Matthieu Sieben
3fa2ee3b6a
Deprecate query & fragment in DPoP proof htu
claim ( #3879 )
...
* Properly validate JWK `htu` claim by enforcing URL without query or fragment
* type fix
* Return DPoP validation result from `authenticateRequest`
* Log clients using invalid "htu" claim in DPoP proof
* review comments
* fix lint
* tidy
* rename dpop result to dpop proof
2025-06-05 14:46:51 +02:00
Matthieu Sieben
a3b24ca77c
Use Form encoded body instead of JSON for OAuth requests ( #3919 )
...
* Parse JSON encoded Authorization Request Parameters
* Use `application/x-www-form-urlencoded` content instead of JSON for OAuth requests
Fixes : #3723
* Pre-process number too
* improved type checking
* Update packages/oauth/oauth-client/src/oauth-server-agent.ts
Co-authored-by: devin ivy <devinivy@gmail.com>
---------
Co-authored-by: devin ivy <devinivy@gmail.com>
2025-06-05 14:15:42 +02:00
Matthieu Sieben
9214bd0170
Improve logging of XRPC errors ( #3699 )
...
* Improve logging of XRPC errors
* strip stack of non internal errors
* Review comments
2025-06-04 17:03:16 +02:00
github-actions[bot]
1919d10a22
Version packages ( #3920 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@atproto/dev-env@0.3.137
@atproto/oauth-provider-ui@0.1.7
@atproto/oauth-provider@0.7.10
@atproto/pds@0.4.143
2025-06-04 13:35:53 +02:00
rafael
b9616f63bf
[bsync] Rename operation endpoint properties ( #3921 )
2025-06-03 14:23:35 -03:00
Matthieu Sieben
71b9dcda96
Show account picker instead of welcome screen when user already signed-in ( #3916 )
...
* Show sign-in screen instead of welcome screen when user already signed-in
2025-06-03 10:10:42 +02:00
Matthieu Sieben
8fa2502e80
Require manual invocation of i18n:extract
( #3918 )
...
Currently, the `lingui extract` command is being run as part of the `build` and `dev` commands. This causes very large diffs in PRs, even when no change are made to `.po` files.
With this change, only running `pnpm i18n` (from the root folder), or `pnpm i18n:extract` (from ui libs that support it) will cause the PO files to be re-computed.
2025-06-02 19:18:33 +02:00
Foysal Ahamed
e2f1dfd3da
✅ Fix flaky team test in ozone suite ( #3917 )
2025-06-02 16:45:02 +02:00
github-actions[bot]
45e8717e19
Version packages ( #3914 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@atproto/api@0.15.12
@atproto/bsky@0.0.154
@atproto/bsync@0.0.20
@atproto/dev-env@0.3.136
@atproto/ozone@0.1.115
@atproto/pds@0.4.142
2025-05-31 16:37:17 -03:00
Eric Bailey
a5cd018bd5
Unify getPostThreadV2
and getPostThreadHiddenV2
responses ( #3912 )
...
Co-authored-by: rafael <rafael@blueskyweb.xyz>
2025-05-31 16:25:25 -03:00
github-actions[bot]
e05b38a727
Version packages ( #3907 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@atproto/api@0.15.11
@atproto/bsky@0.0.153
@atproto/dev-env@0.3.135
@atproto/lex-cli@0.8.2
@atproto/oauth-provider@0.7.9
@atproto/ozone@0.1.114
@atproto/pds@0.4.141
2025-05-29 15:27:40 -03:00
rafael
a978681fde
changeset ( #3910 )
2025-05-29 15:20:29 -03:00
rafael
f6d5a467e7
Fix handling following users in threads v2 ( #3909 )
2025-05-29 13:01:11 -03:00
Samuel Newman
d880665e63
Fixed codegen for arrays of strings with known values ( #3906 )
...
* fix codegen for arrays of strings of knownValue
* changeset
2025-05-29 08:42:56 -07:00
Matthieu Sieben
06bf684a4a
Add max length limit to passwords ( #3900 )
...
* Add max length limit to passwords
* review changes
2025-05-29 14:15:45 +02:00
rafael
cb8bf1838f
app.bsky.unspecced.getPostThreadV2
filtering (#3905 )
2025-05-29 00:32:11 -03:00
Foysal Ahamed
498f3c0738
🐛 Fetch record from pds if appview fails to find it for ozone ( #3892 )
...
