rename to ligo.at

Makefile

···
 .PHONY: debug
 debug:
-	flask run --debug -h '0.0.0.0' -p 8080
+	flask --app 'src.main' run --debug -h '0.0.0.0' -p 8080
+
+.PHONY: run
+run:
+	gunicorn --bind ':$(PORT)' 'src.main:app'

app.py

···
-from src.main import app

pyproject.toml

···
     "authlib>=1.3",
     "dnspython>=2.8.0",
     "flask[dotenv]>=3.1.2",
+    "gunicorn>=23.0.0",
     "requests>=2.32",
     "requests-hardened>=1.2.0",
 ]

src/atproto/atproto_oauth.py src/atproto/oauth.py

···
 import sqlite3
-from typing import Any
+from typing import Any, NamedTuple
 import time
 import json
 from authlib.jose import JsonWebKey, Key
···
 from ..types import OAuthAuthRequest, OAuthSession
 
 from ..security import is_safe_url, hardened_http
+
+
+class OAuthTokens(NamedTuple):
+    access_token: str
+    refresh_token: str
+    scope: str
+    sub: str
 
 
 # Prepares and sends a pushed auth request (PAR) via HTTP POST to the Authorization Server.
···
 
 
 # Completes the auth flow by sending an initial auth token request.
-# Returns token response (dict) and DPoP nonce (str)
+# Returns token response (OAuthTokens) and DPoP nonce (str)
+# IMPORTANT: the 'tokens.sub' field must be verified against the original request by code calling this function.
 def initial_token_request(
     auth_request: OAuthAuthRequest,
     code: str,
     app_url: str,
     client_secret_jwk: Key,
-) -> tuple[dict[str, str], str]:
+) -> tuple[OAuthTokens, str]:
     authserver_url = auth_request.authserver_iss
 
     # Re-fetch server metadata
···
         with hardened_http.get_session() as sess:
             resp = sess.post(token_url, data=params, headers={"DPoP": dpop_proof})
 
-    token_body = resp.json()
-    print(token_body)
-
     resp.raise_for_status()
-
-    # IMPORTANT: the 'sub' field must be verified against the original request by code calling this function.
+    token_body = resp.json()
+    try:
+        tokens = OAuthTokens(**token_body)
+    except TypeError:
+        raise Exception("invalid token body")
 
-    return token_body, dpop_authserver_nonce
+    return tokens, dpop_authserver_nonce
 
 
-# Returns token response (dict) and DPoP nonce (str)
+# Returns token response (OAuthTokens) and DPoP nonce (str)
 def refresh_token_request(
     user: OAuthSession,
     app_url: str,
     client_secret_jwk: Key,
-) -> tuple[dict[str, str], str]:
+) -> tuple[OAuthTokens, str]:
     authserver_url = user.authserver_iss
 
     # Re-fetch server metadata
···
 
     resp.raise_for_status()
     token_body = resp.json()
+    try:
+        tokens = OAuthTokens(**token_body)
+    except TypeError:
+        raise Exception("invalid token body")
 
-    return token_body, dpop_authserver_nonce
+    return tokens, dpop_authserver_nonce
 
 
 # Helper to demonstrate making a request (HTTP GET or POST) to the user's PDS ("Resource Server" in OAuth terminology) using DPoP and access token.

src/db.py

···
     if db is None:
         db_path: str = app.config.get("DATABASE_URL", "ligoat.db")
         db = g.db = sqlite3.connect(db_path)
+        # return rows as dict-like objects
         db.row_factory = sqlite3.Row
     return db
 

src/main.py

···
 import json
 
 from .atproto import PdsUrl, get_record, resolve_did_from_handle, resolve_pds_from_did
-from .atproto.atproto_oauth import pds_authed_req
+from .atproto.oauth import pds_authed_req
 from .db import close_db_connection, get_db, init_db
 from .oauth import oauth
 from .types import OAuthSession

