It should be impossible to call authenticated endpoints in unauthed contexts, ya know?
frontend/deno.lock
frontend/deno.lock
This file has not been changed.
frontend/src/components/AuthenticatedRoute.svelte
frontend/src/components/AuthenticatedRoute.svelte
This file has not been changed.
frontend/src/lib/api.ts
frontend/src/lib/api.ts
This file has not been changed.
frontend/src/lib/auth.svelte.ts
frontend/src/lib/auth.svelte.ts
This file has not been changed.
frontend/src/lib/authenticated-client.ts
frontend/src/lib/authenticated-client.ts
This file has not been changed.
frontend/src/lib/migration/atproto-client.ts
frontend/src/lib/migration/atproto-client.ts
This file has not been changed.
frontend/src/lib/migration/flow.svelte.ts
frontend/src/lib/migration/flow.svelte.ts
This file has not been changed.
frontend/src/lib/router.svelte.ts
frontend/src/lib/router.svelte.ts
This file has not been changed.
frontend/src/lib/types/api.ts
frontend/src/lib/types/api.ts
This file has not been changed.
frontend/src/lib/types/branded.ts
frontend/src/lib/types/branded.ts
This file has not been changed.
frontend/src/lib/types/totp-state.ts
frontend/src/lib/types/totp-state.ts
This file has not been changed.
frontend/src/routes/ActAs.svelte
frontend/src/routes/ActAs.svelte
This file has not been changed.
frontend/src/routes/Controllers.svelte
frontend/src/routes/Controllers.svelte
This file has not been changed.
frontend/src/routes/Dashboard.svelte
frontend/src/routes/Dashboard.svelte
This file has not been changed.
frontend/src/routes/DelegationAudit.svelte
frontend/src/routes/DelegationAudit.svelte
This file has not been changed.
frontend/src/routes/Security.svelte
frontend/src/routes/Security.svelte
This file has not been changed.
frontend/src/routes/Settings.svelte
frontend/src/routes/Settings.svelte
This file has not been changed.
frontend/src/styles/base.css
frontend/src/styles/base.css
This file has not been changed.
frontend/src/tests/AppPasswords.test.ts
frontend/src/tests/AppPasswords.test.ts
This file has not been changed.
frontend/src/tests/Login.test.ts
frontend/src/tests/Login.test.ts
This file has not been changed.
frontend/src/tests/mocks.ts
frontend/src/tests/mocks.ts
This file has not been changed.
frontend/src/tests/oauth-registration.test.ts
frontend/src/tests/oauth-registration.test.ts
This file has not been changed.
+4
crates/tranquil-pds/src/api/server/service_auth.rs
+4
crates/tranquil-pds/src/api/server/service_auth.rs
···
113
113
)
114
114
.into_response();
115
115
}
116
+
Err(crate::oauth::OAuthError::ExpiredToken(msg)) => {
117
+
warn!(error = %msg, "getServiceAuth DPoP token expired");
118
+
return ApiError::OAuthExpiredToken(Some(msg)).into_response();
119
+
}
116
120
Err(e) => {
117
121
warn!(error = ?e, "getServiceAuth DPoP auth validation failed");
118
122
return ApiError::AuthenticationFailed(Some(format!("{:?}", e))).into_response();
History
2 rounds
0 comments
expand 0 comments
pull request successfully merged