From d490c0fed69d2ec2ca55e7972fb683f51580dc39 Mon Sep 17 00:00:00 2001 From: mmattbtw Date: Sun, 14 Jun 2026 19:56:22 -0500 Subject: [PATCH] docs: record oauth preflight qa Document that the stable preview can resolve a handle and reach the account provider authorization page with the sigilyph client metadata. The remaining OAuth QA now explicitly requires credentialed callback and session-restore verification. --- todo.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/todo.md b/todo.md index e3e8639..7c15367 100644 --- a/todo.md +++ b/todo.md @@ -15,7 +15,7 @@ Last synced with GitHub and Linear issues: 2026-06-14. ## Local Open Work - [ ] Complete ATProto OAuth sign-in and callback QA through `https://sigilyph.teal.fm`. - - Verified again on 2026-06-15 that `pnpm tunnel:verify` validates the stable-origin `client_id`, callback URI, `client_uri`, DPoP setting, and latest plays XRPC response. Remaining QA requires an interactive ATProto login/callback with a real account session. + - Verified again on 2026-06-15 that `pnpm tunnel:verify` validates the stable-origin `client_id`, callback URI, `client_uri`, DPoP setting, and latest plays XRPC response. Browser preflight on 2026-06-15 loaded the stable preview, started sign-in for `matt.evil.gay`, resolved the PDS as `evil.gay`, and reached the provider password page at `/oauth/authorize` with `client_id=https://sigilyph.teal.fm/client-metadata.json` plus a PAR `request_uri`. Remaining QA requires entering a real account password/approval and confirming the callback returns to `/auth/callback`, creates a session, and restores after refresh. - [x] Drain the in-flight CAR import backfill queue for users with stale ingestion from the 2026-06-07 through 2026-06-10 Cadet outage. Redis/Garnet `LLEN car_import_jobs` returned `0` on 2026-06-14, local Cadet was running, and recent Cadet logs showed no CAR import job failures. - [x] Backfill the `fm.teal.alpha.feed.play` records present in `did:plc:tas6hj2xjrqben5653v5kohk`'s PDS repo but missing from the preview Postgres index. A focused CAR backfill completed on 2026-06-15 via `lightrail-backfill`; the preview index now has 10,215 plays for that DID, up from 10,172 immediately before the run and above the older 10,193-record comparison from 2026-06-11. - [x] Handle Jetstream account lifecycle events in Cadet, including deletes, takedowns, suspensions, activations, and tombstones. Cadet now tracks upstream account state, purges indexed public profile/social/play rows when an account becomes inactive, treats activation as the gate for future commit ingestion, and ignores legacy tombstone event kinds because modern Jetstream/account-hosting statuses replace them. -- knotmirror 0.0.1