• Joined on 2024-04-09
giles pushed to main at art-dag/celery 2026-01-09 23:22:46 +00:00
5cb8d4ec17 Add storage_backends table for user storage config
giles pushed to main at art-dag/activity-pub 2026-01-09 23:19:34 +00:00
1e3d1bb65e Add user-attachable storage system
giles pushed to main at art-dag/celery 2026-01-09 22:23:08 +00:00
2cfe0f2bd2 Update README with /auth/revoke-user documentation
giles pushed to main at art-dag/activity-pub 2026-01-09 22:22:25 +00:00
64749af3fc Call /auth/revoke-user on L1s during logout
giles pushed to main at art-dag/celery 2026-01-09 22:22:10 +00:00
e485384d2f Add /auth/revoke-user to revoke all tokens for a user
giles pushed to main at art-dag/celery 2026-01-09 18:21:39 +00:00
9a83722273 Document authentication and token revocation in README
giles pushed to main at art-dag/activity-pub 2026-01-09 18:21:14 +00:00
5ebfdac887 Add scoped tokens, L2-side revocation, and security docs
giles pushed to main at art-dag/activity-pub 2026-01-09 18:08:07 +00:00
4351c97ce0 Revoke tokens on attached L1s when user logs out
giles pushed to main at art-dag/celery 2026-01-09 18:07:52 +00:00
cd60016558 Add token revocation for federated logout
giles pushed to main at art-dag/activity-pub 2026-01-09 17:56:26 +00:00
943ccea1a2 Update Web UI and API routes in README
giles pushed to main at art-dag/celery 2026-01-09 17:56:15 +00:00
ce4d38b943 Update Web UI routes in README
giles pushed to main at art-dag/activity-pub 2026-01-09 17:51:18 +00:00
813f6a1d44 Record renderer attachment when L1 verifies token
giles pushed to main at art-dag/activity-pub 2026-01-09 17:43:51 +00:00
5a8ce51c83 Document L1 authorization requirement for token verification
giles pushed to main at art-dag/celery 2026-01-09 17:43:21 +00:00
38e988586f Pass L1_PUBLIC_URL when verifying tokens with L2
giles pushed to main at art-dag/activity-pub 2026-01-09 17:43:10 +00:00
e9df81db40 Require L1 server authorization for token verification
giles pushed to main at art-dag/activity-pub 2026-01-09 17:40:39 +00:00
d244a62c48 Document federated auth - no shared secrets required
giles pushed to main at art-dag/activity-pub 2026-01-09 17:40:16 +00:00
e5d1c93034 Remove cross-subdomain cookie sharing, use lax SameSite
giles pushed to main at art-dag/activity-pub 2026-01-09 17:22:56 +00:00
accb315623 Document L1_SERVERS configuration in README
giles pushed to main at art-dag/activity-pub 2026-01-09 17:18:49 +00:00
28843ea185 Add Renderers page for L1 server management
giles pushed to main at art-dag/activity-pub 2026-01-09 17:06:30 +00:00
990ac44108 Support return_to redirect with token for iOS Safari