atlogin
ATProto-to-OIDC login bridge. Fork of anirudh.fi/atlogin, based on apenwarr/atlogin. forked from anirudh.fi/atlogin
Star
Fork
Watch

Commits on main

Kira
ui: keep the countdown wording conversational
committed
Kira
ui: distinguish sign-in title from redirect countdown
committed
Kira
fix: keep dismissed suggestions closed when async results arrive
committed
Kira
ui: simplify sign-in copy and emphasize the selected account
committed
Kira
docs: keep operator setup in README and developer checks in AGENTS
committed
Kira
ui: center the remove icon and leave the account popup closed until focused
committed
Kira
fix: show only saved accounts when the picker query is empty
committed
Kira
feat: confirm remembered sign-ins with a cancellable countdown and account switch
committed
Kira
ui: forget individual recent accounts inline and simplify the login form
committed
Kira
feat: allow operator-supplied CSS on login and session pages
committed
Kira
feat: persist revocable remembered browser sessions with auth freshness controls
committed
Kira
feat: suggest public accounts with recent-first profiles and exact lookup
committed
Kira
feat: remember recent handles and add an accessible account picker
committed
Kira
Document file-based configuration alongside optional env injection
committed
Kira
Allow HTTPS federation redirects from handle form CSP
committed
Kira
Bind OAuth flows per request and add strict OIDC login boundaries
committed
Anirudh Oppiliappan
Clean up ASCII art
committed
Anirudh Oppiliappan
Remove self-serve credential generation; simplify landing page and README
committed
Anirudh Oppiliappan
Treat the server's own hostname as a passthrough domain
committed
Anirudh Oppiliappan
Fix NixOS module: replace mkPackageOption with mkOption
committed
Anirudh Oppiliappan
Add nix flake with devShell and NixOS service module
committed
Anirudh Oppiliappan
Add redirect_uri validation, CSRF protection, and XSS fixes
committed
Avery Pennarun
apenwarr@apenwarr.ca was returning apenwarr.ca@apenwarr.ca, oops.
committed
Avery Pennarun
Fix a little bug in the Login vs Login Anyway button label.
committed
Avery Pennarun
Auto-generated client-id strings weren't quite paranoid enough.
committed
Avery Pennarun
Add a README.
committed
Avery Pennarun
Add support for new atlogin.net domain.
committed
Avery Pennarun
Clearer instructions on how to use the login form.
committed
Avery Pennarun
frontend: Automatic generation of client secrets.
committed
Avery Pennarun
Make atlogin code independent of what domain you host it on.
committed
Avery Pennarun
"Login anyway" button even if verification fails.
committed
Avery Pennarun
Handle logins like at@apenwarr.ca and apenwarr@apenwarr.ca:
committed
Avery Pennarun
Publish the apptest inside the atlogin app.
committed
Avery Pennarun
More tips for how to set up webfinger correctly.
committed
Avery Pennarun
apptest: helpful debugging form for webfinger entries.
committed
Avery Pennarun
Provide a client_name field to the ATProto's login service.
committed
Avery Pennarun
cmd/apptest: a little app that validates the flow in your browser.
committed
Avery Pennarun
First attempt at making it work for tailnets other than @at.apenwarr.ca
committed
Avery Pennarun
Instead of a hardcoded login, forward logins to the ATProto network.
committed
Avery Pennarun
Get the latest ca certs in the docker container.
committed
Avery Pennarun
Add the same LICENSE as tailscale OSS
committed
Avery Pennarun
Add a simple placeholder page at /
committed
Avery Pennarun
Extract fly.io secrets from env variables to a state dir.
committed
Avery Pennarun
Closer to working fly.io deploy.
committed
Avery Pennarun
fly.io config
committed
Avery Pennarun
Support multiple clientids and a -new-client flag to generate a new one.
committed
Avery Pennarun
Basic OIDC server with hardcoded auth (not tested yet).
committed