kira.ws / atlogin
ATProto-to-OIDC login bridge. Fork of anirudh.fi/atlogin, based on apenwarr/atlogin.
Star
Fork 0
Watch

Commits on main

ui: keep the countdown wording conversational main
Kira committed
ui: distinguish sign-in title from redirect countdown
Kira committed
fix: keep dismissed suggestions closed when async results arrive
Kira committed
ui: simplify sign-in copy and emphasize the selected account
Kira committed
docs: keep operator setup in README and developer checks in AGENTS
Kira committed
ui: center the remove icon and leave the account popup closed until focused
Kira committed
fix: show only saved accounts when the picker query is empty
Kira committed
feat: confirm remembered sign-ins with a cancellable countdown and account switch
Kira committed
ui: forget individual recent accounts inline and simplify the login form
Kira committed
feat: allow operator-supplied CSS on login and session pages
Kira committed
feat: persist revocable remembered browser sessions with auth freshness controls
Kira committed
feat: suggest public accounts with recent-first profiles and exact lookup
Kira committed
feat: remember recent handles and add an accessible account picker
Kira committed
Document file-based configuration alongside optional env injection
Kira committed
Allow HTTPS federation redirects from handle form CSP
Kira committed
Bind OAuth flows per request and add strict OIDC login boundaries
Kira committed
Clean up ASCII art
Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>
Anirudh Oppiliappan committed
Remove self-serve credential generation; simplify landing page and README
Anirudh Oppiliappan committed
Treat the server's own hostname as a passthrough domain
Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>
Anirudh Oppiliappan committed
Fix NixOS module: replace mkPackageOption with mkOption
Anirudh Oppiliappan committed
Add nix flake with devShell and NixOS service module
Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>
Anirudh Oppiliappan committed
Add redirect_uri validation, CSRF protection, and XSS fixes
Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>
Anirudh Oppiliappan committed
apenwarr@apenwarr.ca was returning apenwarr.ca@apenwarr.ca, oops.
Avery Pennarun committed
Fix a little bug in the Login vs Login Anyway button label.
Avery Pennarun committed
Auto-generated client-id strings weren't quite paranoid enough.
Avery Pennarun committed
Add a README.
Avery Pennarun committed
Add support for new atlogin.net domain.
Avery Pennarun committed
Clearer instructions on how to use the login form.
Avery Pennarun committed
frontend: Automatic generation of client secrets.
Avery Pennarun committed
Make atlogin code independent of what domain you host it on.
Avery Pennarun committed
"Login anyway" button even if verification fails.
Avery Pennarun committed
Handle logins like at@apenwarr.ca and apenwarr@apenwarr.ca:
Avery Pennarun committed
Publish the apptest inside the atlogin app.
Avery Pennarun committed
More tips for how to set up webfinger correctly.
Avery Pennarun committed
apptest: helpful debugging form for webfinger entries.
Avery Pennarun committed
Provide a client_name field to the ATProto's login service.
Avery Pennarun committed
cmd/apptest: a little app that validates the flow in your browser.
Avery Pennarun committed
First attempt at making it work for tailnets other than @at.apenwarr.ca
Avery Pennarun committed
Instead of a hardcoded login, forward logins to the ATProto network.
Avery Pennarun committed
Get the latest ca certs in the docker container.
Avery Pennarun committed
Add the same LICENSE as tailscale OSS
Avery Pennarun committed
Add a simple placeholder page at /
Avery Pennarun committed
Extract fly.io secrets from env variables to a state dir.
Avery Pennarun committed
Closer to working fly.io deploy.
Avery Pennarun committed
fly.io config
Avery Pennarun committed
Support multiple clientids and a -new-client flag to generate a new one.
Avery Pennarun committed
Basic OIDC server with hardcoded auth (not tested yet).
Avery Pennarun committed