create statusphere-go app

.gitignore

···
+.env
+database.db

auth_handlers.go

···
+package statusphere
+
+import (
+	"crypto/sha256"
+	_ "embed"
+	"encoding/base64"
+	"encoding/json"
+	"fmt"
+	"log/slog"
+	"net/http"
+	"net/url"
+	"time"
+
+	"github.com/golang-jwt/jwt"
+	"github.com/google/uuid"
+	"github.com/gorilla/sessions"
+	"github.com/lestrrat-go/jwx/v2/jwk"
+	"github.com/willdot/statusphere-go/oauth"
+)
+
+type LoginData struct {
+	Handle string
+	Error  string
+}
+
+func (s *Server) authMiddleware(next func(http.ResponseWriter, *http.Request)) func(http.ResponseWriter, *http.Request) {
+	return func(w http.ResponseWriter, r *http.Request) {
+		_, ok := s.getDidFromSession(r)
+		if !ok {
+			http.Redirect(w, r, "/login", http.StatusFound)
+			return
+		}
+
+		next(w, r)
+	}
+}
+
+func (s *Server) HandleLogin(w http.ResponseWriter, r *http.Request) {
+	tmpl := s.getTemplate("login.html")
+	data := LoginData{}
+	tmpl.Execute(w, data)
+}
+
+func (s *Server) HandlePostLogin(w http.ResponseWriter, r *http.Request) {
+	tmpl := s.getTemplate("login.html")
+	data := LoginData{}
+
+	err := r.ParseForm()
+	if err != nil {
+		slog.Error("parsing form", "error", err)
+		data.Error = "error parsing data"
+		tmpl.Execute(w, data)
+		return
+	}
+
+	handle := r.FormValue("handle")
+
+	result, err := s.oauthService.StartOAuthFlow(r.Context(), handle)
+	if err != nil {
+		slog.Error("starting oauth flow", "error", err)
+		data.Error = "error logging in"
+		tmpl.Execute(w, data)
+		return
+	}
+
+	u, _ := url.Parse(result.AuthorizationEndpoint)
+	u.RawQuery = fmt.Sprintf("client_id=%s&request_uri=%s", url.QueryEscape(fmt.Sprintf("%s/client-metadata.json", s.host)), result.RequestURI)
+
+	// ignore error here as it only returns an error for decoding an existing session but it will always return a session anyway which
+	// is what we want
+	session, _ := s.sessionStore.Get(r, "oauth-session")
+	session.Values = map[any]any{}
+
+	session.Options = &sessions.Options{
+		Path:     "/",
+		MaxAge:   300, // save for five minutes
+		HttpOnly: true,
+	}
+
+	session.Values["oauth_state"] = result.State
+	session.Values["oauth_did"] = result.DID
+
+	err = session.Save(r, w)
+	if err != nil {
+		slog.Error("save session", "error", err)
+		data.Error = "error logging in"
+		tmpl.Execute(w, data)
+		return
+	}
+
+	http.Redirect(w, r, u.String(), http.StatusFound)
+}
+
+func (s *Server) handleOauthCallback(w http.ResponseWriter, r *http.Request) {
+	tmpl := s.getTemplate("login.html")
+	data := LoginData{}
+
+	resState := r.FormValue("state")
+	resIss := r.FormValue("iss")
+	resCode := r.FormValue("code")
+
+	session, err := s.sessionStore.Get(r, "oauth-session")
+	if err != nil {
+		slog.Error("getting session", "error", err)
+		data.Error = "error logging in"
+		tmpl.Execute(w, data)
+		return
+	}
+
+	if resState == "" || resIss == "" || resCode == "" {
+		slog.Error("request missing needed parameters")
+		data.Error = "error logging in"
+		tmpl.Execute(w, data)
+		return
+	}
+
+	sessionState, ok := session.Values["oauth_state"].(string)
+	if !ok {
+		slog.Error("oauth_state not found in sesssion")
+		data.Error = "error logging in"
+		tmpl.Execute(w, data)
+		return
+	}
+
+	if resState != sessionState {
+		slog.Error("session state does not match response state")
+		data.Error = "error logging in"
+		tmpl.Execute(w, data)
+		return
+	}
+
+	params := oauth.CallBackParams{
+		Iss:   resIss,
+		State: resState,
+		Code:  resCode,
+	}
+	usersDID, err := s.oauthService.OAuthCallback(r.Context(), params)
+	if err != nil {
+		slog.Error("handling oauth callback", "error", err)
+		data.Error = "error logging in"
+		tmpl.Execute(w, data)
+		return
+	}
+
+	session.Options = &sessions.Options{
+		Path:     "/",
+		MaxAge:   86400 * 7,
+		HttpOnly: true,
+	}
+
+	// make sure the session is empty before setting new values
+	session.Values = map[any]any{}
+	session.Values["did"] = usersDID
+
+	err = session.Save(r, w)
+	if err != nil {
+		slog.Error("save session", "error", err)
+		data.Error = "error logging in"
+		tmpl.Execute(w, data)
+		return
+	}
+
+	http.Redirect(w, r, "/", http.StatusFound)
+}
+
+func (s *Server) HandleLogOut(w http.ResponseWriter, r *http.Request) {
+	session, err := s.sessionStore.Get(r, "oauth-session")
+	if err != nil {
+		slog.Error("getting session", "error", err)
+		http.Redirect(w, r, "/", http.StatusFound)
+		return
+	}
+
+	did, ok := session.Values["did"]
+	if ok {
+		err = s.oauthService.DeleteOAuthSession(fmt.Sprintf("%s", did))
+		if err != nil {
+			slog.Error("deleting oauth session", "error", err)
+		}
+	}
+
+	session.Values = map[any]any{}
+	session.Options = &sessions.Options{
+		Path:     "/",
+		MaxAge:   -1,
+		HttpOnly: true,
+	}
+
+	err = session.Save(r, w)
+	if err != nil {
+		slog.Error("save session", "error", err)
+		http.Redirect(w, r, "/", http.StatusFound)
+		return
+	}
+
+	http.Redirect(w, r, "/", http.StatusFound)
+}
+
+func pdsDpopJwt(method, url, iss, accessToken, nonce string, privateJwk jwk.Key) (string, error) {
+	pubJwk, err := privateJwk.PublicKey()
+	if err != nil {
+		return "", err
+	}
+
+	b, err := json.Marshal(pubJwk)
+	if err != nil {
+		return "", err
+	}
+
+	var pubMap map[string]any
+	if err := json.Unmarshal(b, &pubMap); err != nil {
+		return "", err
+	}
+
+	now := time.Now().Unix()
+
+	claims := jwt.MapClaims{
+		"iss": iss,
+		"iat": now,
+		"exp": now + 30,
+		"jti": uuid.NewString(),
+		"htm": method,
+		"htu": url,
+		"ath": generateCodeChallenge(accessToken),
+	}
+
+	if nonce != "" {
+		claims["nonce"] = nonce
+	}
+
+	token := jwt.NewWithClaims(jwt.SigningMethodES256, claims)
+	token.Header["typ"] = "dpop+jwt"
+	token.Header["alg"] = "ES256"
+	token.Header["jwk"] = pubMap
+
+	var rawKey any
+	if err := privateJwk.Raw(&rawKey); err != nil {
+		return "", err
+	}
+
+	tokenString, err := token.SignedString(rawKey)
+	if err != nil {
+		return "", fmt.Errorf("failed to sign token: %w", err)
+	}
+
+	return tokenString, nil
+}
+
+func generateCodeChallenge(pkceVerifier string) string {
+	h := sha256.New()
+	h.Write([]byte(pkceVerifier))
+	hash := h.Sum(nil)
+	return base64.RawURLEncoding.EncodeToString(hash)
+}

cmd/main.go

···
+package main
+
+import (
+	"context"
+	"errors"
+	"log"
+	"log/slog"
+	"net/http"
+	"os"
+	"os/signal"
+	"path"
+	"syscall"
+	"time"
+
+	"github.com/avast/retry-go/v4"
+	"github.com/joho/godotenv"
+	"github.com/willdot/statusphere-go"
+	"github.com/willdot/statusphere-go/database"
+	"github.com/willdot/statusphere-go/oauth"
+)
+
+const (
+	defaultServerAddr                = "wss://jetstream.atproto.tools/subscribe"
+	httpClientTimeoutDuration        = time.Second * 5
+	transportIdleConnTimeoutDuration = time.Second * 90
+)
+
+func main() {
+	err := godotenv.Load(".env")
+	if err != nil {
+		if !os.IsNotExist(err) {
+			log.Fatal("Error loading .env file")
+		}
+	}
+
+	host := os.Getenv("HOST")
+	if host == "" {
+		slog.Error("missing HOST env variable")
+		return
+	}
+
+	dbMountPath := os.Getenv("DATABASE_MOUNT_PATH")
+	if dbMountPath == "" {
+		slog.Error("DATABASE_MOUNT_PATH env not set")
+		return
+	}
+
+	dbFilename := path.Join(dbMountPath, "database.db")
+	db, err := database.New(dbFilename)
+	if err != nil {
+		slog.Error("create new database", "error", err)
+		return
+	}
+	defer db.Close()
+
+	httpClient := &http.Client{
+		Timeout: httpClientTimeoutDuration,
+		Transport: &http.Transport{
+			IdleConnTimeout: transportIdleConnTimeoutDuration,
+		},
+	}
+
+	oauthService, err := oauth.NewService(db, host, httpClient)
+	if err != nil {
+		slog.Error("creating new oauth service", "error", err)
+		return
+	}
+
+	server, err := statusphere.NewServer(host, 8080, db, oauthService, httpClient)
+	if err != nil {
+		slog.Error("create new server", "error", err)
+		return
+	}
+
+	signals := make(chan os.Signal, 1)
+	signal.Notify(signals, syscall.SIGTERM, syscall.SIGINT)
+
+	ctx, cancel := context.WithCancel(context.Background())
+	defer cancel()
+
+	go func() {
+		<-signals
+		cancel()
+		_ = server.Stop(context.Background())
+	}()
+
+	go consumeLoop(ctx, db)
+
+	server.Run()
+}
+
+func consumeLoop(ctx context.Context, db *database.DB) {
+	jsServerAddr := os.Getenv("JS_SERVER_ADDR")
+	if jsServerAddr == "" {
+		jsServerAddr = defaultServerAddr
+	}
+
+	consumer := statusphere.NewConsumer(jsServerAddr, slog.Default(), db)
+
+	err := retry.Do(func() error {
+		err := consumer.Consume(ctx)
+		if err != nil {
+			if errors.Is(err, context.Canceled) {
+				return nil
+			}
+			slog.Error("consume loop", "error", err)
+			return err
+		}
+		return nil
+	}, retry.UntilSucceeded()) // retry indefinitly until context canceled
+	slog.Error(err.Error())
+	slog.Warn("exiting consume loop")
+}

consumer.go

···
+package statusphere
+
+import (
+	"context"
+	"encoding/json"
+
+	"fmt"
+	"log/slog"
+	"time"
+
+	"github.com/bluesky-social/jetstream/pkg/client"
+	"github.com/bluesky-social/jetstream/pkg/client/schedulers/sequential"
+	"github.com/bluesky-social/jetstream/pkg/models"
+)
+
+type consumer struct {
+	cfg     *client.ClientConfig
+	handler handler
+	logger  *slog.Logger
+}
+
+func NewConsumer(jsAddr string, logger *slog.Logger, store HandlerStore) *consumer {
+	cfg := client.DefaultClientConfig()
+	if jsAddr != "" {
+		cfg.WebsocketURL = jsAddr
+	}
+	cfg.WantedCollections = []string{
+		"xyz.statusphere.status",
+	}
+	cfg.WantedDids = []string{}
+
+	return &consumer{
+		cfg:    cfg,
+		logger: logger,
+		handler: handler{
+			store: store,
+		},
+	}
+}
+
+func (c *consumer) Consume(ctx context.Context) error {
+	scheduler := sequential.NewScheduler("jetstream_localdev", c.logger, c.handler.HandleEvent)
+	defer scheduler.Shutdown()
+
+	client, err := client.NewClient(c.cfg, c.logger, scheduler)
+	if err != nil {
+		return fmt.Errorf("failed to create client: %w", err)
+	}
+
+	cursor := time.Now().Add(1 * -time.Minute).UnixMicro()
+
+	if err := client.ConnectAndRead(ctx, &cursor); err != nil {
+		return fmt.Errorf("connect and read: %w", err)
+	}
+
+	slog.Info("stopping consume")
+	return nil
+}
+
+type HandlerStore interface {
+	CreateStatus(status Status) error
+}
+
+type handler struct {
+	store HandlerStore
+}
+
+func (h *handler) HandleEvent(ctx context.Context, event *models.Event) error {
+	if event.Commit == nil {
+		return nil
+	}
+
+	switch event.Commit.Operation {
+	case models.CommitOperationCreate:
+		return h.handleCreateEvent(ctx, event)
+	default:
+		return nil
+	}
+}
+
+type StatusRecord struct {
+	Status    string    `json:"status"`
+	CreatedAt time.Time `json:"createdAt"`
+}
+
+func (h *handler) handleCreateEvent(_ context.Context, event *models.Event) error {
+	var statusRecord StatusRecord
+	if err := json.Unmarshal(event.Commit.Record, &statusRecord); err != nil {
+		slog.Error("unmarshal record", "error", err)
+		return nil
+	}
+
+	uri := fmt.Sprintf("at://%s/%s/%s", event.Did, event.Commit.Collection, event.Commit.RKey)
+
+	status := Status{
+		URI:       uri,
+		Did:       event.Did,
+		Status:    statusRecord.Status,
+		CreatedAt: statusRecord.CreatedAt.UnixMilli(),
+		IndexedAt: time.Now().UnixMilli(),
+	}
+	err := h.store.CreateStatus(status)
+	if err != nil {
+		slog.Error("failed to store status", "error", err)
+	}
+
+	return nil
+}

