GameCult/Heimdall
Watch
9
0
Fork
You've already forked Heimdall
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Heimdall/src
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Heimdall 96256d2839 Prune oauth_state_uses on claim: bounded delete past exp + skew + margin (#12) 
Not in the 74004bf release list. The runtime role needs GRANT SELECT, DELETE ON oauth_state_uses before this build starts.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-11-13 05:58:45 +00:00
..
store Prune oauth_state_uses on claim: bounded delete past exp + skew + margin (#12) 2026-11-13 05:58:45 +00:00
access-plugin.ts Add Eve access plugin and private auth plane 2026-08-22 00:44:57 +02:00
app-caller.ts Close the three one-line holes Soul left as follow-ups 2026-09-08 15:08:38 +02:00
app-profiles.ts Connect start: pin the app-secret gate on every managed provider, refuse blank targets (#9) 2026-11-09 12:18:26 +00:00
app.ts Prune oauth_state_uses on claim: bounded delete past exp + skew + margin (#12) 2026-11-13 05:58:45 +00:00
backend-handoff.ts Joystick consent: the ask, typed refusal, receipts, and a signed-in grants page 2026-11-08 13:22:36 +00:00
browser-handoff.ts Joystick consent: the ask, typed refusal, receipts, and a signed-in grants page 2026-11-08 13:22:36 +00:00
capability-rules.ts Make app capability rules data instead of code 2026-09-06 23:58:58 +02:00
claims.ts Claims: facts are the one owner of a capability-free claim 2026-10-19 13:34:41 +02:00
config.ts Signing key path: absolute only, and no error carries the path 2026-09-30 14:40:07 +02:00
consent.ts Consent review fixes: ask-only cookie, fixed-expiry grants links, wording carried to the receipt, one revocation per grant 2026-11-08 13:30:39 +00:00
contracts.ts Opt-in sign_in step-up: app-authenticated, signed-state flag, provider re-auth parameters, typed refusal 2026-11-12 23:10:27 +00:00
custody.ts readSecretInput: never print the path, refuse relative paths and blank secrets 2026-09-30 13:50:53 +02:00
export-provider-advertisement.ts Add read-only Heimdall Eve witness advertisement 2026-06-03 03:21:31 +01:00
export-provider-health-public-key.ts Expose provider health public identity 2026-08-22 02:35:20 +02:00
facts.ts Normalize Heimdall claim fact vocabulary 2026-04-26 14:58:58 +01:00
google-oidc.ts Google OIDC provider: link-only, sub-keyed, PKCE and nonce 2026-11-04 16:10:23 +00:00
idunn-rudp-health.ts Publish runtime presence in the contract Odin admits 2026-09-07 22:19:51 +02:00
idunn-store.ts Follow CultLib's package rename and select workspaces by path 2026-09-07 22:26:24 +02:00
index.ts Heimdall opens its Idunn presence authority once, before it listens 2026-10-23 17:48:08 +02:00
managed-credential.ts Blank the refresh token in the fallback write only when it is spent 2026-11-09 10:22:14 +00:00
oauth.ts Google OIDC provider: link-only, sub-keyed, PKCE and nonce 2026-11-04 16:10:23 +00:00
odin-publication.ts Follow CultLib's package rename and select workspaces by path 2026-09-07 22:26:24 +02:00
private-command-plane.ts OAuth states complete once, only in the browser that launched them: a launch hop sets a signed binding cookie, launch and callback each consume the state, and the callback checks expiry 2026-10-22 20:13:17 +02:00
private-command-security.ts Add Eve access plugin and private auth plane 2026-08-22 00:44:57 +02:00
process-write-lease.ts Retract the CultLib divergence claim; read each .cc with the right client 2026-09-06 19:11:19 +02:00
provider-health-identity.ts Heimdall opens its Idunn presence authority once, before it listens 2026-10-23 17:48:08 +02:00
providers.ts Opt-in sign_in step-up: app-authenticated, signed-state flag, provider re-auth parameters, typed refusal 2026-11-12 23:10:27 +00:00
runtime-presence.ts Heimdall opens its Idunn presence authority once, before it listens 2026-10-23 17:48:08 +02:00
signing.ts Signing key path: absolute only, and no error carries the path 2026-09-30 14:40:07 +02:00
verifier.ts Register apps at runtime instead of at build time 2026-09-07 00:11:41 +02:00
verse-state.ts Honour the Idunn process write lease, and stop claiming active while warming 2026-09-06 02:25:38 +02:00
verse-witness.ts Register apps at runtime instead of at build time 2026-09-07 00:11:41 +02:00