GameCult/repixelizer
Watch
9
0
Fork
You've already forked repixelizer
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Refresh Heimdall sessions in hosted access

Browse source
This commit is contained in:
Meta Vens 2026-05-20 13:43:53 +01:00
commit d90bf8eeef
7 changed files with 246 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

5
notes/fresh-workspace-handoff.md
View file

@ -42,6 +42,11 @@ Do not continue implementation automatically from a rehydrate-only request.
- Low-confidence autocorr candidates can be preview-reranked; hosted mode does not forcibly disable rerank.
- Hosted access lives in `src/repixelizer/access.py` and `src/repixelizer/gui.py`.
- `GC_ACCESS_MODE=heimdall` verifies Heimdall Ed25519 access tokens locally and adopts httpOnly local sessions.
- Heimdall mode stores a separate httpOnly refresh cookie
(`gc_access_token_refresh` by default) and calls Heimdall's
`/v1/apps/repixelizer/sessions/refresh` endpoint with Repixelizer-owned
Discord/Patreon entitlement policies before sending the user through provider
OAuth again.
- Self-host/local runs stay permissive by default unless `GC_ACCESS_*` enables access policy.
- Do not smear auth logic into `src/repixelizer/pipeline.py`, `src/repixelizer/inference.py`, or the solver stack.