v0.6.7-wisp.e776556

pds.wisp.place build: + forget sign-in devices of deleted accounts and idle ones

v0.6.7-wisp.450f0cd

pds.wisp.place build: + sso shortcut on /oauth/authorize

v0.6.7-wisp.0b71df0

pds.wisp.place build: + GitHub sign-ups set a password

v0.6.7-wisp.f88b2e1

pds.wisp.place build: + source link on every app page

v0.6.7-wisp.7b052af

pds.wisp.place build: v0.6.7 + turnstile + wisp sign-up + migration DID login + source link

v0.6.7

Version 0.6.7 Features and noteworthy implementation changes: - OAuth tokens now get their scopes, collapsed into the minimal equivalent set and brotli compressed to minimise the size of tokens. Thanks lou.gg (did:plc:w64dlsa4zwjv2wljlvmymldc)! - Update getServiceAuth to support the new aud parameter as per proposal 0014 (https://github.com/bluesky-social/proposals/tree/main/0014-service-auth-revised). Thanks lou.gg (did:plc:w64dlsa4zwjv2wljlvmymldc)! - Second OAuth flow and consent screen overhaul to better support transitional scopes, and to be more robust to erroneous or nonsensical scope requests. Thanks trezy.codes (did:plc:4jrld6fwpnwqehtce56qshzv)! - The S3 blob storage backend now supports a path config parameter. Thanks calico.lgbt (did:plc:qthgnl7ryv5fmh6lnssdmo6w)! - Unified various in-mem caches into the PDS cache. - Tranquil now serves on-demand TLS responses suitble for Caddy under `/.well-known/caddy/ask`.

Bug fixes: - Fix the URI parsing to support non-authority URIs. Thanks jack.is (did:plc:cwdkf4xxjpznceembuuspt3d)! - Restore RPC scopes for delegation presets. Thanks trezy.codes (did:plc:4jrld6fwpnwqehtce56qshzv)! - Keep blob ownership per user so we don't risk deleting an in-use blob that's used by multiple people. Thanks jola.dev (did:plc:bvraa6gajy4tfr3eh2sisdkr)! - Add MIME version to out going emails as mandated by RFC 2045. Thanks luna.pds.devcat.one (did:plc:qij7bjzgwlshfr2fljkjd7gc)! - Loosen CORS header requirements to be more flexible to apps adding unexpected headers. Thanks jola.dev (did:plc:bvraa6gajy4tfr3eh2sisdkr)! - Don't accidentally block migrations by denying signPlcOperation requests that remove the PDSs rotation keys.

v0.6.6

Version 0.6.6

Major changes: - Permission sets now work properly with delegated accounts and the permission consent screen has gotten a face lift. Thanks trezy.codes (did:plc:4jrld6fwpnwqehtce56qshzv)! - To support Bluesky Tranquil has to implement a variety of non-spec behaviours. These can now be disabled at compile time with the `bsky-support` Cargo feature. Additionally the `bsky` Cargo feature can now be used to disable Bluesky specific features like the age assurance override. - Postgres now also supports the kind of structural repair that was added to tranquil-store last version. - Tranquil can now also serve HTTP/3 traffic on it's own. - The ripple cache backend now uses QUIC instead of TCP. Notable bug fixes and smaller best practice or compatibility changes: - Inter service auth tokens are now minted with uppercase `JWT` instead of lowercase `jwt` in the `typ` header claim. Thanks ave.zone (did:plc:mchrltkrhuzpxleiwpmmvpar)! - At least for now cred auth token expiry time now matches the higher expirys of the ref impl. Thanks ave.zone (did:plc:mchrltkrhuzpxleiwpmmvpar)! - At least for now cred auth token reuse has been given a 2 hour grace period to match the ref impl behaviour. Thanks ave.zone (did:plc:mchrltkrhuzpxleiwpmmvpar)! - did:web accounts are no longer required to have the bogus #atproto_reserved verification method in their DID document during sign up. - tranquil-store has recieved a variety of op related bug fixes. - autocomplete is now no longer blocked for the TOTP field during login. Thanks igneousflock.dev (did:plc:mwpubvpiaddthywa6tqvg7kv)!

v0.6.5

Version 0.6.5

- (PR#175) Authenticated Bluesky feedgens now work properly. Thank you to @ave.zone (did:plc:mchrltkrhuzpxleiwpmmvpar). - (PR#162) putRecord without a $type now pulls the type off of the collection instead of failing. - tranquil-store now has some MST self healing features.

v0.6.4

- Firehose no longer drops events when sequence numbers commit out of order. - Migration follows the oauth account:* spec (ie. *don't* use that lol) and supports p256 keys. - Nix data storage paths now default off the dataDir option. - TlsConfig rejects unknown keys, and the toolchain moves to rust 1.96.

v0.6.3

Version 0.6.3

v0.6.2

Version 0.6.2

v0.6.0

Version 0.6.0

v0.5.7

Version 0.5.7

v0.5.6

Version 0.5.6

v0.5.5

Version 0.5.5

v0.5.4

Version 0.5.4

v0.5.3

Version 0.5.3

v0.5.2

Version 0.5.2

v0.5.1

Version 0.5.1

v0.5.0

Version 0.5.0

v0.4.7

Version 0.4.7

v0.4.6

Version 0.4.6

v0.4.5

Version 0.4.5

v0.4.4

Version 0.4.4

v0.4.3

Version 0.4.3

v0.4.2

Version 0.4.2

v0.4.1

Version 0.4.1

v0.4.0

Version 0.4.0

v0.3.1

Version 0.3.1

v0.3.0

Version 0.3.0

v0.2.1

Version 0.2.1

v0.2.0

Version 0.2.0

v0.1.0

Version 0.1.0