database/database.go

···
+package database
+
+import (
+	"database/sql"
+	"errors"
+	"fmt"
+	"log/slog"
+	"os"
+
+	_ "github.com/glebarez/go-sqlite"
+)
+
+type DB struct {
+	db *sql.DB
+}
+
+func New(dbPath string) (*DB, error) {
+	if dbPath != ":memory:" {
+		err := createDbFile(dbPath)
+		if err != nil {
+			return nil, fmt.Errorf("create db file: %w", err)
+		}
+	}
+
+	db, err := sql.Open("sqlite", dbPath)
+	if err != nil {
+		return nil, fmt.Errorf("open database: %w", err)
+	}
+
+	err = db.Ping()
+	if err != nil {
+		return nil, fmt.Errorf("ping db: %w", err)
+	}
+
+	err = createOauthRequestsTable(db)
+	if err != nil {
+		return nil, fmt.Errorf("creating oauth requests table: %w", err)
+	}
+
+	err = createOauthSessionsTable(db)
+	if err != nil {
+		return nil, fmt.Errorf("creating oauth sessions table: %w", err)
+	}
+
+	err = createStatusTable(db)
+	if err != nil {
+		return nil, fmt.Errorf("creating status table: %w", err)
+	}
+
+	err = createProfileTable(db)
+	if err != nil {
+		return nil, fmt.Errorf("creating profile table: %w", err)
+	}
+
+	return &DB{db: db}, nil
+}
+
+func (d *DB) Close() {
+	err := d.db.Close()
+	if err != nil {
+		slog.Error("failed to close db", "error", err)
+	}
+}
+
+func createDbFile(dbFilename string) error {
+	if _, err := os.Stat(dbFilename); !errors.Is(err, os.ErrNotExist) {
+		return nil
+	}
+
+	f, err := os.Create(dbFilename)
+	if err != nil {
+		return fmt.Errorf("create db file : %w", err)
+	}
+	f.Close()
+	return nil
+}

database/oauth_requests.go

···
+package database
+
+import (
+	"database/sql"
+	"fmt"
+	"log/slog"
+
+	"github.com/willdot/statusphere-go/oauth"
+)
+
+func createOauthRequestsTable(db *sql.DB) error {
+	createOauthRequestsTableSQL := `CREATE TABLE IF NOT EXISTS oauthrequests (
+		"id" integer NOT NULL PRIMARY KEY AUTOINCREMENT,
+		"authserverIss" TEXT,
+		"state" TEXT,
+		"did" TEXT,
+		"pdsUrl" TEXT,
+		"pkceVerifier" TEXT,
+		"dpopAuthserverNonce" TEXT,
+		"dpopPrivateJwk" TEXT,
+		UNIQUE(did,state)
+	  );`
+
+	slog.Info("Create oauthrequests table...")
+	statement, err := db.Prepare(createOauthRequestsTableSQL)
+	if err != nil {
+		return fmt.Errorf("prepare DB statement to create oauthrequests table: %w", err)
+	}
+	_, err = statement.Exec()
+	if err != nil {
+		return fmt.Errorf("exec sql statement to create oauthrequests table: %w", err)
+	}
+	slog.Info("oauthrequests table created")
+
+	return nil
+}
+
+func (d *DB) CreateOauthRequest(request oauth.Request) error {
+	sql := `INSERT INTO oauthrequests (authserverIss, state, did, pdsUrl, pkceVerifier, dpopAuthServerNonce, dpopPrivateJwk) VALUES (?, ?, ?, ?, ?, ?, ?) ON CONFLICT(did,state) DO NOTHING;`
+	_, err := d.db.Exec(sql, request.AuthserverIss, request.State, request.Did, request.PdsURL, request.PkceVerifier, request.DpopAuthserverNonce, request.DpopPrivateJwk)
+	if err != nil {
+		return fmt.Errorf("exec insert oauth request: %w", err)
+	}
+
+	return nil
+}
+
+func (d *DB) GetOauthRequest(state string) (oauth.Request, error) {
+	var oauthRequest oauth.Request
+	sql := "SELECT authserverIss, state, did, pdsUrl, pkceVerifier, dpopAuthServerNonce, dpopPrivateJwk FROM oauthrequests WHERE state = ?;"
+	rows, err := d.db.Query(sql, state)
+	if err != nil {
+		return oauthRequest, fmt.Errorf("run query to get oauth request: %w", err)
+	}
+	defer rows.Close()
+
+	for rows.Next() {
+		if err := rows.Scan(&oauthRequest.AuthserverIss, &oauthRequest.State, &oauthRequest.Did, &oauthRequest.PdsURL, &oauthRequest.PkceVerifier, &oauthRequest.DpopAuthserverNonce, &oauthRequest.DpopPrivateJwk); err != nil {
+			return oauthRequest, fmt.Errorf("scan row: %w", err)
+		}
+
+		return oauthRequest, nil
+	}
+	return oauthRequest, fmt.Errorf("not found")
+}
+
+func (d *DB) DeleteOauthRequest(state string) error {
+	sql := "DELETE FROM oauthrequests WHERE state = ?;"
+	_, err := d.db.Exec(sql, state)
+	if err != nil {
+		return fmt.Errorf("exec delete oauth request: %w", err)
+	}
+	return nil
+}

database/oauth_sessions.go

···
+package database
+
+import (
+	"database/sql"
+	"fmt"
+	"log/slog"
+
+	"github.com/willdot/statusphere-go/oauth"
+)
+
+func createOauthSessionsTable(db *sql.DB) error {
+	createOauthSessionsTableSQL := `CREATE TABLE IF NOT EXISTS oauthsessions (
+		"id" integer NOT NULL PRIMARY KEY AUTOINCREMENT,
+		"did" TEXT,
+		"pdsUrl" TEXT,
+		"authserverIss" TEXT,
+		"accessToken" TEXT,
+		"refreshToken" TEXT,
+		"dpopPdsNonce" TEXT,
+		"dpopAuthserverNonce" TEXT,
+		"dpopPrivateJwk" TEXT,
+		"expiration" integer,
+		UNIQUE(did)
+	  );`
+
+	slog.Info("Create oauthsessions table...")
+	statement, err := db.Prepare(createOauthSessionsTableSQL)
+	if err != nil {
+		return fmt.Errorf("prepare DB statement to create oauthsessions table: %w", err)
+	}
+	_, err = statement.Exec()
+	if err != nil {
+		return fmt.Errorf("exec sql statement to create oauthsessions table: %w", err)
+	}
+	slog.Info("oauthsessions table created")
+
+	return nil
+}
+
+func (d *DB) CreateOauthSession(session oauth.Session) error {
+	sql := `INSERT INTO oauthsessions (did, pdsUrl, authserverIss, accessToken, refreshToken, dpopPdsNonce, dpopAuthserverNonce, dpopPrivateJwk, expiration) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?) ON CONFLICT(did) DO NOTHING;` // TODO: update on conflict
+	_, err := d.db.Exec(sql, session.Did, session.PdsUrl, session.AuthserverIss, session.AccessToken, session.RefreshToken, session.DpopPdsNonce, session.DpopAuthserverNonce, session.DpopPrivateJwk, session.Expiration)
+	if err != nil {
+		return fmt.Errorf("exec insert oauth session: %w", err)
+	}
+
+	return nil
+}
+
+func (d *DB) GetOauthSession(did string) (oauth.Session, error) {
+	var session oauth.Session
+	sql := "SELECT * FROM oauthsessions WHERE did = ?;"
+	rows, err := d.db.Query(sql, did)
+	if err != nil {
+		return session, fmt.Errorf("run query to get oauth session: %w", err)
+	}
+	defer rows.Close()
+
+	for rows.Next() {
+		if err := rows.Scan(&session.ID, &session.Did, &session.PdsUrl, &session.AuthserverIss, &session.AccessToken, &session.RefreshToken, &session.DpopPdsNonce, &session.DpopAuthserverNonce, &session.DpopPrivateJwk, &session.Expiration); err != nil {
+			return session, fmt.Errorf("scan row: %w", err)
+		}
+
+		return session, nil
+	}
+	return session, fmt.Errorf("not found")
+}
+
+func (d *DB) UpdateOauthSession(accessToken, refreshToken, dpopAuthServerNonce, did string, expiration int64) error {
+	sql := `UPDATE oauthsessions SET accessToken = ?, refreshToken = ?, dpopAuthserverNonce = ?, expiration = ? where did = ?`
+	_, err := d.db.Exec(sql, accessToken, refreshToken, dpopAuthServerNonce, expiration, did)
+	if err != nil {
+		return fmt.Errorf("exec update oauth session: %w", err)
+	}
+
+	return nil
+}
+
+func (d *DB) UpdateOauthSessionDpopPdsNonce(dpopPdsServerNonce, did string) error {
+	sql := `UPDATE oauthsessions SET dpopPdsNonce = ? where did = ?`
+	_, err := d.db.Exec(sql, dpopPdsServerNonce, did)
+	if err != nil {
+		return fmt.Errorf("exec update oauth session dpop pds nonce: %w", err)
+	}
+
+	return nil
+}
+
+func (d *DB) DeleteOauthSession(did string) error {
+	sql := "DELETE FROM oauthsessions WHERE did = ?;"
+	_, err := d.db.Exec(sql, did)
+	if err != nil {
+		return fmt.Errorf("exec delete oauth session: %w", err)
+	}
+	return nil
+}

database/profile.go

···
+package database
+
+import (
+	"database/sql"
+	"fmt"
+	"log/slog"
+
+	"github.com/willdot/statusphere-go"
+)
+
+func createProfileTable(db *sql.DB) error {
+	createProfileTableSQL := `CREATE TABLE IF NOT EXISTS profile (
+		"did" TEXT NOT NULL PRIMARY KEY,
+		"handle" TEXT,
+		"displayName" TEXT
+	  );`
+
+	slog.Info("Create profile table...")
+	statement, err := db.Prepare(createProfileTableSQL)
+	if err != nil {
+		return fmt.Errorf("prepare DB statement to create profile table: %w", err)
+	}
+	_, err = statement.Exec()
+	if err != nil {
+		return fmt.Errorf("exec sql statement to create profile table: %w", err)
+	}
+	slog.Info("profile table created")
+
+	return nil
+}
+
+func (d *DB) CreateProfile(profile statusphere.UserProfile) error {
+	sql := `INSERT INTO profile (did, handle, displayName) VALUES (?, ?, ?) ON CONFLICT(did) DO NOTHING;` // TODO: What about when users change their handle or display name???
+	_, err := d.db.Exec(sql, profile.Did, profile.Handle, profile.DisplayName)
+	if err != nil {
+		return fmt.Errorf("exec insert profile: %w", err)
+	}
+
+	return nil
+}
+
+func (d *DB) GetHandleAndDisplayNameForDid(did string) (statusphere.UserProfile, error) {
+	sql := "SELECT did, handle, displayName FROM profile WHERE did = ?;"
+	rows, err := d.db.Query(sql, did)
+	if err != nil {
+		return statusphere.UserProfile{}, fmt.Errorf("run query to get profile': %w", err)
+	}
+	defer rows.Close()
+
+	var profile statusphere.UserProfile
+	for rows.Next() {
+		if err := rows.Scan(&profile.Did, &profile.Handle, &profile.DisplayName); err != nil {
+			return statusphere.UserProfile{}, fmt.Errorf("scan row: %w", err)
+		}
+
+		return profile, nil
+	}
+	return profile, statusphere.ErrorNotFound
+}

