{"entries":[{"lastCommit":{"author":{"email":"git@boltless.me","name":"Seongmin Lee","when":"2026-01-25T23:30:30.000000+09:00"},"committer":{"email":"noreply@tangled.org","name":"Tangled","when":"2026-04-14T14:29:39.000000+03:00"},"hash":"d8144484c72c00aa0674493fb5afc90dadaa661f","message":"appview: remove `oauth.User` type\n\nThis is not required anymore. `MultiAccountUser` can just hold active\nuser DID.\n\nSigned-off-by: Seongmin Lee \n","tree":"87f46cd76dca630e6797ff422cc2a49e67501221"},"mode":"0100644","name":"accounts.go","size":3506},{"lastCommit":{"author":{"email":"git@boltless.me","name":"Seongmin Lee","when":"2026-01-25T21:07:51.000000+09:00"},"committer":{"email":"noreply@tangled.org","name":"Tangled","when":"2026-04-14T14:29:39.000000+03:00"},"hash":"186efee7c419784ee5c5fabc222ba5ce5427c894","message":"appview/oauth: remove `.Handle` from `oauth.AccountInfo`\n\nWe should resolve handle on render and we are already doing that.\nRemoving the unused field.\n\nSigned-off-by: Seongmin Lee \n","tree":"73001cb42f8c563d1702a5f33c7969af7bedba7e"},"mode":"0100644","name":"accounts_test.go","size":5579},{"lastCommit":{"author":{"email":"git@boltless.me","name":"Seongmin Lee","when":"2026-01-25T20:43:07.000000+09:00"},"committer":{"email":"noreply@tangled.org","name":"Tangled","when":"2026-04-14T14:29:39.000000+03:00"},"hash":"9b3145e00c0155b42d4f3ded70cea723b0f879fb","message":"appview/{oauth,pages,state}: remove unused `AddAccount` session data\n\nidk why was this added. Seems like it isn't used?\n\nSigned-off-by: Seongmin Lee \n","tree":"70d7a3a10c440d28fc6d7f9bd18a69ace76b0005"},"mode":"0100644","name":"consts.go","size":361},{"lastCommit":{"author":{"email":"m@edouard.paris","name":"edouardparis","when":"2026-05-06T16:15:19.000000+02:00"},"committer":{"email":"m@edouard.paris","name":"edouardparis","when":"2026-05-06T17:26:03.000000+02:00"},"hash":"f6c984c65c6ce8ff2766fe80d0d795d1421e1bea","message":"appview/oauth/handler: fix client metadata json file path\n\nAccording to this patch:\nhttps://github.com/bluesky-social/atproto/blob/5f37211cf550b31a693cb174f1fe1d0cfee78294/packages/oauth/oauth-provider-ui/CHANGELOG.md?plain=1#L143\n\nthe client metadata json files must be served exactly at\n/oauth-client-metadata.json in order to not have \nthe PDS authentication page display an ugly json url.\n\nThe file handler is also introduced on the main router because of\nthe wildcard user handle routes.\n\nSigned-off-by: edouardparis \n","tree":"b9aa436865fd6c1d040f5a2c9215e7f11d4c1025"},"mode":"0100644","name":"handler.go","size":17904},{"lastCommit":{"author":{"email":"m@edouard.paris","name":"edouardparis","when":"2026-05-06T16:15:19.000000+02:00"},"committer":{"email":"m@edouard.paris","name":"edouardparis","when":"2026-05-06T17:26:03.000000+02:00"},"hash":"f6c984c65c6ce8ff2766fe80d0d795d1421e1bea","message":"appview/oauth/handler: fix client metadata json file path\n\nAccording to this patch:\nhttps://github.com/bluesky-social/atproto/blob/5f37211cf550b31a693cb174f1fe1d0cfee78294/packages/oauth/oauth-provider-ui/CHANGELOG.md?plain=1#L143\n\nthe client metadata json files must be served exactly at\n/oauth-client-metadata.json in order to not have \nthe PDS authentication page display an ugly json url.\n\nThe file handler is also introduced on the main router because of\nthe wildcard user handle routes.\n\nSigned-off-by: edouardparis \n","tree":"b9aa436865fd6c1d040f5a2c9215e7f11d4c1025"},"mode":"0100644","name":"oauth.go","size":10866},{"lastCommit":{"author":{"email":"me@oppi.li","name":"oppiliappan","when":"2026-04-10T08:13:37.000000+01:00"},"committer":{"email":"noreply@tangled.org","name":"Tangled","when":"2026-04-28T12:53:05.000000+03:00"},"hash":"c21e94a91d743c7049ab31f8542bfc57d65180f2","message":"appview/state: add vouch handlers\n\nSigned-off-by: oppiliappan \n","tree":"800347407983c40dfc70cd82a46b83a95d8486a3"},"mode":"0100644","name":"scopes.go","size":1251},{"lastCommit":{"author":{"email":"me@oppi.li","name":"oppiliappan","when":"2025-10-29T09:39:42.000000Z"},"committer":{"email":"noreply@tangled.sh","name":"Tangled","when":"2025-10-29T12:33:03.000000Z"},"hash":"ee08cd020cb2b1193f5620f997f45fdfca1f6937","message":"appview/oauth: invalidate sessions if inactive for too long\n\nif sessions are inactive for too long, tokens will not be refreshed, and\ncalling authorized xrpc methods will error out with invalid_grant. this\nchangeset does two things:\n\n- tracks the last time a session was active using a new redis pair:\n `oauth:session_meta::`, this is updated every time\n `SaveSession` is called\n- checks for session inactivity every time `GetSession` is called, and\n deletes the session if so\n\nthis way, `GetSession` will never return a session with expired tokens.\n\nSigned-off-by: oppiliappan \n","tree":"89231337772c64eb8f9c04f29e2bfd4f2000d552"},"mode":"0100644","name":"store.go","size":7264}],"lastCommit":{"author":{"email":"m@edouard.paris","name":"edouardparis","when":"2026-05-06T16:15:19.000000+02:00"},"committer":{"email":"m@edouard.paris","name":"edouardparis","when":"2026-05-06T17:26:03.000000+02:00"},"hash":"f6c984c65c6ce8ff2766fe80d0d795d1421e1bea","message":"appview/oauth/handler: fix client metadata json file path\n\nAccording to this patch:\nhttps://github.com/bluesky-social/atproto/blob/5f37211cf550b31a693cb174f1fe1d0cfee78294/packages/oauth/oauth-provider-ui/CHANGELOG.md?plain=1#L143\n\nthe client metadata json files must be served exactly at\n/oauth-client-metadata.json in order to not have \nthe PDS authentication page display an ugly json url.\n\nThe file handler is also introduced on the main router because of\nthe wildcard user handle routes.\n\nSigned-off-by: edouardparis \n","tree":"b9aa436865fd6c1d040f5a2c9215e7f11d4c1025"}}