* 🐛 Fetch record from pds if appview fails to find it for ozone
* ✨ Resolve and etch from pds without auth
* ♻️ Refactor and cleanup
* ✅ Fix tests
* ✅ Fix tests
* 🚨 Fix linter issue
* 🧹 Cleanup
2025-05-28 21:39:28 +02:00
Jim Calabro
e474623d3f
Add Generic Bsync Proto ( #3887 )
...
Co-authored-by: rafael <rafael@blueskyweb.xyz>
2025-05-28 11:37:04 -03:00
Foysal Ahamed
37b5a4ef29
🐛 Add missing union ref to ozone mod subject ( #3605 )
2025-05-28 10:30:54 +02:00
Foysal Ahamed
fe2a1d12bb
🐛 Add datetime format in lexicon def for createdAt field on grantVerification input ( #3829 )
2025-05-28 10:30:43 +02:00
github-actions[bot]
bae3ef91fc
Version packages ( #3897 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@atproto/api@0.15.10
@atproto/bsky@0.0.152
@atproto/dev-env@0.3.134
@atproto/oauth-client-browser@0.3.19
@atproto/oauth-client-node@0.2.20
@atproto/oauth-client@0.3.19
@atproto/ozone@0.1.113
@atproto/pds@0.4.140
2025-05-27 21:31:22 -05:00
rafael
1dae6c59ab
Add app.bsky.unspecced.getPostThreadV2
( #3825 )
...
Co-authored-by: Eric Bailey <git@esb.lol>
2025-05-27 22:12:12 -03:00
Matthieu Sieben
a03f0b906b
Remove un-necessary validation of alg
on every dpop token creation ( #3877 )
2025-05-27 19:36:33 +02:00
github-actions[bot]
d6c40d6559
Version packages ( #3878 )
@atproto/api@0.15.9
@atproto/bsky@0.0.151
@atproto/dev-env@0.3.133
@atproto/oauth-client-browser@0.3.18
@atproto/oauth-client-node@0.2.19
@atproto/oauth-client@0.3.18
@atproto/oauth-provider-frontend@0.1.5
@atproto/oauth-provider-ui@0.1.6
@atproto/oauth-provider@0.7.8
@atproto/ozone@0.1.112
@atproto/pds@0.4.139
2025-05-26 22:04:18 +03:00
Samuel Newman
79a75bb1ed
Referred likes lexicon changes ( #3882 )
2025-05-26 19:28:59 +03:00
Matthieu Sieben
d1e3e68dd9
changeset
2025-05-26 13:45:09 +02:00
Johannes Andersen
ba293da9fe
feat: password reset discovery and sign-in/up autofill ( #3888 )
...
* feat: password reset discovery and sign-in/up autofill
* chore: update translation files
2025-05-26 13:42:54 +02:00
Matthieu Sieben
e939f8e466
Revert "Refactor route rate limiter builder"
...
This reverts commit da433bd0ca55c044c0e1c804717124a4ca40b791.
2025-05-23 14:51:39 +02:00
Matthieu Sieben
da433bd0ca
Refactor route rate limiter builder
2025-05-23 14:50:52 +02:00
Matthieu Sieben
36d0d370c2
Remove query & fragment from DPoP proof htu
claim
...
Fixes: https://github.com/bluesky-social/atproto/issues/3846
2025-05-21 17:21:26 +02:00
bnewbold
24e20b96c6
lexicons: update searchPosts to indicate it isn't always available publicly ( #3844 )
...
* update searchPost description to clarify it may or may not be public
* codegen
2025-05-20 21:04:40 -07:00
github-actions[bot]
0a2c30dd97
Version packages ( #3872 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@atproto-labs/did-resolver@0.1.13
@atproto-labs/fetch-node@0.1.9
@atproto-labs/fetch@0.2.3
@atproto-labs/handle-resolver-node@0.1.16
@atproto-labs/identity-resolver@0.1.17
@atproto-labs/pipe@0.1.1
@atproto/api@0.15.8
@atproto/bsky@0.0.150
@atproto/dev-env@0.3.132
@atproto/oauth-client-browser-example@0.0.4
@atproto/oauth-client-browser@0.3.17
@atproto/oauth-client-node@0.2.18
@atproto/oauth-client@0.3.17
@atproto/oauth-provider-ui@0.1.5
@atproto/oauth-provider@0.7.7
@atproto/ozone@0.1.111
@atproto/pds@0.4.138
2025-05-20 15:15:10 -07:00
hailey
80f402f366
add reqId
to interactions ( #3869 )
2025-05-20 14:45:19 -07:00
Matthieu Sieben
8318c57187
Allow proxying of getSession
using OAuth session ( #3820 )
...