database/status.go

···
+package database
+
+import (
+	"database/sql"
+	"fmt"
+	"log/slog"
+
+	statusphere "github.com/willdot/statusphere-go"
+)
+
+func createStatusTable(db *sql.DB) error {
+	createStatusTableSQL := `CREATE TABLE IF NOT EXISTS status (
+		"uri" TEXT NOT NULL PRIMARY KEY,
+		"did" TEXT,
+		"status" TEXT,
+		"createdAt" integer,
+		"indexedAt" integer
+	  );`
+
+	slog.Info("Create status table...")
+	statement, err := db.Prepare(createStatusTableSQL)
+	if err != nil {
+		return fmt.Errorf("prepare DB statement to create status table: %w", err)
+	}
+	_, err = statement.Exec()
+	if err != nil {
+		return fmt.Errorf("exec sql statement to create status table: %w", err)
+	}
+	slog.Info("status table created")
+
+	return nil
+}
+
+func (d *DB) CreateStatus(status statusphere.Status) error {
+	sql := `INSERT INTO status (uri, did, status, createdAt, indexedAt) VALUES (?, ?, ?, ?, ?) ON CONFLICT(uri) DO NOTHING;`
+	_, err := d.db.Exec(sql, status.URI, status.Did, status.Status, status.CreatedAt, status.IndexedAt)
+	if err != nil {
+		return fmt.Errorf("exec insert status: %w", err)
+	}
+
+	return nil
+}
+
+func (d *DB) GetStatuses(limit int) ([]statusphere.Status, error) {
+	sql := "SELECT uri, did, status, createdAt FROM status ORDER BY createdAt desc LIMIT ?;"
+	rows, err := d.db.Query(sql, limit)
+	if err != nil {
+		return nil, fmt.Errorf("run query to get status': %w", err)
+	}
+	defer rows.Close()
+
+	var results []statusphere.Status
+	for rows.Next() {
+		var status statusphere.Status
+		if err := rows.Scan(&status.URI, &status.Did, &status.Status, &status.CreatedAt); err != nil {
+			return nil, fmt.Errorf("scan row: %w", err)
+		}
+
+		results = append(results, status)
+	}
+	return results, nil
+}

go.mod

···
+module github.com/willdot/statusphere-go
+
+go 1.24.0
+
+toolchain go1.24.2
+
+require (
+	github.com/avast/retry-go/v4 v4.6.1
+	github.com/bluesky-social/jetstream v0.0.0-20250414024304-d17bd81a945e
+	github.com/glebarez/go-sqlite v1.22.0
+	github.com/golang-jwt/jwt v3.2.2+incompatible
+	github.com/google/uuid v1.6.0
+	github.com/gorilla/sessions v1.4.0
+	github.com/haileyok/atproto-oauth-golang v0.0.2
+	github.com/joho/godotenv v1.5.1
+	github.com/lestrrat-go/jwx/v2 v2.0.12
+)
+
+require (
+	github.com/beorn7/perks v1.0.1 // indirect
+	github.com/bluesky-social/indigo v0.0.0-20250301025210-a4e0cc37e188 // indirect
+	github.com/carlmjohnson/versioninfo v0.22.5 // indirect
+	github.com/cespare/xxhash/v2 v2.3.0 // indirect
+	github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.0 // indirect
+	github.com/dustin/go-humanize v1.0.1 // indirect
+	github.com/felixge/httpsnoop v1.0.4 // indirect
+	github.com/go-logr/logr v1.4.2 // indirect
+	github.com/go-logr/stdr v1.2.2 // indirect
+	github.com/goccy/go-json v0.10.3 // indirect
+	github.com/gogo/protobuf v1.3.2 // indirect
+	github.com/golang-jwt/jwt/v5 v5.2.1 // indirect
+	github.com/gorilla/securecookie v1.1.2 // indirect
+	github.com/gorilla/websocket v1.5.1 // indirect
+	github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
+	github.com/hashicorp/go-retryablehttp v0.7.5 // indirect
+	github.com/hashicorp/golang-lru v1.0.2 // indirect
+	github.com/ipfs/bbloom v0.0.4 // indirect
+	github.com/ipfs/go-block-format v0.2.0 // indirect
+	github.com/ipfs/go-cid v0.4.1 // indirect
+	github.com/ipfs/go-datastore v0.6.0 // indirect
+	github.com/ipfs/go-ipfs-blockstore v1.3.1 // indirect
+	github.com/ipfs/go-ipfs-ds-help v1.1.1 // indirect
+	github.com/ipfs/go-ipfs-util v0.0.3 // indirect
+	github.com/ipfs/go-ipld-cbor v0.1.0 // indirect
+	github.com/ipfs/go-ipld-format v0.6.0 // indirect
+	github.com/ipfs/go-log v1.0.5 // indirect
+	github.com/ipfs/go-log/v2 v2.5.1 // indirect
+	github.com/ipfs/go-metrics-interface v0.0.1 // indirect
+	github.com/jbenet/goprocess v0.1.4 // indirect
+	github.com/klauspost/compress v1.17.9 // indirect
+	github.com/klauspost/cpuid/v2 v2.2.7 // indirect
+	github.com/lestrrat-go/blackmagic v1.0.2 // indirect
+	github.com/lestrrat-go/httpcc v1.0.1 // indirect
+	github.com/lestrrat-go/httprc v1.0.4 // indirect
+	github.com/lestrrat-go/iter v1.0.2 // indirect
+	github.com/lestrrat-go/option v1.0.1 // indirect
+	github.com/mattn/go-isatty v0.0.20 // indirect
+	github.com/minio/sha256-simd v1.0.1 // indirect
+	github.com/mr-tron/base58 v1.2.0 // indirect
+	github.com/multiformats/go-base32 v0.1.0 // indirect
+	github.com/multiformats/go-base36 v0.2.0 // indirect
+	github.com/multiformats/go-multibase v0.2.0 // indirect
+	github.com/multiformats/go-multihash v0.2.3 // indirect
+	github.com/multiformats/go-varint v0.0.7 // indirect
+	github.com/opentracing/opentracing-go v1.2.0 // indirect
+	github.com/polydawn/refmt v0.89.1-0.20221221234430-40501e09de1f // indirect
+	github.com/prometheus/client_golang v1.19.1 // indirect
+	github.com/prometheus/client_model v0.6.1 // indirect
+	github.com/prometheus/common v0.54.0 // indirect
+	github.com/prometheus/procfs v0.15.1 // indirect
+	github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
+	github.com/segmentio/asm v1.2.0 // indirect
+	github.com/spaolacci/murmur3 v1.1.0 // indirect
+	github.com/whyrusleeping/cbor-gen v0.2.1-0.20241030202151-b7a6831be65e // indirect
+	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.46.1 // indirect
+	go.opentelemetry.io/otel v1.29.0 // indirect
+	go.opentelemetry.io/otel/metric v1.29.0 // indirect
+	go.opentelemetry.io/otel/trace v1.29.0 // indirect
+	go.uber.org/atomic v1.11.0 // indirect
+	go.uber.org/multierr v1.11.0 // indirect
+	go.uber.org/zap v1.26.0 // indirect
+	golang.org/x/crypto v0.32.0 // indirect
+	golang.org/x/net v0.33.0 // indirect
+	golang.org/x/sys v0.29.0 // indirect
+	golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 // indirect
+	google.golang.org/protobuf v1.34.2 // indirect
+	lukechampine.com/blake3 v1.2.1 // indirect
+	modernc.org/libc v1.37.6 // indirect
+	modernc.org/mathutil v1.6.0 // indirect
+	modernc.org/memory v1.7.2 // indirect
+	modernc.org/sqlite v1.28.0 // indirect
+)

