core/appview/oauth/ at loom · evan.jarrett.net/core · Tangled

evan.jarrett.net / core

0

Monorepo for Tangled — https://tangled.org

0

core / appview / oauth /

at loom 4 files

oppiliappan orm: extract orm package from appview 7mo ago

orm: extract orm package from appview includes query and migration helpers Signed-off-by: oppiliappan <me@oppi.li>

7 months ago

orm: extract orm package from appview includes query and migration helpers Signed-off-by: oppiliappan <me@oppi.li>

7 months ago

appview/oauth: allow customizing client timeouts in xrpc reqs Signed-off-by: oppiliappan <me@oppi.li>

7 months ago

appview/oauth: invalidate sessions if inactive for too long if sessions are inactive for too long, tokens will not be refreshed, and calling authorized xrpc methods will error out with invalid_grant. this changeset does two things: - tracks the last time a session was active using a new redis pair: `oauth:session_meta:<did>:<session>`, this is updated every time `SaveSession` is called - checks for session inactivity every time `GetSession` is called, and deletes the session if so this way, `GetSession` will never return a session with expired tokens. Signed-off-by: oppiliappan <me@oppi.li>

9 months ago