GameCult/Heimdall
Watch
9
0
Fork
You've already forked Heimdall
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions
Heimdall/src
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Meta Vens 1d856ebd40 Code exchange: a rotating provider's grant without a refresh token fails the callback 
Joystick rotates refresh tokens, so a code-exchange answer whose refresh_token
is absent or empty would store a credential the first refresh revokes. The
shared exchange now throws a typed ProviderResponseError before the identity
is resolved or anything is written. The residual-risk comment on the in-flight
refresh map cites its follow-up.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-19 14:35:11 +02:00
..
store Credential rotate decisions carry a required expiry 2026-10-19 13:29:10 +02:00
access-plugin.ts Add Eve access plugin and private auth plane 2026-08-22 00:44:57 +02:00
app-caller.ts Close the three one-line holes Soul left as follow-ups 2026-09-08 15:08:38 +02:00
app-profiles.ts Joystick custody needs a creator binding, at start and at the callback 2026-10-19 14:34:24 +02:00
app.ts Joystick custody needs a creator binding, at start and at the callback 2026-10-19 14:34:24 +02:00
backend-handoff.ts OAuth callback: mode and provider role decide what a completion mints 2026-10-19 13:23:53 +02:00
browser-handoff.ts Relayed provider errors are printable, bounded and inert in the page 2026-09-30 15:49:30 +02:00
capability-rules.ts Make app capability rules data instead of code 2026-09-06 23:58:58 +02:00
claims.ts Claims: facts are the one owner of a capability-free claim 2026-10-19 13:34:41 +02:00
config.ts Signing key path: absolute only, and no error carries the path 2026-09-30 14:40:07 +02:00
contracts.ts Add Joystick as a confidential, rotating managed-connection provider 2026-10-19 11:13:40 +02:00
custody.ts readSecretInput: never print the path, refuse relative paths and blank secrets 2026-09-30 13:50:53 +02:00
export-provider-advertisement.ts Add read-only Heimdall Eve witness advertisement 2026-06-03 03:21:31 +01:00
export-provider-health-public-key.ts Expose provider health public identity 2026-08-22 02:35:20 +02:00
facts.ts Normalize Heimdall claim fact vocabulary 2026-04-26 14:58:58 +01:00
idunn-rudp-health.ts Publish runtime presence in the contract Odin admits 2026-09-07 22:19:51 +02:00
idunn-store.ts Follow CultLib's package rename and select workspaces by path 2026-09-07 22:26:24 +02:00
index.ts Publish runtime presence in the contract Odin admits 2026-09-07 22:19:51 +02:00
managed-credential.ts Code exchange: a rotating provider's grant without a refresh token fails the callback 2026-10-19 14:35:11 +02:00
oauth.ts Code exchange: a rotating provider's grant without a refresh token fails the callback 2026-10-19 14:35:11 +02:00
odin-publication.ts Follow CultLib's package rename and select workspaces by path 2026-09-07 22:26:24 +02:00
private-command-plane.ts Audit events never carry a completion code 2026-09-30 18:56:35 +02:00
private-command-security.ts Add Eve access plugin and private auth plane 2026-08-22 00:44:57 +02:00
process-write-lease.ts Retract the CultLib divergence claim; read each .cc with the right client 2026-09-06 19:11:19 +02:00
provider-health-identity.ts Follow CultLib's package rename and select workspaces by path 2026-09-07 22:26:24 +02:00
providers.ts Token answers: a default lifetime replaces an unknown expiry; a malformed refresh_token is typed 2026-10-19 13:24:21 +02:00
runtime-presence.ts Publish runtime presence in the contract Odin admits 2026-09-07 22:19:51 +02:00
signing.ts Signing key path: absolute only, and no error carries the path 2026-09-30 14:40:07 +02:00
verifier.ts Register apps at runtime instead of at build time 2026-09-07 00:11:41 +02:00
verse-state.ts Honour the Idunn process write lease, and stop claiming active while warming 2026-09-06 02:25:38 +02:00
verse-witness.ts Register apps at runtime instead of at build time 2026-09-07 00:11:41 +02:00