go.sum

···
+github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
+github.com/avast/retry-go/v4 v4.6.1 h1:VkOLRubHdisGrHnTu89g08aQEWEgRU7LVEop3GbIcMk=
+github.com/avast/retry-go/v4 v4.6.1/go.mod h1:V6oF8njAwxJ5gRo1Q7Cxab24xs5NCWZBeaHHBklR8mA=
+github.com/benbjohnson/clock v1.1.0/go.mod h1:J11/hYXuz8f4ySSvYwY0FKfm+ezbsZBKZxNJlLklBHA=
+github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=
+github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw=
+github.com/bluesky-social/indigo v0.0.0-20250301025210-a4e0cc37e188 h1:1sQaG37xk08/rpmdhrmMkfQWF9kZbnfHm9Zav3bbSMk=
+github.com/bluesky-social/indigo v0.0.0-20250301025210-a4e0cc37e188/go.mod h1:NVBwZvbBSa93kfyweAmKwOLYawdVHdwZ9s+GZtBBVLA=
+github.com/bluesky-social/jetstream v0.0.0-20250414024304-d17bd81a945e h1:P/O6TDHs53gwgV845uDHI+Nri889ixksRrh4bCkCdxo=
+github.com/bluesky-social/jetstream v0.0.0-20250414024304-d17bd81a945e/go.mod h1:WiYEeyJSdUwqoaZ71KJSpTblemUCpwJfh5oVXplK6T4=
+github.com/carlmjohnson/versioninfo v0.22.5 h1:O00sjOLUAFxYQjlN/bzYTuZiS0y6fWDQjMRvwtKgwwc=
+github.com/carlmjohnson/versioninfo v0.22.5/go.mod h1:QT9mph3wcVfISUKd0i9sZfVrPviHuSF+cUtLjm2WSf8=
+github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs=
+github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
+github.com/cpuguy83/go-md2man/v2 v2.0.0-20190314233015-f79a8a8ca69d/go.mod h1:maD7wRr/U5Z6m/iR4s+kqSMx2CaBsrgA7czyZG/E6dU=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM=
+github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/decred/dcrd/crypto/blake256 v1.0.1/go.mod h1:2OfgNZ5wDpcsFmHmCK5gZTPcCXqlm2ArzUIkw9czNJo=
+github.com/decred/dcrd/dcrec/secp256k1/v4 v4.2.0/go.mod h1:v57UDF4pDQJcEfFUCRop3lJL149eHGSe9Jvczhzjo/0=
+github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.0 h1:NMZiJj8QnKe1LgsbDayM4UoHwbvwDRwnI3hwNaAHRnc=
+github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.0/go.mod h1:ZXNYxsqcloTdSy/rNShjYzMhyjf0LaoftYK0p+A3h40=
+github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY=
+github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto=
+github.com/felixge/httpsnoop v1.0.4 h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg=
+github.com/felixge/httpsnoop v1.0.4/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U=
+github.com/glebarez/go-sqlite v1.22.0 h1:uAcMJhaA6r3LHMTFgP0SifzgXg46yJkgxqyuyec+ruQ=
+github.com/glebarez/go-sqlite v1.22.0/go.mod h1:PlBIdHe0+aUEFn+r2/uthrWq4FxbzugL0L8Li6yQJbc=
+github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
+github.com/go-logr/logr v1.4.2 h1:6pFjapn8bFcIbiKo3XT4j/BhANplGihG6tvd+8rYgrY=
+github.com/go-logr/logr v1.4.2/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
+github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=
+github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE=
+github.com/go-yaml/yaml v2.1.0+incompatible/go.mod h1:w2MrLa16VYP0jy6N7M5kHaCkaLENm+P+Tv+MfurjSw0=
+github.com/goccy/go-json v0.10.2/go.mod h1:6MelG93GURQebXPDq3khkgXZkazVtN9CRI+MGFi0w8I=
+github.com/goccy/go-json v0.10.3 h1:KZ5WoDbxAIgm2HNbYckL0se1fHD6rz5j4ywS6ebzDqA=
+github.com/goccy/go-json v0.10.3/go.mod h1:oq7eo15ShAhp70Anwd5lgX2pLfOS3QCiwU/PULtXL6M=
+github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
+github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
+github.com/golang-jwt/jwt v3.2.2+incompatible h1:IfV12K8xAKAnZqdXVzCZ+TOjboZ2keLg81eXfW3O+oY=
+github.com/golang-jwt/jwt v3.2.2+incompatible/go.mod h1:8pz2t5EyA70fFQQSrl6XZXzqecmYZeUEB8OUGHkxJ+I=
+github.com/golang-jwt/jwt/v5 v5.2.1 h1:OuVbFODueb089Lh128TAcimifWaLhJwVflnrgM17wHk=
+github.com/golang-jwt/jwt/v5 v5.2.1/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
+github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
+github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
+github.com/google/gofuzz v1.2.0 h1:xRy4A+RhZaiKjJ1bPfwQ8sedCA+YS2YcCHW6ec7JMi0=
+github.com/google/gofuzz v1.2.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
+github.com/google/pprof v0.0.0-20221118152302-e6195bd50e26 h1:Xim43kblpZXfIBQsbuBVKCudVG457BR2GZFIz3uw3hQ=
+github.com/google/pprof v0.0.0-20221118152302-e6195bd50e26/go.mod h1:dDKJzRmX4S37WGHujM7tX//fmj1uioxKzKxz3lo4HJo=
+github.com/google/renameio v0.1.0/go.mod h1:KWCgfxg9yswjAJkECMjeO8J8rahYeXnNhOm40UhjYkI=
+github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
+github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/gopherjs/gopherjs v0.0.0-20181017120253-0766667cb4d1 h1:EGx4pi6eqNxGaHF6qqu48+N2wcFQ5qg5FXgOdqsJ5d8=
+github.com/gopherjs/gopherjs v0.0.0-20181017120253-0766667cb4d1/go.mod h1:wJfORRmW1u3UXTncJ5qlYoELFm8eSnnEO6hX4iZ3EWY=
+github.com/gorilla/securecookie v1.1.2 h1:YCIWL56dvtr73r6715mJs5ZvhtnY73hBvEF8kXD8ePA=
+github.com/gorilla/securecookie v1.1.2/go.mod h1:NfCASbcHqRSY+3a8tlWJwsQap2VX5pwzwo4h3eOamfo=
+github.com/gorilla/sessions v1.4.0 h1:kpIYOp/oi6MG/p5PgxApU8srsSw9tuFbt46Lt7auzqQ=
+github.com/gorilla/sessions v1.4.0/go.mod h1:FLWm50oby91+hl7p/wRxDth9bWSuk0qVL2emc7lT5ik=
+github.com/gorilla/websocket v1.5.1 h1:gmztn0JnHVt9JZquRuzLw3g4wouNVzKL15iLr/zn/QY=
+github.com/gorilla/websocket v1.5.1/go.mod h1:x3kM2JMyaluk02fnUJpQuwD2dCS5NDG2ZHL0uE0tcaY=
+github.com/haileyok/atproto-oauth-golang v0.0.2 h1:61KPkLB615LQXR2f5x1v3sf6vPe6dOXqNpTYCgZ0Fz8=
+github.com/haileyok/atproto-oauth-golang v0.0.2/go.mod h1:jcZ4GCjo5I5RuE/RsAXg1/b6udw7R4W+2rb/cGyTDK8=
+github.com/hashicorp/go-cleanhttp v0.5.2 h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ=
+github.com/hashicorp/go-cleanhttp v0.5.2/go.mod h1:kO/YDlP8L1346E6Sodw+PrpBSV4/SoxCXGY6BqNFT48=
+github.com/hashicorp/go-hclog v0.9.2 h1:CG6TE5H9/JXsFWJCfoIVpKFIkFe6ysEuHirp4DxCsHI=
+github.com/hashicorp/go-hclog v0.9.2/go.mod h1:5CU+agLiy3J7N7QjHK5d05KxGsuXiQLrjA0H7acj2lQ=
+github.com/hashicorp/go-retryablehttp v0.7.5 h1:bJj+Pj19UZMIweq/iie+1u5YCdGrnxCT9yvm0e+Nd5M=
+github.com/hashicorp/go-retryablehttp v0.7.5/go.mod h1:Jy/gPYAdjqffZ/yFGCFV2doI5wjtH1ewM9u8iYVjtX8=
+github.com/hashicorp/golang-lru v1.0.2 h1:dV3g9Z/unq5DpblPpw+Oqcv4dU/1omnb4Ok8iPY6p1c=
+github.com/hashicorp/golang-lru v1.0.2/go.mod h1:iADmTwqILo4mZ8BN3D2Q6+9jd8WM5uGBxy+E8yxSoD4=
+github.com/ipfs/bbloom v0.0.4 h1:Gi+8EGJ2y5qiD5FbsbpX/TMNcJw8gSqr7eyjHa4Fhvs=
+github.com/ipfs/bbloom v0.0.4/go.mod h1:cS9YprKXpoZ9lT0n/Mw/a6/aFV6DTjTLYHeA+gyqMG0=
+github.com/ipfs/go-block-format v0.2.0 h1:ZqrkxBA2ICbDRbK8KJs/u0O3dlp6gmAuuXUJNiW1Ycs=
+github.com/ipfs/go-block-format v0.2.0/go.mod h1:+jpL11nFx5A/SPpsoBn6Bzkra/zaArfSmsknbPMYgzM=
+github.com/ipfs/go-cid v0.4.1 h1:A/T3qGvxi4kpKWWcPC/PgbvDA2bjVLO7n4UeVwnbs/s=
+github.com/ipfs/go-cid v0.4.1/go.mod h1:uQHwDeX4c6CtyrFwdqyhpNcxVewur1M7l7fNU7LKwZk=
+github.com/ipfs/go-datastore v0.6.0 h1:JKyz+Gvz1QEZw0LsX1IBn+JFCJQH4SJVFtM4uWU0Myk=
+github.com/ipfs/go-datastore v0.6.0/go.mod h1:rt5M3nNbSO/8q1t4LNkLyUwRs8HupMeN/8O4Vn9YAT8=
+github.com/ipfs/go-detect-race v0.0.1 h1:qX/xay2W3E4Q1U7d9lNs1sU9nvguX0a7319XbyQ6cOk=
+github.com/ipfs/go-detect-race v0.0.1/go.mod h1:8BNT7shDZPo99Q74BpGMK+4D8Mn4j46UU0LZ723meps=
+github.com/ipfs/go-ipfs-blockstore v1.3.1 h1:cEI9ci7V0sRNivqaOr0elDsamxXFxJMMMy7PTTDQNsQ=
+github.com/ipfs/go-ipfs-blockstore v1.3.1/go.mod h1:KgtZyc9fq+P2xJUiCAzbRdhhqJHvsw8u2Dlqy2MyRTE=
+github.com/ipfs/go-ipfs-ds-help v1.1.1 h1:B5UJOH52IbcfS56+Ul+sv8jnIV10lbjLF5eOO0C66Nw=
+github.com/ipfs/go-ipfs-ds-help v1.1.1/go.mod h1:75vrVCkSdSFidJscs8n4W+77AtTpCIAdDGAwjitJMIo=
+github.com/ipfs/go-ipfs-util v0.0.3 h1:2RFdGez6bu2ZlZdI+rWfIdbQb1KudQp3VGwPtdNCmE0=
+github.com/ipfs/go-ipfs-util v0.0.3/go.mod h1:LHzG1a0Ig4G+iZ26UUOMjHd+lfM84LZCrn17xAKWBvs=
+github.com/ipfs/go-ipld-cbor v0.1.0 h1:dx0nS0kILVivGhfWuB6dUpMa/LAwElHPw1yOGYopoYs=
+github.com/ipfs/go-ipld-cbor v0.1.0/go.mod h1:U2aYlmVrJr2wsUBU67K4KgepApSZddGRDWBYR0H4sCk=
+github.com/ipfs/go-ipld-format v0.6.0 h1:VEJlA2kQ3LqFSIm5Vu6eIlSxD/Ze90xtc4Meten1F5U=
+github.com/ipfs/go-ipld-format v0.6.0/go.mod h1:g4QVMTn3marU3qXchwjpKPKgJv+zF+OlaKMyhJ4LHPg=
+github.com/ipfs/go-log v1.0.5 h1:2dOuUCB1Z7uoczMWgAyDck5JLb72zHzrMnGnCNNbvY8=
+github.com/ipfs/go-log v1.0.5/go.mod h1:j0b8ZoR+7+R99LD9jZ6+AJsrzkPbSXbZfGakb5JPtIo=
+github.com/ipfs/go-log/v2 v2.1.3/go.mod h1:/8d0SH3Su5Ooc31QlL1WysJhvyOTDCjcCZ9Axpmri6g=
+github.com/ipfs/go-log/v2 v2.5.1 h1:1XdUzF7048prq4aBjDQQ4SL5RxftpRGdXhNRwKSAlcY=
+github.com/ipfs/go-log/v2 v2.5.1/go.mod h1:prSpmC1Gpllc9UYWxDiZDreBYw7zp4Iqp1kOLU9U5UI=
+github.com/ipfs/go-metrics-interface v0.0.1 h1:j+cpbjYvu4R8zbleSs36gvB7jR+wsL2fGD6n0jO4kdg=
+github.com/ipfs/go-metrics-interface v0.0.1/go.mod h1:6s6euYU4zowdslK0GKHmqaIZ3j/b/tL7HTWtJ4VPgWY=
+github.com/jbenet/go-cienv v0.1.0/go.mod h1:TqNnHUmJgXau0nCzC7kXWeotg3J9W34CUv5Djy1+FlA=
+github.com/jbenet/goprocess v0.1.4 h1:DRGOFReOMqqDNXwW70QkacFW0YN9QnwLV0Vqk+3oU0o=
+github.com/jbenet/goprocess v0.1.4/go.mod h1:5yspPrukOVuOLORacaBi858NqyClJPQxYZlqdZVfqY4=
+github.com/joho/godotenv v1.5.1 h1:7eLL/+HRGLY0ldzfGMeQkb7vMd0as4CfYvUVzLqw0N0=
+github.com/joho/godotenv v1.5.1/go.mod h1:f4LDr5Voq0i2e/R5DDNOoa2zzDfwtkZa6DnEwAbqwq4=
+github.com/jtolds/gls v4.20.0+incompatible h1:xdiiI2gbIgH/gLH7ADydsJ1uDOEzR8yvV7C0MuV77Wo=
+github.com/jtolds/gls v4.20.0+incompatible/go.mod h1:QJZ7F/aHp+rZTRtaJ1ow/lLfFfVYBRgL+9YlvaHOwJU=
+github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
+github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
+github.com/klauspost/compress v1.17.9 h1:6KIumPrER1LHsvBVuDa0r5xaG0Es51mhhB9BQB2qeMA=
+github.com/klauspost/compress v1.17.9/go.mod h1:Di0epgTjJY877eYKx5yC51cX2A2Vl2ibi7bDH9ttBbw=
+github.com/klauspost/cpuid/v2 v2.2.7 h1:ZWSB3igEs+d0qvnxR/ZBzXVmxkgt8DdzP6m9pfuVLDM=
+github.com/klauspost/cpuid/v2 v2.2.7/go.mod h1:Lcz8mBdAVJIBVzewtcLocK12l3Y+JytZYpaMropDUws=
+github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
+github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
+github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
+github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
+github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
+github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
+github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
+github.com/lestrrat-go/blackmagic v1.0.1/go.mod h1:UrEqBzIR2U6CnzVyUtfM6oZNMt/7O7Vohk2J0OGSAtU=
+github.com/lestrrat-go/blackmagic v1.0.2 h1:Cg2gVSc9h7sz9NOByczrbUvLopQmXrfFx//N+AkAr5k=
+github.com/lestrrat-go/blackmagic v1.0.2/go.mod h1:UrEqBzIR2U6CnzVyUtfM6oZNMt/7O7Vohk2J0OGSAtU=
+github.com/lestrrat-go/httpcc v1.0.1 h1:ydWCStUeJLkpYyjLDHihupbn2tYmZ7m22BGkcvZZrIE=
+github.com/lestrrat-go/httpcc v1.0.1/go.mod h1:qiltp3Mt56+55GPVCbTdM9MlqhvzyuL6W/NMDA8vA5E=
+github.com/lestrrat-go/httprc v1.0.4 h1:bAZymwoZQb+Oq8MEbyipag7iSq6YIga8Wj6GOiJGdI8=
+github.com/lestrrat-go/httprc v1.0.4/go.mod h1:mwwz3JMTPBjHUkkDv/IGJ39aALInZLrhBp0X7KGUZlo=
+github.com/lestrrat-go/iter v1.0.2 h1:gMXo1q4c2pHmC3dn8LzRhJfP1ceCbgSiT9lUydIzltI=
+github.com/lestrrat-go/iter v1.0.2/go.mod h1:Momfcq3AnRlRjI5b5O8/G5/BvpzrhoFTZcn06fEOPt4=
+github.com/lestrrat-go/jwx/v2 v2.0.12 h1:3d589+5w/b9b7S3DneICPW16AqTyYXB7VRjgluSDWeA=
+github.com/lestrrat-go/jwx/v2 v2.0.12/go.mod h1:Mq4KN1mM7bp+5z/W5HS8aCNs5RKZ911G/0y2qUjAQuQ=
+github.com/lestrrat-go/option v1.0.0/go.mod h1:5ZHFbivi4xwXxhxY9XHDe2FHo6/Z7WWmtT7T5nBBp3I=
+github.com/lestrrat-go/option v1.0.1 h1:oAzP2fvZGQKWkvHa1/SAcFolBEca1oN+mQ7eooNBEYU=
+github.com/lestrrat-go/option v1.0.1/go.mod h1:5ZHFbivi4xwXxhxY9XHDe2FHo6/Z7WWmtT7T5nBBp3I=
+github.com/mattn/go-isatty v0.0.14/go.mod h1:7GGIvUiUoEMVVmxf/4nioHXj79iQHKdU27kJ6hsGG94=
+github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
+github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
+github.com/minio/sha256-simd v1.0.1 h1:6kaan5IFmwTNynnKKpDHe6FWHohJOHhCPchzK49dzMM=
+github.com/minio/sha256-simd v1.0.1/go.mod h1:Pz6AKMiUdngCLpeTL/RJY1M9rUuPMYujV5xJjtbRSN8=
+github.com/mr-tron/base58 v1.2.0 h1:T/HDJBh4ZCPbU39/+c3rRvE0uKBQlU27+QI8LJ4t64o=
+github.com/mr-tron/base58 v1.2.0/go.mod h1:BinMc/sQntlIE1frQmRFPUoPA1Zkr8VRgBdjWI2mNwc=
+github.com/multiformats/go-base32 v0.1.0 h1:pVx9xoSPqEIQG8o+UbAe7DNi51oej1NtK+aGkbLYxPE=
+github.com/multiformats/go-base32 v0.1.0/go.mod h1:Kj3tFY6zNr+ABYMqeUNeGvkIC/UYgtWibDcT0rExnbI=
+github.com/multiformats/go-base36 v0.2.0 h1:lFsAbNOGeKtuKozrtBsAkSVhv1p9D0/qedU9rQyccr0=
+github.com/multiformats/go-base36 v0.2.0/go.mod h1:qvnKE++v+2MWCfePClUEjE78Z7P2a1UV0xHgWc0hkp4=
+github.com/multiformats/go-multibase v0.2.0 h1:isdYCVLvksgWlMW9OZRYJEa9pZETFivncJHmHnnd87g=
+github.com/multiformats/go-multibase v0.2.0/go.mod h1:bFBZX4lKCA/2lyOFSAoKH5SS6oPyjtnzK/XTFDPkNuk=
+github.com/multiformats/go-multihash v0.2.3 h1:7Lyc8XfX/IY2jWb/gI7JP+o7JEq9hOa7BFvVU9RSh+U=
+github.com/multiformats/go-multihash v0.2.3/go.mod h1:dXgKXCXjBzdscBLk9JkjINiEsCKRVch90MdaGiKsvSM=
+github.com/multiformats/go-varint v0.0.7 h1:sWSGR+f/eu5ABZA2ZpYKBILXTTs9JWpdEM/nEGOHFS8=
+github.com/multiformats/go-varint v0.0.7/go.mod h1:r8PUYw/fD/SjBCiKOoDlGF6QawOELpZAu9eioSos/OU=
+github.com/opentracing/opentracing-go v1.2.0 h1:uEJPy/1a5RIPAJ0Ov+OIO8OxWu77jEv+1B0VhjKrZUs=
+github.com/opentracing/opentracing-go v1.2.0/go.mod h1:GxEUsuufX4nBwe+T+Wl9TAgYrxe9dPLANfrWvHYVTgc=
+github.com/pkg/errors v0.8.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U=
+github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/polydawn/refmt v0.89.1-0.20221221234430-40501e09de1f h1:VXTQfuJj9vKR4TCkEuWIckKvdHFeJH/huIFJ9/cXOB0=
+github.com/polydawn/refmt v0.89.1-0.20221221234430-40501e09de1f/go.mod h1:/zvteZs/GwLtCgZ4BL6CBsk9IKIlexP43ObX9AxTqTw=
+github.com/prometheus/client_golang v1.19.1 h1:wZWJDwK+NameRJuPGDhlnFgx8e8HN3XHQeLaYJFJBOE=
+github.com/prometheus/client_golang v1.19.1/go.mod h1:mP78NwGzrVks5S2H6ab8+ZZGJLZUq1hoULYBAYBw1Ho=
+github.com/prometheus/client_model v0.6.1 h1:ZKSh/rekM+n3CeS952MLRAdFwIKqeY8b62p8ais2e9E=
+github.com/prometheus/client_model v0.6.1/go.mod h1:OrxVMOVHjw3lKMa8+x6HeMGkHMQyHDk9E3jmP2AmGiY=
+github.com/prometheus/common v0.54.0 h1:ZlZy0BgJhTwVZUn7dLOkwCZHUkrAqd3WYtcFCWnM1D8=
+github.com/prometheus/common v0.54.0/go.mod h1:/TQgMJP5CuVYveyT7n/0Ix8yLNNXy9yRSkhnLTHPDIQ=
+github.com/prometheus/procfs v0.15.1 h1:YagwOFzUgYfKKHX6Dr+sHT7km/hxC76UB0learggepc=
+github.com/prometheus/procfs v0.15.1/go.mod h1:fB45yRUv8NstnjriLhBQLuOUt+WW4BsoGhij/e3PBqk=
+github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec h1:W09IVJc94icq4NjY3clb7Lk8O1qJ8BdBEF8z0ibU0rE=
+github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec/go.mod h1:qqbHyh8v60DhA7CoWK5oRCqLrMHRGoxYCSS9EjAz6Eo=
+github.com/rogpeppe/go-internal v1.3.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4=
+github.com/rogpeppe/go-internal v1.13.1 h1:KvO1DLK/DRN07sQ1LQKScxyZJuNnedQ5/wKSR38lUII=
+github.com/rogpeppe/go-internal v1.13.1/go.mod h1:uMEvuHeurkdAXX61udpOXGD/AzZDWNMNyH2VO9fmH0o=
+github.com/russross/blackfriday/v2 v2.0.1/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
+github.com/segmentio/asm v1.2.0 h1:9BQrFxC+YOHJlTlHGkTrFWf59nbL3XnCoFLTwDCI7ys=
+github.com/segmentio/asm v1.2.0/go.mod h1:BqMnlJP91P8d+4ibuonYZw9mfnzI9HfxselHZr5aAcs=
+github.com/shurcooL/sanitized_anchor_name v1.0.0/go.mod h1:1NzhyTcUVG4SuEtjjoZeVRXNmyL/1OwPU0+IJeTBvfc=
+github.com/smartystreets/assertions v1.2.0 h1:42S6lae5dvLc7BrLu/0ugRtcFVjoJNMC/N3yZFZkDFs=
+github.com/smartystreets/assertions v1.2.0/go.mod h1:tcbTF8ujkAEcZ8TElKY+i30BzYlVhC/LOxJk7iOWnoo=
+github.com/smartystreets/goconvey v1.7.2 h1:9RBaZCeXEQ3UselpuwUQHltGVXvdwm6cv1hgR6gDIPg=
+github.com/smartystreets/goconvey v1.7.2/go.mod h1:Vw0tHAZW6lzCRk3xgdin6fKYcG+G3Pg9vgXWeJpQFMM=
+github.com/spaolacci/murmur3 v1.1.0 h1:7c1g84S4BPRrfL5Xrdp6fOJ206sU9y293DDHaoy0bLI=
+github.com/spaolacci/murmur3 v1.1.0/go.mod h1:JwIasOWyU6f++ZhiEuf87xNszmSA2myDM2Kzu9HwQUA=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
+github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo=
+github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
+github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
+github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
+github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
+github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
+github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=
+github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
+github.com/urfave/cli v1.22.10/go.mod h1:Gos4lmkARVdJ6EkW0WaNv/tZAAMe9V7XWyB60NtXRu0=
+github.com/warpfork/go-wish v0.0.0-20220906213052-39a1cc7a02d0 h1:GDDkbFiaK8jsSDJfjId/PEGEShv6ugrt4kYsC5UIDaQ=
+github.com/warpfork/go-wish v0.0.0-20220906213052-39a1cc7a02d0/go.mod h1:x6AKhvSSexNrVSrViXSHUEbICjmGXhtgABaHIySUSGw=
+github.com/whyrusleeping/cbor-gen v0.2.1-0.20241030202151-b7a6831be65e h1:28X54ciEwwUxyHn9yrZfl5ojgF4CBNLWX7LR0rvBkf4=
+github.com/whyrusleeping/cbor-gen v0.2.1-0.20241030202151-b7a6831be65e/go.mod h1:pM99HXyEbSQHcosHc0iW7YFmwnscr+t9Te4ibko05so=
+github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
+github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
+github.com/yuin/goldmark v1.3.5/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1Zlc8k=
+github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
+go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.46.1 h1:aFJWCqJMNjENlcleuuOkGAPH82y0yULBScfXcIEdS24=
+go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.46.1/go.mod h1:sEGXWArGqc3tVa+ekntsN65DmVbVeW+7lTKTjZF3/Fo=
+go.opentelemetry.io/otel v1.29.0 h1:PdomN/Al4q/lN6iBJEN3AwPvUiHPMlt93c8bqTG5Llw=
+go.opentelemetry.io/otel v1.29.0/go.mod h1:N/WtXPs1CNCUEx+Agz5uouwCba+i+bJGFicT8SR4NP8=
+go.opentelemetry.io/otel/metric v1.29.0 h1:vPf/HFWTNkPu1aYeIsc98l4ktOQaL6LeSoeV2g+8YLc=
+go.opentelemetry.io/otel/metric v1.29.0/go.mod h1:auu/QWieFVWx+DmQOUMgj0F8LHWdgalxXqvp7BII/W8=
+go.opentelemetry.io/otel/trace v1.29.0 h1:J/8ZNK4XgR7a21DZUAsbF8pZ5Jcw1VhACmnYt39JTi4=
+go.opentelemetry.io/otel/trace v1.29.0/go.mod h1:eHl3w0sp3paPkYstJOmAimxhiFXPg+MMTlEh3nsQgWQ=
+go.uber.org/atomic v1.6.0/go.mod h1:sABNBOSYdrvTF6hTgEIbc7YasKWGhgEQZyfxyTvoXHQ=
+go.uber.org/atomic v1.7.0/go.mod h1:fEN4uk6kAWBTFdckzkM89CLk9XfWZrxpCo0nPH17wJc=
+go.uber.org/atomic v1.11.0 h1:ZvwS0R+56ePWxUNi+Atn9dWONBPp/AUETXlHW0DxSjE=
+go.uber.org/atomic v1.11.0/go.mod h1:LUxbIzbOniOlMKjJjyPfpl4v+PKK2cNJn91OQbhoJI0=
+go.uber.org/goleak v1.1.11-0.20210813005559-691160354723/go.mod h1:cwTWslyiVhfpKIDGSZEM2HlOvcqm+tG4zioyIeLoqMQ=
+go.uber.org/goleak v1.2.0 h1:xqgm/S+aQvhWFTtR0XK3Jvg7z8kGV8P4X14IzwN3Eqk=
+go.uber.org/goleak v1.2.0/go.mod h1:XJYK+MuIchqpmGmUSAzotztawfKvYLUIgg7guXrwVUo=
+go.uber.org/multierr v1.5.0/go.mod h1:FeouvMocqHpRaaGuG9EjoKcStLC43Zu/fmqdUMPcKYU=
+go.uber.org/multierr v1.6.0/go.mod h1:cdWPpRnG4AhwMwsgIHip0KRBQjJy5kYEpYjJxpXp9iU=
+go.uber.org/multierr v1.11.0 h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=
+go.uber.org/multierr v1.11.0/go.mod h1:20+QtiLqy0Nd6FdQB9TLXag12DsQkrbs3htMFfDN80Y=
+go.uber.org/tools v0.0.0-20190618225709-2cfd321de3ee/go.mod h1:vJERXedbb3MVM5f9Ejo0C68/HhF8uaILCdgjnY+goOA=
+go.uber.org/zap v1.16.0/go.mod h1:MA8QOfq0BHJwdXa996Y4dYkAqRKB8/1K1QMMZVaNZjQ=
+go.uber.org/zap v1.19.1/go.mod h1:j3DNczoxDZroyBnOT1L/Q79cfUMGZxlv/9dzN7SM1rI=
+go.uber.org/zap v1.26.0 h1:sI7k6L95XOKS281NhVKOFCUNIvv9e0w4BF8N3u+tCRo=
+go.uber.org/zap v1.26.0/go.mod h1:dtElttAiwGvoJ/vj4IwHBS/gXsEu/pZ50mUIRWuG0so=
+golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/crypto v0.0.0-20190510104115-cbcb75029529/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
+golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
+golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
+golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
+golang.org/x/crypto v0.12.0/go.mod h1:NF0Gs7EO5K4qLn+Ylc+fih8BSTeIjAP05siRnAh98yw=
+golang.org/x/crypto v0.32.0 h1:euUpcYgM8WcP71gNpTqQCn6rC2t6ULUPiOzfWaXVVfc=
+golang.org/x/crypto v0.32.0/go.mod h1:ZnnJkOaASj8g0AjIduWNlq2NRxL0PlBrbKVyZ6V/Ugc=
+golang.org/x/lint v0.0.0-20190930215403-16217165b5de/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
+golang.org/x/mod v0.0.0-20190513183733-4bf6d317e70e/go.mod h1:mXi4GBBbnImb6dmsKGUJ2LatrhH/nqhxcFungHvyanc=
+golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
+golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
+golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
+golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
+golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
+golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
+golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
+golang.org/x/net v0.0.0-20210405180319-a5a99cb37ef4/go.mod h1:p54w0d4576C0XHj96bSt6lcn1PtDYWL6XObtHCRCNQM=
+golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
+golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
+golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
+golang.org/x/net v0.33.0 h1:74SYHlV8BIgHIFC/LrYkOGIwL19eTYXQ5wc6TBuO36I=
+golang.org/x/net v0.33.0/go.mod h1:HXLR5J+9DxmrqMwG9qjGCxZ+zKXxBru04zlTvWlWuN4=
+golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210330210617-4fbd30eecc44/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210510120138-977fb7262007/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20210630005230-0f9fa26af87c/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20220412211240-33da011f77ad/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.11.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.29.0 h1:TPYlXGxvx1MGTn2GiZDhnjPA9wZzZeGKHHmKhHYvgaU=
+golang.org/x/sys v0.29.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
+golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
+golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
+golang.org/x/term v0.8.0/go.mod h1:xPskH00ivmX89bAKVGSKKtLOWNx2+17Eiy94tnKShWo=
+golang.org/x/term v0.11.0/go.mod h1:zC9APTIj3jG3FdV/Ons+XE1riIZXG4aZ4GTHiPZJPIU=
+golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
+golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
+golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
+golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
+golang.org/x/text v0.12.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
+golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
+golang.org/x/tools v0.0.0-20190328211700-ab21143f2384/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
+golang.org/x/tools v0.0.0-20190621195816-6e04913cbbac/go.mod h1:/rFqwRUd4F7ZHNgwSSTFct+R/Kf4OFW1sUzUTQQTgfc=
+golang.org/x/tools v0.0.0-20191029041327-9cc4af7d6b2c/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20191029190741-b9c20aec41a5/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20200619180055-7c47624df98f/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
+golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
+golang.org/x/tools v0.1.5/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
+golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
+golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
+golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 h1:+cNy6SZtPcJQH3LJVLOSmiC7MMxXNOb3PU/VUEz+EhU=
+golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028/go.mod h1:NDW/Ps6MPRej6fsCIbMTohpP40sJ/P/vI1MoTEGwX90=
+google.golang.org/protobuf v1.34.2 h1:6xV6lTsCfpGD21XK49h7MhtcApnLqkfYgPcdHftf6hg=
+google.golang.org/protobuf v1.34.2/go.mod h1:qYOHts0dSfpeUzUFpOMr/WGzszTmLH+DiWniOlNbLDw=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
+gopkg.in/errgo.v2 v2.1.0/go.mod h1:hNsd1EY+bozCKY1Ytp96fpM3vjJbqLJn88ws8XvfDNI=
+gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+honnef.co/go/tools v0.0.1-2019.2.3/go.mod h1:a3bituU0lyd329TUQxRnasdCoJDkEUEAqEt0JzvZhAg=
+lukechampine.com/blake3 v1.2.1 h1:YuqqRuaqsGV71BV/nm9xlI0MKUv4QC54jQnBChWbGnI=
+lukechampine.com/blake3 v1.2.1/go.mod h1:0OFRp7fBtAylGVCO40o87sbupkyIGgbpv1+M1k1LM6k=
+modernc.org/libc v1.37.6 h1:orZH3c5wmhIQFTXF+Nt+eeauyd+ZIt2BX6ARe+kD+aw=
+modernc.org/libc v1.37.6/go.mod h1:YAXkAZ8ktnkCKaN9sw/UDeUVkGYJ/YquGO4FTi5nmHE=
+modernc.org/mathutil v1.6.0 h1:fRe9+AmYlaej+64JsEEhoWuAYBkOtQiMEU7n/XgfYi4=
+modernc.org/mathutil v1.6.0/go.mod h1:Ui5Q9q1TR2gFm0AQRqQUaBWFLAhQpCwNcuhBOSedWPo=
+modernc.org/memory v1.7.2 h1:Klh90S215mmH8c9gO98QxQFsY+W451E8AnzjoE2ee1E=
+modernc.org/memory v1.7.2/go.mod h1:NO4NVCQy0N7ln+T9ngWqOQfi7ley4vpwvARR+Hjw95E=
+modernc.org/sqlite v1.28.0 h1:Zx+LyDDmXczNnEQdvPuEfcFVA2ZPyaD7UCZDjef3BHQ=
+modernc.org/sqlite v1.28.0/go.mod h1:Qxpazz0zH8Z1xCFyi5GSL3FzbtZ3fvbjmywNogldEW0=

