primal 8192bce301 Add AT Protocol OAuth 2.0 authentication for dashboard ...

- Implement full OAuth 2.0 with PKCE using haileyok/atproto-oauth-golang
- Backend For Frontend (BFF) pattern: tokens stored server-side only
- AES-256-GCM encrypted session cookies
- Auto token refresh when near expiry
- Restrict access to allowed handles (1440.news, wehrv.bsky.social)
- Add genkey utility for generating OAuth configuration
- Generic error messages to prevent handle enumeration
- Server-side logging of failed login attempts for security monitoring

New files:
- oauth.go: OAuth client wrapper and DID/handle resolution
- oauth_session.go: Session management with encrypted cookies
- oauth_middleware.go: RequireAuth middleware for route protection
- oauth_handlers.go: Login, callback, logout, metadata endpoints
- cmd/genkey/main.go: Generate OAuth secrets and JWK keypair
- oauth.env.example: Configuration template

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-30 15:16:51 -05:00

cmd/genkey

Add AT Protocol OAuth 2.0 authentication for dashboard

2026-01-30 15:16:51 -05:00

scripts

v21: Button spacing and deploy script

2026-01-30 13:39:12 -05:00

static

v26: Fix Safari button spacing with explicit min-width

2026-01-30 14:10:56 -05:00

.dockerignore

Add Docker support and refactor data layer

2026-01-26 16:02:05 -05:00

.gitignore

Add AT Protocol OAuth 2.0 authentication for dashboard

2026-01-30 15:16:51 -05:00

api_domains.go

Add AT Protocol OAuth 2.0 authentication for dashboard

2026-01-30 15:16:51 -05:00

api_feeds.go

Refactor large Go files into focused modules

2026-01-29 22:25:02 -05:00

api_publish.go

Refactor large Go files into focused modules

2026-01-29 22:25:02 -05:00

api_search.go

Refactor large Go files into focused modules

2026-01-29 22:25:02 -05:00

CLAUDE.md

Add AT Protocol OAuth 2.0 authentication for dashboard

2026-01-30 15:16:51 -05:00

crawler.go

Tune concurrency settings: 100 workers, 100 batch size, 100 buffer

2026-01-29 23:33:57 -05:00

dashboard.go

Refactor large Go files into focused modules

2026-01-29 22:25:02 -05:00

db.go

Add partial indexes for domain check and crawl loops

2026-01-30 13:25:04 -05:00

docker-compose.yml

Add AT Protocol OAuth 2.0 authentication for dashboard

2026-01-30 15:16:51 -05:00

Dockerfile

Add Docker support and refactor data layer

2026-01-26 16:02:05 -05:00

domain.go

Tune concurrency settings: 100 workers, 100 batch size, 100 buffer

2026-01-29 23:33:57 -05:00

feed_check.go

Refactor large Go files into focused modules

2026-01-29 22:25:02 -05:00

feed.go

Refactor large Go files into focused modules

2026-01-29 22:25:02 -05:00

handle.go

Refactor large Go files into focused modules

2026-01-29 22:25:02 -05:00

html.go

Add JSON Feed support

2026-01-29 13:16:50 -05:00

image.go

Refactor large Go files into focused modules

2026-01-29 22:25:02 -05:00

item.go

Refactor large Go files into focused modules

2026-01-29 22:25:02 -05:00

main.go

Dashboard UI overhaul: inline feed details, TLD filtering, status improvements

2026-01-29 20:51:05 -05:00

oauth_handlers.go

Add AT Protocol OAuth 2.0 authentication for dashboard

2026-01-30 15:16:51 -05:00

oauth_middleware.go

Add AT Protocol OAuth 2.0 authentication for dashboard

2026-01-30 15:16:51 -05:00

oauth_session.go

Add AT Protocol OAuth 2.0 authentication for dashboard

2026-01-30 15:16:51 -05:00

oauth.env.example

Add AT Protocol OAuth 2.0 authentication for dashboard

2026-01-30 15:16:51 -05:00

oauth.go

Add AT Protocol OAuth 2.0 authentication for dashboard

2026-01-30 15:16:51 -05:00

parser.go

Dashboard UI overhaul: inline feed details, TLD filtering, status improvements

2026-01-29 20:51:05 -05:00

pds_auth.go

Refactor large Go files into focused modules

2026-01-29 22:25:02 -05:00

pds_records.go

Revise domain status flow: skip uses takedown, add drop for permanent deletion

2026-01-29 23:18:17 -05:00

pds.env.example

Add PDS credentials env file for service auth

2026-01-26 19:38:36 -05:00

publisher.go

Refactor large Go files into focused modules

2026-01-29 22:25:02 -05:00

routes.go

Add AT Protocol OAuth 2.0 authentication for dashboard

2026-01-30 15:16:51 -05:00

shortener.go

Use url.1440.news for shorter URLs (28 chars vs 32)

2026-01-28 22:52:45 -05:00

templates.go

v26: Fix Safari button spacing with explicit min-width

2026-01-30 14:10:56 -05:00

util.go

Add PebbleDB storage, domain tracking, and web dashboard

2026-01-22 16:29:00 -05:00

Description

No description provided

12 MiB

Languages

Go 98.7%

Shell 0.7%

Dockerfile 0.6%