tangled-core
Monorepo for Tangled forked from tangled.org/core
Star 0
Fork 0
Watch

appview/oauth: add DevStartAuthFlow for HTTP dev mode #24

Open nolith.dev
targeting master from local-dev
Open opened by and assigned to nolith.dev
targeting master from local-dev

In local development, the PDS runs on plain HTTP (localhost:2583) rather than behind TLS. The standard OAuth DPOP flow requires HTTPS, so we need a simplified auth flow for dev mode that exchanges credentials directly with the local PDS.

Add DevStartAuthFlow() which calls createSession on the local PDS and stores the resulting tokens in the session. Wire it into the login handler when Dev mode is enabled.

AI-assisted: GitLab Duo Agentic Chat (Claude Opus 4.6) Signed-off-by: Alessio Caiazza code.git@caiazza.info

Commits 4
appview/oauth: add DevStartAuthFlow for HTTP dev mode
appview,knot,spindle: use DevDirectory in dev mode
idresolver: add DevDirectory for .test TLD handle resolution
idresolver: add PDSClient() helper to reduce duplication