home_handler.go

···
+package statusphere
+
+import (
+	"fmt"
+	"log/slog"
+	"net/http"
+	"time"
+)
+
+var Availablestatus = []string{
+	"👍",
+	"👎",
+	"💙",
+	"🥹",
+	"😧",
+	"😤",
+	"🙃",
+	"😉",
+	"😎",
+	"🤓",
+	"🤨",
+	"🥳",
+	"😭",
+	"😤",
+	"🤯",
+	"🫡",
+	"💀",
+	"✊",
+	"🤘",
+	"👀",
+	"🧠",
+	"👩‍💻",
+	"🧑‍💻",
+	"🥷",
+	"🧌",
+	"🦋",
+	"🚀",
+}
+
+type HomeData struct {
+	DisplayName     string
+	AvailableStatus []string
+	UsersStatus     []UserStatus
+}
+
+type UserStatus struct {
+	Status    string
+	Handle    string
+	HandleURL string
+	Date      string
+	IsToday   bool
+}
+
+func (s *Server) HandleHome(w http.ResponseWriter, r *http.Request) {
+	tmpl := s.getTemplate("home.html")
+	data := HomeData{
+		AvailableStatus: Availablestatus,
+	}
+	usersDid, ok := s.getDidFromSession(r)
+	if ok {
+		profile, err := s.getUserProfileForDid(usersDid)
+		if err != nil {
+			slog.Error("getting logged in users profile", "error", err)
+		}
+		data.DisplayName = profile.DisplayName
+	}
+
+	today := time.Now().Format(time.DateOnly)
+
+	results, err := s.store.GetStatuses(10)
+	if err != nil {
+		slog.Error("get status'", "error", err)
+	}
+
+	for _, status := range results {
+		date := time.UnixMilli(status.CreatedAt).Format(time.DateOnly)
+
+		profile, err := s.getUserProfileForDid(status.Did)
+		if err != nil {
+			slog.Error("getting user profile for status - skipping", "error", err, "did", status.Did)
+			continue
+		}
+
+		data.UsersStatus = append(data.UsersStatus, UserStatus{
+			Status:    status.Status,
+			Handle:    profile.Handle,
+			HandleURL: fmt.Sprintf("https://bsky.app/profile/%s", status.Did),
+			Date:      date,
+			IsToday:   date == today,
+		})
+	}
+
+	tmpl.Execute(w, data)
+}
+
+func (s *Server) HandleStatus(w http.ResponseWriter, r *http.Request) {
+	err := r.ParseForm()
+	if err != nil {
+		slog.Error("parsing form", "error", err)
+		http.Error(w, "parsing form", http.StatusBadRequest)
+		return
+	}
+
+	status := r.FormValue("status")
+	if status == "" {
+		http.Error(w, "missing status", http.StatusBadRequest)
+		return
+	}
+
+	did, ok := s.getDidFromSession(r)
+	if !ok {
+		http.Error(w, "failed to get did from session", http.StatusBadRequest)
+		return
+	}
+
+	oauthSession, err := s.oauthService.GetOauthSession(r.Context(), did)
+	if err != nil {
+		http.Error(w, "failed to get oauth session", http.StatusInternalServerError)
+		return
+	}
+
+	createdAt := time.Now()
+	uri, err := s.CreateNewStatus(r.Context(), oauthSession, status, createdAt)
+	if err != nil {
+		slog.Error("failed to create new status", "error", err)
+	}
+
+	if uri != "" {
+		statusToStore := Status{
+			URI:       uri,
+			Did:       did,
+			Status:    status,
+			CreatedAt: createdAt.UnixMilli(),
+			IndexedAt: time.Now().UnixMilli(),
+		}
+		err = s.store.CreateStatus(statusToStore)
+		if err != nil {
+			slog.Error("failed to store status that has been created", "error", err)
+		}
+	}
+
+	http.Redirect(w, r, "/", http.StatusFound)
+}

html/app.css

···
+body {
+    font-family: Arial, Helvetica, sans-serif;
+
+    --border-color: #ddd;
+    --gray-100: #fafafa;
+    --gray-500: #666;
+    --gray-700: #333;
+    --primary-100: #d2e7ff;
+    --primary-200: #b1d3fa;
+    --primary-400: #2e8fff;
+    --primary-500: #0078ff;
+    --primary-600: #0066db;
+    --error-500: #f00;
+    --error-100: #fee;
+}
+
+/*
+  Josh's Custom CSS Reset
+  https://www.joshwcomeau.com/css/custom-css-reset/
+*/
+*,
+*::before,
+*::after {
+    box-sizing: border-box;
+}
+* {
+    margin: 0;
+}
+body {
+    line-height: 1.5;
+    -webkit-font-smoothing: antialiased;
+}
+img,
+picture,
+video,
+canvas,
+svg {
+    display: block;
+    max-width: 100%;
+}
+input,
+button,
+textarea,
+select {
+    font: inherit;
+}
+p,
+h1,
+h2,
+h3,
+h4,
+h5,
+h6 {
+    overflow-wrap: break-word;
+}
+#root,
+#__next {
+    isolation: isolate;
+}
+
+/*
+  Common components
+*/
+button,
+.button {
+    display: inline-block;
+    border: 0;
+    background-color: var(--primary-500);
+    border-radius: 50px;
+    color: #fff;
+    padding: 2px 10px;
+    cursor: pointer;
+    text-decoration: none;
+}
+button:hover,
+.button:hover {
+    background: var(--primary-400);
+}
+
+/*
+  Custom components
+*/
+.error {
+    background-color: var(--error-100);
+    color: var(--error-500);
+    text-align: center;
+    padding: 1rem;
+    display: none;
+}
+.error.visible {
+    display: block;
+}
+
+#header {
+    background-color: #fff;
+    text-align: center;
+    padding: 0.5rem 0 1.5rem;
+}
+
+#header h1 {
+    font-size: 5rem;
+}
+
+.container {
+    display: flex;
+    flex-direction: column;
+    gap: 4px;
+    margin: 0 auto;
+    max-width: 600px;
+    padding: 20px;
+}
+
+.card {
+    /* border: 1px solid var(--border-color); */
+    border-radius: 6px;
+    padding: 10px 16px;
+    background-color: #fff;
+}
+.card > :first-child {
+    margin-top: 0;
+}
+.card > :last-child {
+    margin-bottom: 0;
+}
+
+.session-form {
+    display: flex;
+    flex-direction: row;
+    align-items: center;
+    justify-content: space-between;
+}
+
+.login-form {
+    display: flex;
+    flex-direction: row;
+    gap: 6px;
+    border: 1px solid var(--border-color);
+    border-radius: 6px;
+    padding: 10px 16px;
+    background-color: #fff;
+}
+
+.login-form input {
+    flex: 1;
+    border: 0;
+}
+
+.status-options {
+    display: flex;
+    flex-direction: row;
+    flex-wrap: wrap;
+    gap: 8px;
+    margin: 10px 0;
+}
+
+.status-option {
+    font-size: 2rem;
+    width: 3rem;
+    height: 3rem;
+    padding: 0;
+    background-color: #fff;
+    border: 1px solid var(--border-color);
+    border-radius: 3rem;
+    text-align: center;
+    box-shadow: 0 1px 4px #0001;
+    cursor: pointer;
+}
+
+.status-option:hover {
+    background-color: var(--primary-100);
+    box-shadow: 0 0 0 1px var(--primary-400);
+}
+
+.status-option.selected {
+    box-shadow: 0 0 0 1px var(--primary-500);
+    background-color: var(--primary-100);
+}
+
+.status-option.selected:hover {
+    background-color: var(--primary-200);
+}
+
+.status-line {
+    display: flex;
+    flex-direction: row;
+    align-items: center;
+    gap: 10px;
+    position: relative;
+    margin-top: 15px;
+}
+
+.status-line:not(.no-line)::before {
+    content: "";
+    position: absolute;
+    width: 2px;
+    background-color: var(--border-color);
+    left: 1.45rem;
+    bottom: calc(100% + 2px);
+    height: 15px;
+}
+
+.status-line .status {
+    font-size: 2rem;
+    background-color: #fff;
+    width: 3rem;
+    height: 3rem;
+    border-radius: 1.5rem;
+    text-align: center;
+    border: 1px solid var(--border-color);
+}
+
+.status-line .desc {
+    color: var(--gray-500);
+}
+
+.status-line .author {
+    color: var(--gray-700);
+    font-weight: 600;
+    text-decoration: none;
+}
+
+.status-line .author:hover {
+    text-decoration: underline;
+}
+
+.signup-cta {
+    text-align: center;
+    text-wrap: balance;
+    margin-top: 1rem;
+}

html/home.html

···
+<!doctype html>
+<html lang="en">
+    <head>
+        <title>Statusphere-go</title>
+        <link rel="icon" type="image/x-icon" href="/public/favicon.ico" />
+        <meta charset="UTF-8" />
+        <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+        <link href="/public/app.css" rel="stylesheet" />
+    </head>
+    <body>
+        <div id="header">
+            <h1>Statusphere</h1>
+            <p>Set your status on the Atmosphere.</p>
+        </div>
+        <div class="container">
+            <div class="card">
+                <form action="/logout" method="post" class="session-form">
+                    {{if .DisplayName}}
+                    <div>Hi {{.DisplayName}}. What's your status today?</div>
+                    {{else}}
+                    <div>Hi. What's your status today?</div>
+                    {{end}}
+                    <div>
+                        <button type="submit">Log out</button>
+                    </div>
+                </form>
+            </div>
+            <form action="/status" method="post" class="status-options">
+                {{range .AvailableStatus}}
+                <button type="submit" name="status" value="{{ . }}">
+                    {{.}}
+                </button>
+                {{end}}
+            </form>
+            {{range .UsersStatus}}
+            <div class="status-line">
+                <div>
+                    <div class="status">{{.Status}}</div>
+                </div>
+                <div class="desc">
+                    <a class="author" href="{{ .HandleURL }}">@{{.Handle}}</a>
+                    {{if .IsToday}} is feeling {{.Status}} today {{else}} was
+                    feeling {{.Status}} on {{.Date}} {{end}}
+                </div>
+            </div>
+            {{end}}
+        </div>
+    </body>
+</html>

html/login.html

···
+<!doctype html>
+<html lang="en">
+    <head>
+        <title>Statusphere-go</title>
+        <link rel="icon" type="image/x-icon" href="/public/favicon.ico" />
+        <meta charset="UTF-8" />
+        <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+        <link href="/public/app.css" rel="stylesheet" />
+    </head>
+    <body>
+        <div id="header">
+            <h1>Statusphere Go!</h1>
+            <p>Set your status on the Atmosphere.</p>
+        </div>
+        <div class="container">
+            <form action="/login" method="post" class="login-form">
+                <input
+                    type="text"
+                    name="handle"
+                    placeholder="Enter your handle (eg alice.bsky.social)"
+                    required
+                />
+                <button type="submit">Log in</button>
+            </form>
+            {{if .Error}}
+            <div>{{ .Error }}</div>
+            {{else}}
+            <div>
+                <br />
+            </div>
+            {{end}}
+            <div class="signup-cta">
+                Don't have an account on the Atmosphere?
+                <a href="https://bsky.app">Sign up for Bluesky</a> to create one
+                now!
+            </div>
+        </div>
+    </body>
+</html>

oauth/service.go

···
+package oauth
+
+import (
+	"context"
+	"encoding/base64"
+	"encoding/json"
+	"fmt"
+	"io"
+	"net/http"
+	"net/url"
+	"os"
+	"strings"
+	"time"
+
+	atoauth "github.com/haileyok/atproto-oauth-golang"
+	oauthhelpers "github.com/haileyok/atproto-oauth-golang/helpers"
+	"github.com/lestrrat-go/jwx/v2/jwk"
+)
+
+const (
+	scope = "atproto transition:generic"
+)
+
+type Request struct {
+	ID                  uint
+	AuthserverIss       string
+	State               string
+	Did                 string
+	PdsURL              string
+	PkceVerifier        string
+	DpopAuthserverNonce string
+	DpopPrivateJwk      string
+}
+
+type Session struct {
+	ID                  uint
+	Did                 string
+	PdsUrl              string
+	AuthserverIss       string
+	AccessToken         string
+	RefreshToken        string
+	DpopPdsNonce        string
+	DpopAuthserverNonce string
+	DpopPrivateJwk      string
+	Expiration          int64
+}
+
+func (s *Session) CreatePrivateKey() (jwk.Key, error) {
+	privateJwk, err := oauthhelpers.ParseJWKFromBytes([]byte(s.DpopPrivateJwk))
+	if err != nil {
+		return nil, fmt.Errorf("create private jwk: %w", err)
+	}
+	return privateJwk, nil
+}
+
+type OAuthFlowResult struct {
+	AuthorizationEndpoint string
+	State                 string
+	DID                   string
+	RequestURI            string
+}
+
+type CallBackParams struct {
+	State string
+	Iss   string
+	Code  string
+}
+
+type Store interface {
+	CreateOauthRequest(request Request) error
+	GetOauthRequest(state string) (Request, error)
+	DeleteOauthRequest(state string) error
+	CreateOauthSession(session Session) error
+	GetOauthSession(did string) (Session, error)
+	UpdateOauthSession(accessToken, refreshToken, dpopAuthServerNonce, did string, expiration int64) error
+	DeleteOauthSession(did string) error
+	UpdateOauthSessionDpopPdsNonce(dpopPdsServerNonce, did string) error
+}
+
+type Service struct {
+	store       Store
+	oauthClient *atoauth.Client
+	httpClient  *http.Client
+	jwks        *JWKS
+}
+
+func NewService(store Store, serverBase string, httpClient *http.Client) (*Service, error) {
+	jwks, err := getJWKS()
+	if err != nil {
+		return nil, fmt.Errorf("getting JWKS: %w", err)
+	}
+
+	oauthClient, err := createOauthClient(jwks, serverBase, httpClient)
+	if err != nil {
+		return nil, fmt.Errorf("create oauth client: %w", err)
+	}
+
+	return &Service{
+		store:       store,
+		oauthClient: oauthClient,
+		httpClient:  httpClient,
+		jwks:        jwks,
+	}, nil
+}
+
+func (s *Service) StartOAuthFlow(ctx context.Context, handle string) (*OAuthFlowResult, error) {
+	usersDID, err := s.resolveHandle(handle)
+	if err != nil {
+		return nil, fmt.Errorf("resolve handle: %w", err)
+	}
+
+	dpopPrivateKey, err := oauthhelpers.GenerateKey(nil)
+	if err != nil {
+		return nil, fmt.Errorf("generate private key: %w", err)
+	}
+
+	parResp, meta, service, err := s.makeOAuthRequest(ctx, usersDID, handle, dpopPrivateKey)
+	if err != nil {
+		return nil, fmt.Errorf("make oauth request: %w", err)
+	}
+
+	dpopPrivateKeyJson, err := json.Marshal(dpopPrivateKey)
+	if err != nil {
+		return nil, fmt.Errorf("marshal dpop private key: %w", err)
+	}
+
+	oauthRequst := Request{
+		AuthserverIss:       meta.Issuer,
+		State:               parResp.State,
+		Did:                 usersDID,
+		PkceVerifier:        parResp.PkceVerifier,
+		DpopAuthserverNonce: parResp.DpopAuthserverNonce,
+		DpopPrivateJwk:      string(dpopPrivateKeyJson),
+		PdsURL:              service,
+	}
+	err = s.store.CreateOauthRequest(oauthRequst)
+	if err != nil {
+		return nil, fmt.Errorf("store oauth request: %w", err)
+	}
+
+	result := OAuthFlowResult{
+		AuthorizationEndpoint: meta.AuthorizationEndpoint,
+		State:                 parResp.State,
+		DID:                   usersDID,
+		RequestURI:            parResp.RequestUri,
+	}
+
+	return &result, nil
+}
+
+func (s *Service) OAuthCallback(ctx context.Context, params CallBackParams) (string, error) {
+	oauthRequest, err := s.store.GetOauthRequest(fmt.Sprintf("%s", params.State))
+	if err != nil {
+		return "", fmt.Errorf("get oauth request from store: %w", err)
+	}
+
+	err = s.store.DeleteOauthRequest(fmt.Sprintf("%s", params.State))
+	if err != nil {
+		return "", fmt.Errorf("delete oauth request from store: %w", err)
+	}
+
+	jwk, err := oauthhelpers.ParseJWKFromBytes([]byte(oauthRequest.DpopPrivateJwk))
+	if err != nil {
+		return "", fmt.Errorf("parse dpop private key: %w", err)
+	}
+
+	initialTokenResp, err := s.oauthClient.InitialTokenRequest(ctx, params.Code, params.Iss, oauthRequest.PkceVerifier, oauthRequest.DpopAuthserverNonce, jwk)
+	if err != nil {
+		return "", fmt.Errorf("make oauth token request: %w", err)
+	}
+
+	if initialTokenResp.Scope != scope {
+		return "", fmt.Errorf("incorrect scope from token request")
+	}
+
+	oauthSession := Session{
+		Did:                 oauthRequest.Did,
+		PdsUrl:              oauthRequest.PdsURL,
+		AuthserverIss:       oauthRequest.AuthserverIss,
+		AccessToken:         initialTokenResp.AccessToken,
+		RefreshToken:        initialTokenResp.RefreshToken,
+		DpopAuthserverNonce: initialTokenResp.DpopAuthserverNonce,
+		DpopPrivateJwk:      oauthRequest.DpopPrivateJwk,
+		Expiration:          time.Now().Add(time.Duration(int(time.Second) * int(initialTokenResp.ExpiresIn))).UnixMilli(),
+	}
+
+	err = s.store.CreateOauthSession(oauthSession)
+	if err != nil {
+		return "", fmt.Errorf("create oauth session in store: %w", err)
+	}
+	return oauthRequest.Did, nil
+}
+
+func (s *Service) GetOauthSession(ctx context.Context, did string) (Session, error) {
+	session, err := s.store.GetOauthSession(did)
+	if err != nil {
+		return Session{}, fmt.Errorf("find oauth session: %w", err)
+	}
+
+	// if the session expires in more than 5 minutes, return it
+	if session.Expiration > time.Now().Add(time.Minute*5).UnixMilli() {
+		return session, nil
+	}
+
+	// refresh the session
+	privateJwk, err := oauthhelpers.ParseJWKFromBytes([]byte(session.DpopPrivateJwk))
+	if err != nil {
+		return Session{}, fmt.Errorf("parse sessions private JWK: %w", err)
+	}
+
+	resp, err := s.oauthClient.RefreshTokenRequest(ctx, session.RefreshToken, session.AuthserverIss, session.DpopAuthserverNonce, privateJwk)
+	if err != nil {
+		return Session{}, fmt.Errorf("refresh token: %w", err)
+	}
+
+	expiration := time.Now().Add(time.Duration(int(time.Second) * int(resp.ExpiresIn))).UnixMilli()
+
+	err = s.store.UpdateOauthSession(resp.AccessToken, resp.RefreshToken, resp.DpopAuthserverNonce, did, expiration)
+	if err != nil {
+		return Session{}, fmt.Errorf("update session after refresh: %w", err)
+	}
+
+	session.AccessToken = resp.AccessToken
+	session.RefreshToken = resp.RefreshToken
+	session.DpopAuthserverNonce = resp.DpopAuthserverNonce
+	session.Expiration = expiration
+
+	return session, nil
+}
+
+func (s *Service) DeleteOAuthSession(did string) error {
+	err := s.store.DeleteOauthSession(did)
+	if err != nil {
+		return fmt.Errorf("delete oauth session from store: %w", err)
+	}
+	return nil
+}
+
+func (s *Service) UpdateOAuthSessionDPopPDSNonce(did, newDPopNonce string) error {
+	return s.store.UpdateOauthSessionDpopPdsNonce(newDPopNonce, did)
+}
+
+func (s *Service) PublicKey() []byte {
+	return s.jwks.public
+}
+
+func (s *Service) makeOAuthRequest(ctx context.Context, did, handle string, dpopPrivateKey jwk.Key) (*atoauth.SendParAuthResponse, *atoauth.OauthAuthorizationMetadata, string, error) {
+	service, err := s.resolveService(ctx, did)
+	if err != nil {
+		return nil, nil, "", err
+	}
+
+	authserver, err := s.oauthClient.ResolvePdsAuthServer(ctx, service)
+	if err != nil {
+		return nil, nil, "", err
+	}
+
+	meta, err := s.oauthClient.FetchAuthServerMetadata(ctx, authserver)
+	if err != nil {
+		return nil, nil, "", err
+	}
+
+	resp, err := s.oauthClient.SendParAuthRequest(ctx, authserver, meta, handle, scope, dpopPrivateKey)
+	if err != nil {
+		return nil, nil, "", err
+	}
+	return resp, meta, service, nil
+}
+
+func (s *Service) resolveHandle(handle string) (string, error) {
+	params := url.Values{
+		"handle": []string{handle},
+	}
+	reqUrl := "https://public.api.bsky.app/xrpc/com.atproto.identity.resolveHandle?" + params.Encode()
+
+	resp, err := s.httpClient.Get(reqUrl)
+	if err != nil {
+		return "", fmt.Errorf("make http request: %w", err)
+	}
+
+	defer resp.Body.Close()
+
+	type did struct {
+		Did string
+	}
+
+	b, err := io.ReadAll(resp.Body)
+	if err != nil {
+		return "", fmt.Errorf("read response body: %w", err)
+	}
+
+	var resDid did
+	err = json.Unmarshal(b, &resDid)
+	if err != nil {
+		return "", fmt.Errorf("unmarshal response: %w", err)
+	}
+
+	return resDid.Did, nil
+}
+
+func (s *Service) resolveService(ctx context.Context, did string) (string, error) {
+	type Identity struct {
+		Service []struct {
+			ID              string `json:"id"`
+			Type            string `json:"type"`
+			ServiceEndpoint string `json:"serviceEndpoint"`
+		} `json:"service"`
+	}
+
+	var url string
+	if strings.HasPrefix(did, "did:plc:") {
+		url = fmt.Sprintf("https://plc.directory/%s", did)
+	} else if strings.HasPrefix(did, "did:web:") {
+		url = fmt.Sprintf("https://%s/.well-known/did.json", strings.TrimPrefix(did, "did:web:"))
+	} else {
+		return "", fmt.Errorf("did was not a supported did type")
+	}
+
+	req, err := http.NewRequestWithContext(ctx, "GET", url, nil)
+	if err != nil {
+		return "", err
+	}
+
+	resp, err := s.httpClient.Do(req)
+	if err != nil {
+		return "", fmt.Errorf("do http request: %w", err)
+	}
+	defer resp.Body.Close()
+
+	if resp.StatusCode != 200 {
+		return "", fmt.Errorf("could not find identity in plc registry")
+	}
+
+	b, err := io.ReadAll(resp.Body)
+	if err != nil {
+		return "", fmt.Errorf("read response body: %w", err)
+	}
+
+	var identity Identity
+	err = json.Unmarshal(b, &identity)
+	if err != nil {
+		return "", fmt.Errorf("unmarshal response: %w", err)
+	}
+
+	var service string
+	for _, svc := range identity.Service {
+		if svc.ID == "#atproto_pds" {
+			service = svc.ServiceEndpoint
+		}
+	}
+
+	if service == "" {
+		return "", fmt.Errorf("could not find atproto_pds service in identity services")
+	}
+
+	return service, nil
+}
+
+type JWKS struct {
+	public  []byte
+	private jwk.Key
+}
+
+func getJWKS() (*JWKS, error) {
+	jwksB64 := os.Getenv("PRIVATEJWKS")
+	if jwksB64 == "" {
+		return nil, fmt.Errorf("PRIVATEJWKS env not set")
+	}
+
+	jwksB, err := base64.StdEncoding.DecodeString(jwksB64)
+	if err != nil {
+		return nil, fmt.Errorf("decode jwks env: %w", err)
+	}
+
+	k, err := oauthhelpers.ParseJWKFromBytes([]byte(jwksB))
+	if err != nil {
+		return nil, fmt.Errorf("parse JWK from bytes: %w", err)
+	}
+
+	pubkey, err := k.PublicKey()
+	if err != nil {
+		return nil, fmt.Errorf("get public key from JWKS: %w", err)
+	}
+
+	resp := oauthhelpers.CreateJwksResponseObject(pubkey)
+	b, err := json.Marshal(resp)
+	if err != nil {
+		return nil, fmt.Errorf("marshal public JWKS: %w", err)
+	}
+
+	return &JWKS{
+		public:  b,
+		private: k,
+	}, nil
+}
+
+func createOauthClient(jwks *JWKS, serverBase string, httpClient *http.Client) (*atoauth.Client, error) {
+	return atoauth.NewClient(atoauth.ClientArgs{
+		Http:        httpClient,
+		ClientJwk:   jwks.private,
+		ClientId:    fmt.Sprintf("%s/client-metadata.json", serverBase),
+		RedirectUri: fmt.Sprintf("%s/oauth-callback", serverBase),
+	})
+}