src/oauth.py

···
 
 import json
 
-from .atproto.atproto_oauth import initial_token_request, send_par_auth_request
 from .atproto import (
     is_valid_did,
     is_valid_handle,
···
     fetch_authserver_meta,
     resolve_identity,
 )
+from .atproto.oauth import initial_token_request, send_par_auth_request
 from .security import is_safe_url
 from .types import OAuthAuthRequest
 from .db import get_db
···
     if row.did:
         # If we started with an account identifier, this is simple
         did, handle, pds_url = row.did, row.handle, row.pds_url
-        assert tokens["sub"] == did
+        assert tokens.sub == did
     else:
-        did = tokens["sub"]
+        did = tokens.sub
         assert is_valid_did(did)
         identity = resolve_identity(did)
         if not identity:
···
         authserver_url = resolve_authserver_from_pds(pds_url)
         assert authserver_url == authserver_iss
 
-    assert row.scope == tokens["scope"]
+    assert row.scope == tokens.scope
 
     current_app.logger.debug("storing user did and handle")
     db = get_db(current_app)
···
             handle,
             pds_url,
             authserver_iss,
-            tokens["access_token"],
-            tokens["refresh_token"],
+            tokens.access_token,
+            tokens.refresh_token,
             dpop_authserver_nonce,
             None,
             auth_request.dpop_private_jwk,

src/templates/editor.html

···
 <html>
   <head>
     <meta charset="utf-8" />
-    <title>edit your profile &mdash; atlinks</title>
+    <title>edit your profile &mdash; ligo.at</title>
     <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" />
     <link rel="stylesheet" href="{{ url_for('static', filename='inter.css') }}" />
     <link rel="stylesheet" href="{{ url_for('static', filename='style.css') }}" />
···
   <body>
     <div class="wrapper editor" x-data="{ links: {{ links }}, linksChanged: false }">
       <header>
-        <h1>atlinks</h1>
+        <h1>ligo.at</h1>
         <span class="tagline">edit your profile & links</span>
       </header>
 
···
         </label>
         {% if profile_from_bluesky %}
         <p>
-          <span class="caption">Profile was fetched from Bluesky. On save it will use an independent, atlinks only copy.</span>
+          <span class="caption">Profile was fetched from Bluesky. On save it will use an independent, ligo.at only copy.</span>
         </p>
         {% endif %}
         <label>

src/templates/index.html

···
 <html>
   <head>
     <meta charset="utf-8" />
-    <title>atlinks</title>
+    <title>ligo.at</title>
     <meta name="viewport" content="width=device-width, initial-scale=1" />
     <link rel="stylesheet" href="{{ url_for('static', filename='inter.css') }}" />
     <link rel="stylesheet" href="{{ url_for('static', filename='style.css') }}" />
···
   <body>
     <div class="wrapper home">
       <header>
-        <h1>atlinks</h1>
-        <span class="tagline">name pending</span>
+        <h1>ligo.at</h1>
+        <span class="tagline">(noun) connection</span>
       </header>
       <p>
         Get your own links page for all your social profiles. Decentralized thanks to

src/templates/login.html

···
 <html>
   <head>
     <meta charset="utf-8" />
-    <title>login &mdash; atlinks</title>
+    <title>login &mdash; ligo.at</title>
     <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" />
     <link rel="stylesheet" href="{{ url_for('static', filename='inter.css') }}" />
     <link rel="stylesheet" href="{{ url_for('static', filename='style.css') }}" />
···
   <body>
     <div class="wrapper login">
       <header>
-        <h1>atlinks</h1>
+        <h1>ligo.at</h1>
         <span class="tagline">log in to your account</span>
       </header>
       <form action="{{ url_for('auth_login') }}" method="post">

src/templates/profile.html

···
         {% endfor %}
       </ul>
       <footer>
-        made with <a href="/" target="_self">atlinks</a>
+        made with <a href="https://ligo.at" target="_self">ligo.at</a>
       </footer>
     </div>
     <!-- .wrapper -->

uv.lock

···
 ]
 
