Something went wrong. Try again.
A lexicon-driven AppView for ATProto.
Something went wrong. Try again.
Commits on dev
Trezy 51ff8570 fix: update deps to eliminate security gaps v2.12.0-dev.7 dev
Signed-off-by: Trezy <tre@trezy.com>
fix: update deps to eliminate security gaps v2.12.0-dev.7 dev
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy fe97420c fix: prevent jetstream deletes from being skipped when a lexicon has no custom script v2.12.0-dev.6
Signed-off-by: Trezy <tre@trezy.com>
fix: prevent jetstream deletes from being skipped when a lexicon has no custom script v2.12.0-dev.6
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy 0ed1ce3d fix: support unpadded base64 in bytes fields @happyview/oauth-client-v1.3.1-dev.1 v2.12.0-dev.5
Signed-off-by: Trezy <tre@trezy.com>
fix: support unpadded base64 in bytes fields @happyview/oauth-client-v1.3.1-dev.1 v2.12.0-dev.5
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy d2fdaa28 fix: prevent an error that causes logout to fail under some circumstances
Signed-off-by: Trezy <tre@trezy.com>
fix: prevent an error that causes logout to fail under some circumstances
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy 1e0ef58c fix: verify_signature now raises instead of returning false when it cant check a signature
Signed-off-by: Trezy <tre@trezy.com>
fix: verify_signature now raises instead of returning false when it cant check a signature
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
feat: big scope builder improvements
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
docs: add docs for linked repos
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy 2764f1de fix: give appropriate errors when trying to write to an unauthorized repo
Signed-off-by: Trezy <tre@trezy.com>
fix: give appropriate errors when trying to write to an unauthorized repo
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy 4858d9c0 refactor: optimize deletes on sqlite v2.12.0-dev.4
Signed-off-by: Trezy <tre@trezy.com>
refactor: optimize deletes on sqlite v2.12.0-dev.4
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
chore: the great atproto renamening
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
chore: update git hooks
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy 74f5c56c fix: stop updating `indexed_at` before changes come from the network
Signed-off-by: Trezy <tre@trezy.com>
fix: stop updating `indexed_at` before changes come from the network
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy 87f908bd build: add names to docker compose files to prevent container collisions
Signed-off-by: Trezy <tre@trezy.com>
build: add names to docker compose files to prevent container collisions
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy be455026 fix: inherit_auth no longer stalls background jobs when using SQLite v2.12.0-dev.3
Signed-off-by: Trezy <tre@trezy.com>
fix: inherit_auth no longer stalls background jobs when using SQLite v2.12.0-dev.3
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
feat: add support for linked repos
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy bf4517c6 fix: run cid backfill automatically v2.12.0-dev.2
Signed-off-by: Trezy <tre@trezy.com>
fix: run cid backfill automatically v2.12.0-dev.2
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy ee49db2b fix: prevent proper CBOR encoding from invalidating existing attestations v2.12.0-dev.1
Signed-off-by: Trezy <tre@trezy.com>
fix: prevent proper CBOR encoding from invalidating existing attestations v2.12.0-dev.1
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: use real CIDs for space content
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy 99ee7569 feat: update permissioned spaces to match Dans dev diary 7
Signed-off-by: Trezy <tre@trezy.com>
feat: update permissioned spaces to match Dans dev diary 7
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy 6035c557 fix: add independent logging for jobs v2.11.8 main
Signed-off-by: Trezy <tre@trezy.com>
fix: add independent logging for jobs v2.11.8 main
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy 541c4a9f fix: inherit_auth now properly transfers auth from XRPC script to jobs v2.11.7
Signed-off-by: Trezy <tre@trezy.com>
fix: inherit_auth now properly transfers auth from XRPC script to jobs v2.11.7
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy 84239027 test: prevent collisions from reusing a did v2.11.6
Signed-off-by: Trezy <tre@trezy.com>
test: prevent collisions from reusing a did v2.11.6
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy 4db67abb fix: enforce allowedCollections when creating records in a space
Signed-off-by: Trezy <tre@trezy.com>
fix: enforce allowedCollections when creating records in a space
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: add missing space write APIs
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy b30952ca fix: display all available permissions when creating API keys v2.11.5
Signed-off-by: Trezy <tre@trezy.com>
fix: display all available permissions when creating API keys v2.11.5
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: verify CIDs v2.11.4
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
test: add migrator verification
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: remove user drop from e2e setup
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
docs: add docs for the new Github Actions
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy a0899296 fix: escape metacharacters in `find_blob_author_did`
Signed-off-by: Trezy <tre@trezy.com>
fix: escape metacharacters in `find_blob_author_did`
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: revert to root user in Dockerfile
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy committed
fix: move drop to app user after setup
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: secret comparisons now use constant time
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy 61c03cd2 ci: prevent disk from filling during e2e tests fix/critical-security
Signed-off-by: Trezy <tre@trezy.com>
ci: prevent disk from filling during e2e tests fix/critical-security
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
chore: update _so many_ deps
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: update deps
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
ci: run e2e as root in CI
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy f62ccfd9 fix: revoke member credentials before removing them from a space
Signed-off-by: Trezy <tre@trezy.com>
fix: revoke member credentials before removing them from a space
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: Run Docker image as non-root user
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: add replay protection to dpop proofs
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy 2a11841d fix: better handling for empty TOKEN_ENCRYPTION_KEY
Signed-off-by: Trezy <tre@trezy.com>
fix: better handling for empty TOKEN_ENCRYPTION_KEY
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy 5a7fa4dc fix: prevent error details from leaking to external users
Signed-off-by: Trezy <tre@trezy.com>
fix: prevent error details from leaking to external users
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy 05fe15c7 docs: capture security concerns with record signing
Signed-off-by: Trezy <tre@trezy.com>
docs: capture security concerns with record signing
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy 6dc6dc68 fix: prevent lockouts from failed super admin transfer
Signed-off-by: Trezy <tre@trezy.com>
fix: prevent lockouts from failed super admin transfer
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy f0165089 fix: issue space credentials for `iss`, not for the caller
Signed-off-by: Trezy <tre@trezy.com>
fix: issue space credentials for `iss`, not for the caller
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: implement revocation for space credentials
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy 0d2d8294 fix: prevent `listRepos` from leaking space participant lists
Signed-off-by: Trezy <tre@trezy.com>
fix: prevent `listRepos` from leaking space participant lists
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy c12a9e3c fix: require auth on space notification endpoints
Signed-off-by: Trezy <tre@trezy.com>
fix: require auth on space notification endpoints
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: validate JWT aud in middleware
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy af9a4b18 fix: ensure superadmin-created admin API keys respect scopes
Signed-off-by: Trezy <tre@trezy.com>
fix: ensure superadmin-created admin API keys respect scopes
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: prevent victim record overwrite
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy 19f41990 fix: prevent `read_self` from escalating during access merge
Signed-off-by: Trezy <tre@trezy.com>
fix: prevent `read_self` from escalating during access merge
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: prevent db.raw access to sensitive tables
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: prevent use of default session secret
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy 0ad78af8 fix: prevent CORS from reflecting credentials to arbitrary origins
Signed-off-by: Trezy <tre@trezy.com>
fix: prevent CORS from reflecting credentials to arbitrary origins
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Trezy 1e4b42ac fix: prevent identity spoofing via /oauth/sessions
Signed-off-by: Trezy <tre@trezy.com>
fix: prevent identity spoofing via /oauth/sessions
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
docs: fix docs and blog on mobile
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed