopes grant identity & account
committed
Lewis
tranquil-store/repo: repair tolerates corrupt/missing blocks
committed
Lewis
plc: always keep signing key in rotationKeys
committed
Lewis
invite codes: dedup consumption, iron out kinks
committed
isabel
nix: use systemd-nspawn tests
committed
Lewis
build: smaller faster prod container
committed
Lewis
server healthcheck in-bin
committed
nelind
fix(nix): disable the nixpkgs tranquil module when the repo module is used
committed
ave
Move Dockerfile(s) from musl to glibc
committed
ave
fix(cors): Allow User-Agent header in CORS
committed
Jim Severino
Fix(docs): Add correctly TOML-formatted values for first string and array examples
committed
Jim Severino
Fix(docs): Change symlinks to SSL cert files from absolute to relative
committed
Lewis
ripple: anti-entropy gossip sync
committed
Lewis
ripple: fail-closed startup, bind policy
committed
Lewis
ripple: cluster-key oomf authentication
committed
Lewis
ripple: transport backpressure & connect coalesing
committed
Lewis
ripple: transport from tcp to quic
committed
nelind
fix(api): dont verify signature or DID during importRepo
committed
nelind
fix(docs): i forgor auto links need absolute URIs ... lets use normal links instead
committed
nelind
fix(nix): provide a jemalloc build in the dev shell
committed
Lewis
server: serve xrpc over http/3
committed
Lewis
repo: the pg side of MST structural repair
committed
nelind
feat(nix): pratice what i preach. expose lib.mkPackages
committed
ave
feat(auth): accept totp/backup codes in legacy login createSession
committed
ave
refactor(auth): unify short-code generation onto util::generate_token_code
committed
ave
chore(auth): align at+jwt/refresh+jwt expiry with reference PDS
committed
ave
add ave.zone to contributors list in README
committed
nelind
chore(auth): also mention that atproto spec requiers typ be "JWT" for inter-service tokens
committed