 [[package]]
+name = "gunicorn"
+version = "23.0.0"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "packaging" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/34/72/9614c465dc206155d93eff0ca20d42e1e35afc533971379482de953521a4/gunicorn-23.0.0.tar.gz", hash = "sha256:f014447a0101dc57e294f6c18ca6b40227a4c90e9bdb586042628030cba004ec", size = 375031, upload-time = "2024-08-10T20:25:27.378Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/cb/7d/6dac2a6e1eba33ee43f318edbed4ff29151a49b5d37f080aad1e6469bca4/gunicorn-23.0.0-py3-none-any.whl", hash = "sha256:ec400d38950de4dfd418cff8328b2c8faed0edb0d517d3394e457c317908ca4d", size = 85029, upload-time = "2024-08-10T20:25:24.996Z" },
+]
+
+[[package]]
 name = "idna"
 version = "3.10"
 source = { registry = "https://pypi.org/simple" }
···
     { name = "authlib" },
     { name = "dnspython" },
     { name = "flask", extra = ["dotenv"] },
+    { name = "gunicorn" },
     { name = "requests" },
     { name = "requests-hardened" },
 ]
···
     { name = "authlib", specifier = ">=1.3" },
     { name = "dnspython", specifier = ">=2.8.0" },
     { name = "flask", extras = ["dotenv"], specifier = ">=3.1.2" },
+    { name = "gunicorn", specifier = ">=23.0.0" },
     { name = "requests", specifier = ">=2.32" },
     { name = "requests-hardened", specifier = ">=1.2.0" },
 ]
···
     { url = "https://files.pythonhosted.org/packages/fb/df/5bd7a48c256faecd1d36edc13133e51397e41b73bb77e1a69deab746ebac/markupsafe-3.0.3-cp314-cp314t-win32.whl", hash = "sha256:915c04ba3851909ce68ccc2b8e2cd691618c4dc4c4232fb7982bca3f41fd8c3d", size = 14819, upload-time = "2025-09-27T18:37:26.285Z" },
     { url = "https://files.pythonhosted.org/packages/1a/8a/0402ba61a2f16038b48b39bccca271134be00c5c9f0f623208399333c448/markupsafe-3.0.3-cp314-cp314t-win_amd64.whl", hash = "sha256:4faffd047e07c38848ce017e8725090413cd80cbc23d86e55c587bf979e579c9", size = 15426, upload-time = "2025-09-27T18:37:27.316Z" },
     { url = "https://files.pythonhosted.org/packages/70/bc/6f1c2f612465f5fa89b95bead1f44dcb607670fd42891d8fdcd5d039f4f4/markupsafe-3.0.3-cp314-cp314t-win_arm64.whl", hash = "sha256:32001d6a8fc98c8cb5c947787c5d08b0a50663d139f1305bac5885d98d9b40fa", size = 14146, upload-time = "2025-09-27T18:37:28.327Z" },
+]
+
+[[package]]
+name = "packaging"
+version = "25.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/a1/d4/1fc4078c65507b51b96ca8f8c3ba19e6a61c8253c72794544580a7b6c24d/packaging-25.0.tar.gz", hash = "sha256:d443872c98d677bf60f6a1f2f8c1cb748e8fe762d2bf9d3148b5599295b0fc4f", size = 165727, upload-time = "2025-04-19T11:48:59.673Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/20/12/38679034af332785aac8774540895e234f4d07f7545804097de4b666afd8/packaging-25.0-py3-none-any.whl", hash = "sha256:29572ef2b1f17581046b3a2227d5c611fb25ec70ca1ba8554b24b0e69331a484", size = 66469, upload-time = "2025-04-19T11:48:57.875Z" },
 ]
 
 [[package]]