* Allow proxying of dpop bound requests by using service auth instead, for the `getSession` endpoint.
* Show `getSession` data in example app
* Add scope
* strings
* cleanup
* tidy
* tidy
* Add transition:email scope to example app
* strings
* changeset
* pr comments
2025-05-20 14:37:02 +02:00
Matthieu Sieben
36dbd41551
Fix potential memory leak ( #3819 )
...
* Fix potential memory leak
* pr comment
2025-05-20 14:08:16 +02:00
Matthieu Sieben
43861a452b
Remove dependency on the Public Suffix List ( #3818 )
...
* Remove dependency on the Public Suffix List
* tidy
2025-05-20 14:01:10 +02:00
Matthieu Sieben
5050b6550e
Allow implicit redirects in safe fetch wrap ( #3821 )
2025-05-20 13:36:38 +02:00
Matthieu Sieben
eab7c9fb8a
Use the PDS's hostname as fallback PDS "name" in the auth screen ( #3868 )
2025-05-20 13:32:48 +02:00
github-actions[bot]
f476003709
Version packages ( #3854 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@atproto/api@0.15.7
@atproto/bsky@0.0.149
@atproto/dev-env@0.3.131
@atproto/ozone@0.1.110
@atproto/pds@0.4.137
2025-05-16 17:20:57 -03:00
rafael
86b3153884
Add liveNow to app.bsky.unspecced.getConfig ( #3860 )
2025-05-16 17:01:37 -03:00
devin ivy
efc64ba925
pds: client ip relative to trusted ips ( #3850 )
...
* pds: client ip relative to trusted ips
* changeset
2025-05-13 12:29:13 -07:00
Daiki Mizukami
81fb69ac65
Add @context
for multikey to service DID documents ( #3666 )
2025-05-09 17:36:00 -07:00
github-actions[bot]
251f661c00
Version packages ( #3841 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@atproto/dev-env@0.3.130
@atproto/pds@0.4.136
2025-05-08 21:51:09 -04:00
devin ivy
088d06204f
pds: fix account management migration, partial failure in some cases ( #3840 )
...
* pds: fix account management migration which had a partial failure in some cases
* changeset
2025-05-08 21:45:45 -04:00
bnewbold
fb283edbaf
use legally registered name for company ( #3834 )
2025-05-06 10:43:57 -07:00
github-actions[bot]
b36014dac5
Version packages ( #3803 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@atproto-labs/xrpc-utils@0.0.14
@atproto/api@0.15.6
@atproto/aws@0.2.21
@atproto/bsky@0.0.148
@atproto/bsync@0.0.19
@atproto/common-web@0.4.2
@atproto/common@0.4.11
@atproto/dev-env@0.3.129
@atproto/identity@0.4.8
@atproto/lex-cli@0.8.1
@atproto/lexicon@0.4.11
@atproto/oauth-client-browser-example@0.0.3
@atproto/oauth-client-browser@0.3.16
@atproto/oauth-client-node@0.2.17
@atproto/oauth-client@0.3.16
@atproto/oauth-provider-api@0.1.2
@atproto/oauth-provider-frontend@0.1.4
@atproto/oauth-provider-ui@0.1.4
@atproto/oauth-provider@0.7.6
@atproto/oauth-types@0.2.7
@atproto/ozone@0.1.109
@atproto/pds@0.4.135
@atproto/repo@0.8.1
@atproto/sync@0.1.23
@atproto/xrpc-server@0.7.18
@atproto/xrpc@0.7.0
2025-05-05 17:44:12 -03:00
rafael
3a65b68f7d
Actor status lexicon and views ( #3824 )
2025-05-05 17:35:10 -03:00
rafael
7049117ea2
Fix takendown blocklists application ( #3807 )
2025-04-30 14:03:05 -03:00
Foysal Ahamed
5fd7ef0bf6
🐛 Ignore expired labels when queried from ozone database ( #3786 )
...
* 🐛 Ignore expired labels when queried from ozone database
* 🚨 remove unused imports
2025-04-30 17:58:08 +02:00
rafael
ab4e72084d
Handle resolution improvements ( #3816 )
...
* Handle resolution improvements
On PDS, only perform resolution if appview is not configured.
On appview, never perform resolution, only rely on dataplane.
* changeset
* appview: add lookup_unidirectional to GetDidsByHandles
* appview: plumb lookup_unidirectional for handle lookup
* note
---------
Co-authored-by: Devin Ivy <devinivy@gmail.com>
2025-04-29 08:58:55 -04:00