server.go

···
+package statusphere
+
+import (
+	"context"
+	_ "embed"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"io"
+	"log/slog"
+	"net/http"
+	"net/url"
+	"os"
+	"text/template"
+
+	"github.com/gorilla/sessions"
+
+	"github.com/willdot/statusphere-go/oauth"
+)
+
+var ErrorNotFound = fmt.Errorf("not found")
+
+type UserProfile struct {
+	Did         string `json:"did"`
+	Handle      string `json:"handle"`
+	DisplayName string `json:"displayName"`
+}
+
+type Store interface {
+	GetHandleAndDisplayNameForDid(did string) (UserProfile, error)
+	CreateProfile(profile UserProfile) error
+	GetStatuses(limit int) ([]Status, error)
+	CreateStatus(status Status) error
+}
+
+type Server struct {
+	host         string
+	httpserver   *http.Server
+	sessionStore *sessions.CookieStore
+	templates    []*template.Template
+	oauthService *oauth.Service
+	store        Store
+	httpClient   *http.Client
+}
+
+func NewServer(host string, port int, store Store, oauthService *oauth.Service, httpClient *http.Client) (*Server, error) {
+	sessionStore := sessions.NewCookieStore([]byte(os.Getenv("SESSION_KEY")))
+
+	homeTemplate, err := template.ParseFiles("./html/home.html")
+	if err != nil {
+		return nil, fmt.Errorf("parsing home template: %w", err)
+	}
+	loginTemplate, err := template.ParseFiles("./html/login.html")
+	if err != nil {
+		return nil, fmt.Errorf("parsing login template: %w", err)
+	}
+
+	templates := []*template.Template{
+		homeTemplate,
+		loginTemplate,
+	}
+
+	srv := &Server{
+		host:         host,
+		oauthService: oauthService,
+		sessionStore: sessionStore,
+		templates:    templates,
+		store:        store,
+		httpClient:   httpClient,
+	}
+
+	mux := http.NewServeMux()
+	mux.HandleFunc("/", srv.authMiddleware(srv.HandleHome))
+	mux.HandleFunc("POST /status", srv.authMiddleware(srv.HandleStatus))
+
+	mux.HandleFunc("GET /login", srv.HandleLogin)
+	mux.HandleFunc("POST /login", srv.HandlePostLogin)
+	mux.HandleFunc("POST /logout", srv.HandleLogOut)
+
+	mux.HandleFunc("/public/app.css", serveCSS)
+	mux.HandleFunc("/jwks.json", srv.serveJwks)
+	mux.HandleFunc("/client-metadata.json", srv.serveClientMetadata)
+	mux.HandleFunc("/oauth-callback", srv.handleOauthCallback)
+
+	addr := fmt.Sprintf("0.0.0.0:%d", port)
+	srv.httpserver = &http.Server{
+		Addr:    addr,
+		Handler: mux,
+	}
+
+	return srv, nil
+}
+
+func (s *Server) Run() {
+	err := s.httpserver.ListenAndServe()
+	if err != nil {
+		slog.Error("listen and serve", "error", err)
+	}
+}
+
+func (s *Server) Stop(ctx context.Context) error {
+	return s.httpserver.Shutdown(ctx)
+}
+
+func (s *Server) getTemplate(name string) *template.Template {
+	for _, template := range s.templates {
+		if template.Name() == name {
+			return template
+		}
+	}
+	return nil
+}
+
+func (s *Server) serveJwks(w http.ResponseWriter, _ *http.Request) {
+	w.Header().Set("Content-Type", "application/json")
+	_, _ = w.Write(s.oauthService.PublicKey())
+}
+
+//go:embed html/app.css
+var cssFile []byte
+
+func serveCSS(w http.ResponseWriter, r *http.Request) {
+	w.Header().Set("Content-Type", "text/css; charset=utf-8")
+	_, _ = w.Write(cssFile)
+}
+
+func (s *Server) serveClientMetadata(w http.ResponseWriter, r *http.Request) {
+	metadata := map[string]any{
+		"client_id":                       fmt.Sprintf("%s/client-metadata.json", s.host),
+		"client_name":                     "Bsky-bookmark",
+		"client_uri":                      s.host,
+		"redirect_uris":                   []string{fmt.Sprintf("%s/oauth-callback", s.host)},
+		"grant_types":                     []string{"authorization_code", "refresh_token"},
+		"response_types":                  []string{"code"},
+		"application_type":                "web",
+		"dpop_bound_access_tokens":        true,
+		"jwks_uri":                        fmt.Sprintf("%s/jwks.json", s.host),
+		"scope":                           "atproto transition:generic",
+		"token_endpoint_auth_method":      "private_key_jwt",
+		"token_endpoint_auth_signing_alg": "ES256",
+	}
+
+	b, err := json.Marshal(metadata)
+	if err != nil {
+		slog.Error("failed to marshal client metadata", "error", err)
+		http.Error(w, "marshal response", http.StatusInternalServerError)
+		return
+	}
+	w.Header().Set("Content-Type", "application/json")
+	_, _ = w.Write(b)
+}
+
+func (s *Server) getDidFromSession(r *http.Request) (string, bool) {
+	session, err := s.sessionStore.Get(r, "oauth-session")
+	if err != nil {
+		slog.Error("getting session", "error", err)
+		return "", false
+	}
+
+	did, ok := session.Values["did"].(string)
+	if !ok {
+		return "", false
+	}
+
+	return did, true
+}
+
+func (s *Server) getUserProfileForDid(did string) (UserProfile, error) {
+	profile, err := s.store.GetHandleAndDisplayNameForDid(did)
+	if err == nil {
+		return UserProfile{
+			Did:         did,
+			Handle:      profile.Handle,
+			DisplayName: profile.DisplayName,
+		}, nil
+	}
+
+	if !errors.Is(err, ErrorNotFound) {
+		slog.Error("getting profile from database", "error", err)
+	}
+
+	profile, err = s.lookupUserProfile(did)
+	if err != nil {
+		return UserProfile{}, fmt.Errorf("looking up profile: %w", err)
+	}
+	err = s.store.CreateProfile(profile)
+	if err != nil {
+		slog.Error("store profile", "error", err)
+	}
+
+	return profile, nil
+}
+
+func (s *Server) lookupUserProfile(did string) (UserProfile, error) {
+	params := url.Values{
+		"actor": []string{did},
+	}
+	reqUrl := "https://public.api.bsky.app/xrpc/app.bsky.actor.getProfile?" + params.Encode()
+
+	resp, err := s.httpClient.Get(reqUrl)
+	if err != nil {
+		return UserProfile{}, fmt.Errorf("make http request: %w", err)
+	}
+
+	defer resp.Body.Close()
+
+	b, err := io.ReadAll(resp.Body)
+	if err != nil {
+		return UserProfile{}, fmt.Errorf("read response body: %w", err)
+	}
+
+	var profile UserProfile
+	err = json.Unmarshal(b, &profile)
+	if err != nil {
+		return UserProfile{}, fmt.Errorf("unmarshal response: %w", err)
+	}
+
+	return profile, nil
+}

status.go

···
+package statusphere
+
+import (
+	"bytes"
+	"context"
+	"encoding/json"
+	"fmt"
+	"io"
+	"log/slog"
+	"net/http"
+	"time"
+
+	"github.com/willdot/statusphere-go/oauth"
+)
+
+type Status struct {
+	URI       string
+	Did       string
+	Status    string
+	CreatedAt int64
+	IndexedAt int64
+}
+
+type XRPCError struct {
+	ErrStr  string `json:"error"`
+	Message string `json:"message"`
+}
+
+type CreateRecordResp struct {
+	URI string `json:"uri"`
+}
+
+func (s *Server) CreateNewStatus(ctx context.Context, oauthsession oauth.Session, status string, createdAt time.Time) (string, error) {
+	privateJwk, err := oauthsession.CreatePrivateKey()
+	if err != nil {
+		return "", fmt.Errorf("create private jwk: %w", err)
+	}
+
+	bodyReq := map[string]any{
+		"repo":       oauthsession.Did,
+		"collection": "xyz.statusphere.status",
+		"record": map[string]any{
+			"status":    status,
+			"createdAt": createdAt,
+		},
+	}
+
+	bodyB, err := json.Marshal(bodyReq)
+	if err != nil {
+		return "", fmt.Errorf("marshal update message request body: %w", err)
+	}
+
+	// TODO: redo this loop business
+	for range 2 {
+		r := bytes.NewReader(bodyB)
+		url := fmt.Sprintf("%s/xrpc/com.atproto.repo.createRecord", oauthsession.PdsUrl)
+		request, err := http.NewRequestWithContext(ctx, "POST", url, r)
+		if err != nil {
+			return "", fmt.Errorf("create http request: %w", err)
+		}
+
+		request.Header.Add("Content-Type", "application/json")
+		request.Header.Add("Accept", "application/json")
+
+		dpopJwt, err := pdsDpopJwt("POST", url, oauthsession.AuthserverIss, oauthsession.AccessToken, oauthsession.DpopPdsNonce, privateJwk)
+		if err != nil {
+			return "", err
+		}
+
+		request.Header.Set("DPoP", dpopJwt)
+		request.Header.Set("Authorization", "DPoP "+oauthsession.AccessToken)
+
+		resp, err := s.httpClient.Do(request)
+		if err != nil {
+			return "", fmt.Errorf("do http request: %w", err)
+		}
+		defer resp.Body.Close()
+
+		if resp.StatusCode == http.StatusOK {
+			var result CreateRecordResp
+			err = decodeResp(resp.Body, &result)
+			if err != nil {
+				// just log error because we got a 200 indicating that the record was created. If this were to be tried again due to an error
+				// returned here, there would be duplicate data
+				slog.Error("decode success response", "error", err)
+			}
+			return result.URI, nil
+		}
+
+		var errorResp XRPCError
+		err = decodeResp(resp.Body, &errorResp)
+		if err != nil {
+			return "", fmt.Errorf("decode error resp: %w", err)
+		}
+
+		if resp.StatusCode == 400 || resp.StatusCode == 401 && errorResp.ErrStr == "use_dpop_nonce" {
+			newNonce := resp.Header.Get("DPoP-Nonce")
+			oauthsession.DpopPdsNonce = newNonce
+			err := s.oauthService.UpdateOAuthSessionDPopPDSNonce(oauthsession.Did, newNonce)
+			if err != nil {
+				slog.Error("updating oauth session in store with new DPoP PDS nonce", "error", err)
+			}
+			continue
+		}
+
+		slog.Error("got error", "status code", resp.StatusCode, "message", errorResp.Message, "error", errorResp.ErrStr)
+	}
+
+	return "", fmt.Errorf("failed to create status record")
+}
+
+func decodeResp(body io.Reader, result any) error {
+	resBody, err := io.ReadAll(body)
+	if err != nil {
+		return fmt.Errorf("failed to read response: %w", err)
+	}
+
+	err = json.Unmarshal(resBody, result)
+	if err != nil {
+		return fmt.Errorf("failed to unmarshal response: %w", err)
+	}
+	return nil
+}