Code

🚧 OAuth2 - Authorization Server#2482

Code

Merged

devinivy merged 103 commits intomainbluesky-social/atproto:mainfrom feat-oauth-serverbluesky-social/atproto:feat-oauth-serverCopy head branch name to clipboardJun 18, 2024

+26,273-629

Commits

Commits on May 24, 2024

• chore(deps): update zod

  matthieusieben

  committed
  8e8828b

  Copy full SHA for 8e8828b

• chore(deps): update pino to match entryway version

  matthieusieben

  committed
  e822a6c

  Copy full SHA for e822a6c

• chore(tsconfig): remove truncation of types through noErrorTruncation

  matthieusieben

  committed
  147c98c

  Copy full SHA for 147c98c

• add support for DPoP token type when logging

  matthieusieben

  committed
  09e5d2a

  Copy full SHA for 09e5d2a

• fix(bsky): JSON.parse does not return value of type JSON

  matthieusieben

  committed
  17b0c50

  Copy full SHA for 17b0c50

• fix(pds): add res property to ReqCtx

  matthieusieben

  committed
  2ca3836

  Copy full SHA for 2ca3836

• fix(pds): properly type getPreferences return value

  matthieusieben

  committed
  4c49730

  Copy full SHA for 4c49730

• chore(tsconfig): disable noFallthroughCasesInSwitch

  matthieusieben

  committed
  3548947

  Copy full SHA for 3548947

• refactor(pds): move tracer config in own file

  matthieusieben

  committed
  bcc2606

  Copy full SHA for bcc2606

• feat(dev-env): start with "pnpm dev"

  matthieusieben

  committed
  3acc8fd

  Copy full SHA for 3acc8fd

• feat(oauth): add oauth provider & client libs

  matthieusieben

  committed
  3159a10

  Copy full SHA for 3159a10

• feat(pds): add oauth provider

  matthieusieben

  committed
  1abe6d0

  Copy full SHA for 1abe6d0

• chore: changeset

  matthieusieben

  committed
  9948fdc

  Copy full SHA for 9948fdc

Commits on May 27, 2024

• feat: various fixes and improvements

  matthieusieben

  committed
  03c3e33

  Copy full SHA for 03c3e33

Commits on Jun 3, 2024

• chore(deps): update better-sqlite3 to version 10.0.0 for node 22 compatibility

  matthieusieben

  committed
  286a364

  Copy full SHA for 286a364

• chore(deps): drop unused tslib

  matthieusieben

  committed
  3fadcf1

  Copy full SHA for 3fadcf1

• fix(did): normalize service IDs before looking for duplicates

  matthieusieben

  committed
  47d6bc0

  Copy full SHA for 47d6bc0

• fix(did): avoid minor type casting

  matthieusieben

  committed
  ff08414

  Copy full SHA for ff08414

• fix(did): improve argument validation

  matthieusieben

  committed
  ec53bbd

  Copy full SHA for ec53bbd

• fix(fetch): explicit use of negation around number comparison

  matthieusieben

  committed
  30df230

  Copy full SHA for 30df230

• fix(oauth-provider): improve argument validation

  matthieusieben

  committed
  c20acd8

  Copy full SHA for c20acd8

• feat(did): add ATPROTO specific "isAtprotoDidWeb" method

  matthieusieben

  committed
  f06c424

  Copy full SHA for f06c424

• feat(rollup-plugin-bundle-manifest): add readme

  matthieusieben

  committed
  1035f71

  Copy full SHA for 1035f71

• feat(lint): add eqeqeq rule (only allow == and != with null)

  matthieusieben

  committed
  c17a1ab

  Copy full SHA for c17a1ab

• fix(oauth-client-browser): typo in gitignore

  matthieusieben

  committed
  38cf674

  Copy full SHA for 38cf674

• fix(oauth-provider): properly name error class file

  matthieusieben

  committed
  4d79f12

  Copy full SHA for 4d79f12

• fix(oauth-provider): remove un-necessary useMemo

  matthieusieben

  committed
  42fa5f6

  Copy full SHA for 42fa5f6

• fix(did-resolver): properly build did:web document url

  matthieusieben

  committed
  dadc431

  Copy full SHA for dadc431

• fix(did-resolver): remove unused types

  matthieusieben

  committed
  73183fb

  Copy full SHA for 73183fb

• fix(fetch): remove unused utils

  matthieusieben

  committed
  137c342

  Copy full SHA for 137c342

• fix(pds): remove unused script and dependency

  matthieusieben

  committed
  1cef720

  Copy full SHA for 1cef720

• fix(oauth-provider): simplify isSubPath util

  matthieusieben

  committed
  6fdb8c3

  Copy full SHA for 6fdb8c3

• fix(oauth-provider): add InvalidRedirectUriError static constructor

  matthieusieben

  committed
  2e88659

  Copy full SHA for 2e88659

• fix(jwk): improve JWT validation to provide better error messages and distinguish between signed and unsigned tokens

