-1

BUILD.md

··· 99 100 - `SIGNING_KEYS`: The path to the `keys.json` file 101 - `OAUTH_ACTIVE_KEYS`: A comma seperated list of JWK IDs used to actively sign OAuth sessions 102 - - `DESTINATION_KEY`: A JWK ID used to sign destination (used in redirects) values 103 - `HTTP_COOKIE_KEY`: A key used to encrypt HTTP sessions 104 105 You can add these to your .env file or set them directly in your environment.

··· 99 100 - `SIGNING_KEYS`: The path to the `keys.json` file 101 - `OAUTH_ACTIVE_KEYS`: A comma seperated list of JWK IDs used to actively sign OAuth sessions 0 102 - `HTTP_COOKIE_KEY`: A key used to encrypt HTTP sessions 103 104 You can add these to your .env file or set them directly in your environment.

-1

CLAUDE.md

··· 110 - `EXTERNAL_BASE` - Public base URL (e.g., https://smokesignal.events) 111 - `PLC_HOSTNAME` - AT Protocol PLC server hostname 112 - `ADMIN_DIDS` - Comma-separated admin user DIDs 113 - - `DESTINATION_KEY` - Private key for signing authentication redirect tokens 114 115 ### OAuth Backend Configuration 116 - `OAUTH_BACKEND` - OAuth backend to use: "atprotocol" (default) or "aip"

··· 110 - `EXTERNAL_BASE` - Public base URL (e.g., https://smokesignal.events) 111 - `PLC_HOSTNAME` - AT Protocol PLC server hostname 112 - `ADMIN_DIDS` - Comma-separated admin user DIDs 0 113 114 ### OAuth Backend Configuration 115 - `OAUTH_BACKEND` - OAuth backend to use: "atprotocol" (default) or "aip"

+2 -8

src/config.rs

··· 1 - use anyhow::{Context, Result}; 2 - use atproto_identity::key::{KeyData, KeyType, identify_key, to_public}; 3 use axum_extra::extract::cookie::Key; 4 use base64::{Engine as _, engine::general_purpose}; 5 use ordermap::OrderMap; ··· 51 pub admin_dids: AdminDIDs, 52 pub dns_nameservers: DnsNameservers, 53 pub oauth_backend: OAuthBackendConfig, 54 - pub destination_key_data: KeyData, 55 pub enable_task_oauth_requests_cleanup: bool, 56 pub enable_task_identity_refresh: bool, 57 } ··· 107 _ => return Err(ConfigError::InvalidOAuthBackend(oauth_backend_type).into()), 108 }; 109 110 - // Parse destination key for authentication redirects 111 - let destination_key_data = identify_key(&require_env("DESTINATION_KEY")?) 112 - .context("failed to parse DESTINATION_KEY")?; 113 - 114 // Parse optional task enablement flags 115 let enable_task_oauth_requests_cleanup = 116 default_env("ENABLE_TASK_OAUTH_REQUESTS_CLEANUP", "true") ··· 134 admin_dids, 135 dns_nameservers, 136 oauth_backend, 137 - destination_key_data, 138 enable_task_oauth_requests_cleanup, 139 enable_task_identity_refresh, 140 })

··· 1 + use anyhow::Result; 2 + use atproto_identity::key::{KeyType, identify_key, to_public}; 3 use axum_extra::extract::cookie::Key; 4 use base64::{Engine as _, engine::general_purpose}; 5 use ordermap::OrderMap; ··· 51 pub admin_dids: AdminDIDs, 52 pub dns_nameservers: DnsNameservers, 53 pub oauth_backend: OAuthBackendConfig, 0 54 pub enable_task_oauth_requests_cleanup: bool, 55 pub enable_task_identity_refresh: bool, 56 } ··· 106 _ => return Err(ConfigError::InvalidOAuthBackend(oauth_backend_type).into()), 107 }; 108 0 0 0 0 109 // Parse optional task enablement flags 110 let enable_task_oauth_requests_cleanup = 111 default_env("ENABLE_TASK_OAUTH_REQUESTS_CLEANUP", "true") ··· 129 admin_dids, 130 dns_nameservers, 131 oauth_backend, 0 132 enable_task_oauth_requests_cleanup, 133 enable_task_identity_refresh, 134 })

-7

src/config_errors.rs

··· 35 #[error("error-config-4 Signing keys must contain at least one valid key")] 36 EmptySigningKeys, 37 38 - /// Error when the destination key is invalid. 39 - /// 40 - /// This error occurs when the DESTINATION_KEY environment variable 41 - /// does not reference a valid key in the SIGNING_KEYS file. 42 - #[error("error-config-5 DESTINATION_KEY must be a valid key in the SIGNING_KEYS file")] 43 - InvalidDestinationKey, 44 - 45 /// Error when no valid OAuth active keys are found. 46 /// 47 /// This error occurs when the configuration does not include any

··· 35 #[error("error-config-4 Signing keys must contain at least one valid key")] 36 EmptySigningKeys, 37 0 0 0 0 0 0 0 38 /// Error when no valid OAuth active keys are found. 39 /// 40 /// This error occurs when the configuration does not include any