Files

giles 580f551700 Split databases and Redis — prepare infrastructure for per-domain isolation

Redis: per-app DB index (0-5) with shared auth DB 15 for SSO keys;
flushdb replaces flushall so deploys don't wipe cross-app auth state.

Postgres: drop 13 cross-domain FK constraints (migration v2t0p8q9r0),
remove dead ORM relationships, add explicit joins for 4 live ones.
Multi-engine sessions (account + federation) ready for per-domain DBs
via DATABASE_URL_ACCOUNT / DATABASE_URL_FEDERATION env vars.

All URLs initially point to the same appdb — zero behaviour change
until split-databases.sh is run to migrate data to per-domain DBs.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-25 02:20:34 +00:00

Add Phase 5: link-card fragments, oEmbed endpoints, OG meta

2026-02-24 21:44:11 +00:00

config

Monorepo: consolidate 7 repos into one

2026-02-24 19:44:17 +00:00

models

Monorepo: consolidate 7 repos into one

2026-02-24 19:44:17 +00:00

services

Monorepo: consolidate 7 repos into one

2026-02-24 19:44:17 +00:00

templates

Add Phase 5: link-card fragments, oEmbed endpoints, OG meta

2026-02-24 21:44:11 +00:00

__init__.py

Monorepo: consolidate 7 repos into one

2026-02-24 19:44:17 +00:00

.gitignore

Monorepo: consolidate 7 repos into one

2026-02-24 19:44:17 +00:00

app.py

Add cart-mini + auth-menu fragments to all apps, fix like button

2026-02-24 20:26:20 +00:00

Dockerfile

Monorepo: consolidate 7 repos into one

2026-02-24 19:44:17 +00:00

entrypoint.sh

Split databases and Redis — prepare infrastructure for per-domain isolation

2026-02-25 02:20:34 +00:00

path_setup.py

Monorepo: consolidate 7 repos into one

2026-02-24 19:44:17 +00:00

README.md

Update app READMEs for monorepo

2026-02-24 20:13:00 +00:00

README.md

Federation App

OAuth2 authorization server and ActivityPub social hub for the Rose Ash cooperative. Handles user authentication, fediverse federation, and social features (timeline, compose, follow, notifications).

Structure

app.py                  # Application factory (create_base_app + blueprints)
path_setup.py           # Adds project root + app dir to sys.path
entrypoint.sh           # Container entrypoint (optional migrations, Redis flush, start)
bp/
  auth/                 #   Login, magic link, logout, OAuth2 authorize endpoint
  identity/             #   Actor profile management
  social/               #   Timeline, compose, search, follow/unfollow,
                        #   like/boost, notifications, following/followers lists
  fragments/            #   Fragment endpoints
models/                 # Re-export stubs pointing to shared/models/
services/               # register_domain_services() — wires all domains
templates/              # Federation-specific templates (override shared/)

OAuth2 SSO

Federation is the authorization server for all Rose Ash apps:

/oauth/authorize — authorization endpoint (PKCE supported)
Magic link login (passwordless email)
All client apps auto-get /auth/login, /auth/callback, /auth/logout via shared/infrastructure/oauth.py
Per-app first-party session cookies (Safari ITP compatible)

ActivityPub

Per-app actors: each app has its own AP actor (virtual projection of the same keypair)
Actor endpoints: webfinger, actor profile, inbox, outbox, followers
Social features: timeline, compose, search, follow/unfollow, like/boost, notifications
Activities emitted to ap_activities table, processed by EventProcessor
HTTP signatures + IPFS content addressing

Cross-domain communication

services.blog.* — post queries for content federation
services.calendar.* — event queries
services.market.* — product queries
services.cart.* — cart summary for context processor