  matthieusieben

  committed
  51955be

  Copy full SHA for 51955be

• fix(pds): use "debug" log level for fetch method

  matthieusieben

  committed
  e8cca60

  Copy full SHA for e8cca60

• fix(pds): allow access tokens to contain an unknown "typ" claim (with the exception of "dpop+jwt")

  matthieusieben

  committed
  5b5e754

  Copy full SHA for 5b5e754

• fix(jwk): remove un-necessary code

  matthieusieben

  committed
  7639480

  Copy full SHA for 7639480

• fix(pds): account for whitespace chars when checking JSON

  matthieusieben

  committed
  2876eff

  Copy full SHA for 2876eff

• fix(pds): remove oauth specific config

  matthieusieben

  committed
  52bf6e9

  Copy full SHA for 52bf6e9

• fix(pds): run all write queries through transaction or executeWithRetry

  Show description for a17f640
  matthieusieben

  committed
  a17f640

  Copy full SHA for a17f640

• fix(oauth-provider:time): simplify constantTime util

  matthieusieben

  committed
  e150d68

  Copy full SHA for e150d68

• fix(pds): rename disableSsrf into disableSsrfProtection

  matthieusieben

  committed
  1976673

  Copy full SHA for 1976673

• fix(oauth-client-react-native): remove incomplete package

  matthieusieben

  committed
  19d8e0c

  Copy full SHA for 19d8e0c

• Merge branch 'main' into feat-oauth-server

  matthieusieben

  committed
  655db14

  Copy full SHA for 655db14

Commits on Jun 4, 2024

• refactor(pds): remove status & active from ActorAccount

  matthieusieben

  committed
  8700c56

  Copy full SHA for 8700c56

• fix(pds): invalidate all oauth tokens on takedown

  matthieusieben

  committed
  821d781

  Copy full SHA for 821d781

• fix(oauth-provider): enforce token expiry

  matthieusieben

  committed
  b9e4091

  Copy full SHA for b9e4091

• fix(pds): properly support deactivated accounts

  matthieusieben

  committed
  b185bfb

  Copy full SHA for b185bfb

• perf(pds:db): allow transaction function to be sync

  matthieusieben

  committed
  a90b9d4

  Copy full SHA for a90b9d4

• refactor(psq:account-manager): expose only query builders & data transformations utils from helpers

  matthieusieben

  committed
  0802dcf

  Copy full SHA for 0802dcf

• fix(oauth-provider): imports from self

  matthieusieben

  committed
  555ee72

  Copy full SHA for 555ee72

• fix(ci): add nested packages to build artifacts

  matthieusieben

  committed
  cb244d8

  Copy full SHA for cb244d8

• style(fetch): rename TODO into @todo

  matthieusieben

  committed
  8ca227b

  Copy full SHA for 8ca227b

• style(rollup-plugin-bundle-manifest): remove "TODO" from comment

  matthieusieben

  committed
  1a44f8a

  Copy full SHA for 1a44f8a

• style(oauth-client): rename TODO into @todo

  matthieusieben

  committed
  a1ba787

  Copy full SHA for a1ba787

• style(oauth-provider): rename TODO into @todo

  matthieusieben

  committed
  2f76c2d

  Copy full SHA for 2f76c2d

• refactor(oauth-client): remove "OAuth" prefix from types

  matthieusieben

  committed
  6e997de

  Copy full SHA for 6e997de

• fix(oauth-client-browser): better type SessionListener

  matthieusieben

  committed
  32d5988

  Copy full SHA for 32d5988

• style(oauth): rename TODO into @todo

  matthieusieben

  committed
  88bfd51

  Copy full SHA for 88bfd51

• fix(oauth-provider): enforce provider max session age

  matthieusieben

  committed
  3d3e86a

  Copy full SHA for 3d3e86a

• fix(oauth-provider): check authentication parameters against all client metadata

  matthieusieben

  committed
  289ca9c

  Copy full SHA for 289ca9c

• fix(api): tests

  matthieusieben

  committed
  fd1cf67

  Copy full SHA for fd1cf67

• fix(pds): remove .js from imports for tests

  matthieusieben

  committed
  90bde69

  Copy full SHA for 90bde69

• fix(pds): change account status to match tests

  matthieusieben

  committed
  34b7a50

  Copy full SHA for 34b7a50

• Merge branch 'main' into feat-oauth-server

  matthieusieben

  committed
  df01c6d

  Copy full SHA for df01c6d

• chore(deps): make all packages depend on the same zod version

  matthieusieben

  committed
  cc7e24b

  Copy full SHA for cc7e24b

• fix(common-web): remove un-necessary binding of Checkable to "zod"

  matthieusieben

  committed
  0110293

  Copy full SHA for 0110293

• refactor(jwk): infer jwt schema from refinement definition

  matthieusieben

  committed
  b01bd05

  Copy full SHA for b01bd05

Commits on Jun 5, 2024

• Merge remote-tracking branch 'origin/main' into feat-oauth-server

  matthieusieben

  committed
  0c4b14a

  Copy full SHA for 0c4b14a

• fix(handle-resolver): allow resolution errors to propagate

  Show description for 235cfcf
  matthieusieben

  committed
  235cfcf

  Copy full SHA for 235cfcf

• fix(did): service endpoint arrays must contain "one or more" element

  matthieusieben

  committed
  6628b39

  Copy full SHA for 6628b39

• refactor(pipe): simplify implementation

  matthieusieben

  committed
  28d8084

  Copy full SHA for 28d8084

• fix(pds): add missing DB indexes

  matthieusieben

  committed
  976d35a

  Copy full SHA for 976d35a

Commits on Jun 6, 2024

• feat(oauth): Resolve Authorization Server URI through Protected Resource Metadata

  matthieusieben

  committed
  b10531a

  Copy full SHA for b10531a

Commits on Jun 7, 2024

• style:(oauth-client): import order

  matthieusieben

  committed
  ed717db

  Copy full SHA for ed717db

Commits on Jun 10, 2024

• docs(oauth-provider:redirect-uri): add reference url

  matthieusieben

  committed
  b546453

  Copy full SHA for b546453

• feat(oauth): implement "OAuth Client ID Metadata Document" from draft-parecki-oauth-client-id-metadata-document-latest internet draft

  matthieusieben

  committed
  13bfca4

  Copy full SHA for 13bfca4

• Merge remote-tracking branch 'origin/main' into feat-oauth-server

  matthieusieben

  committed
  02430a9

  Copy full SHA for 02430a9

• feat(oauth-client): backport changes from feat-oauth-client

  matthieusieben

  committed
  aa4d40c

  Copy full SHA for aa4d40c

• docs(simple-store): improve comments

  matthieusieben

  committed
  16bfc0f

  Copy full SHA for 16bfc0f

• feat(lexicons): add iterable capabilities

  matthieusieben

  committed
  4fde5a3

  Copy full SHA for 4fde5a3

• fix(pds): type error in dev mode

  matthieusieben

  committed
  ea24e2c

  Copy full SHA for ea24e2c

• feat(oauth-provider): improved error reporting

  matthieusieben

  committed
  3c5e128

  Copy full SHA for 3c5e128

• fix(oauth-types): allow insecure issuer during tests

  matthieusieben

  committed
  3d0b8a0

  Copy full SHA for 3d0b8a0

• fix(xrpc-server): allow upload of empty files

  matthieusieben

  committed
  9d24e2b

  Copy full SHA for 9d24e2b

• fix: lint

  matthieusieben

  committed
  f2c1182

  Copy full SHA for f2c1182

Commits on Jun 12, 2024

• feat(fetch): keep request reference in errors

  Show description for 66ba82a
  matthieusieben

  committed
  66ba82a

  Copy full SHA for 66ba82a

• fix(pds): allow more than one session token per user

  matthieusieben

  committed
  f3e2103

  Copy full SHA for f3e2103

• feat(ozone): improve env validation error messages

  matthieusieben

  committed
  7b7fa74

  Copy full SHA for 7b7fa74

• fix(oauth-client): account for DPoP when checking for invalid_token errors

  matthieusieben

  committed
  50a0e93

  Copy full SHA for 50a0e93

• fixup! feat(fetch): keep request reference in errors feat(fetch): utilities improvements

  matthieusieben

  committed
  b31d415

  Copy full SHA for b31d415

• fixup! feat(fetch): keep request reference in errors feat(fetch): utilities improvements

  matthieusieben

  committed
  e555003

  Copy full SHA for e555003

• fix(oauth): various validation fixes

  Show description for af23a54
  matthieusieben

  committed
  af23a54

  Copy full SHA for af23a54

• Merge branch 'main' into feat-oauth-server

  matthieusieben

  committed
  56ff0ce

  Copy full SHA for 56ff0ce

Commits on Jun 15, 2024

• Merge branch 'main' into feat-oauth-server

  matthieusieben

  committed
  6f0a72b

  Copy full SHA for 6f0a72b

• feat(dev-env): fix ozone port number

  matthieusieben

  committed
  ec5ce9d

  Copy full SHA for ec5ce9d

• fix(fetch-node): prevent fetch against invalid domain names

  matthieusieben

  committed
  598c4d0

  Copy full SHA for 598c4d0

• fix(oauth-provider): add typings for psl dep

  matthieusieben

  committed
  73ac072

  Copy full SHA for 73ac072

• feat(jwk): make type def compatible with TS 4.x

  matthieusieben

  committed
  2a8870e

  Copy full SHA for 2a8870e

• fix(oauth): fixed various spec compliance

  Show description for 85e7845
  matthieusieben

  committed
  85e7845

  Copy full SHA for 85e7845

• fix(oauth): lint

  matthieusieben

  committed
  5b7dc29

  Copy full SHA for 5b7dc29

Commits on Jun 18, 2024

• pds: switch changeset to patch, no breaking changes

  devinivy

  committed
  f9c72b2

  Copy full SHA for f9c72b2

• changeset and config for new oauth deps

  devinivy

  committed
  f3b324f

  Copy full SHA for f3b324f