Commit Graph

5036 Commits

Author SHA1 Message Date
Anton Dyudin
6c45cb1264 FIX byte-order bug
see previous commit, native ++hmac byte order was correct for short keys already
2016-03-11 11:16:09 -08:00
Anton Dyudin
8bc6228766 fix ++hmac to work on >64 bit keys
Reload: zuse, vanes

A  swap 3  was being performed which should not have been. Still not confident inthe endianness of the code as a whole, but seems to work for test values.
2016-03-10 20:38:45 -08:00
Anton Dyudin
bbe47f441c factor out token-response keyspec 2016-03-10 20:38:45 -08:00
Anton Dyudin
06e461b542 fix type issues 2016-03-10 20:38:45 -08:00
Anton Dyudin
9f289fd15f better grab-quay error reporting 2016-03-10 20:38:45 -08:00
Anton Dyudin
a8a092074a restructure lib/oauth1 to expose ++add-auth internals 2016-03-10 18:52:30 -08:00
Anton Dyudin
3aa1ceb8b4 better handling of query strings 2016-03-10 13:36:51 -08:00
Anton Dyudin
747f9d57a2 better names for things 2016-03-10 12:04:56 -08:00
Anton Dyudin
cf33f64f81 better token type 2016-03-10 11:47:21 -08:00
Anton Dyudin
302c004032 nicer grab-quay type 2016-03-10 11:45:46 -08:00
Anton Dyudin
f9b1581a28 moved core type, token to lib/oauth1 sample 2016-03-09 20:03:22 -08:00
Anton Dyudin
80eb1f5f06 refactor lib/oauth2 to be security-driver-library shaped,
implement 3-legged login flow(untested)
2016-03-09 18:37:34 -08:00
Anton Dyudin
faf017da53 stub security driver: check that authorization exists 2016-03-09 16:01:15 -08:00
Anton Dyudin
be51072ade fork off |init-oauth1 from |init-oauth2
and discard subdomains in both
2016-03-09 15:56:05 -08:00
Anton Dyudin
738bd1946c Merge branch 'eyre-sec-fixes' into sec-com-twitter
2-layer domain change required to write a proper driver
2016-03-09 14:50:10 -08:00
Anton Dyudin
1f844fd20b more versatile curl 2016-03-09 14:47:24 -08:00
Anton Dyudin
e6978f9305 refactor lib/oauth1 to filter a hiss 2016-03-09 14:35:37 -08:00
Anton Dyudin
b5df1e2e02 Added gall printf for attempting to poke/peer an unstarted app 2016-03-09 12:57:06 -08:00
Anton Dyudin
8ad7321986 clearer naming 2016-03-08 20:32:45 -08:00
Anton Dyudin
c930eef283 clean up paramter handling 2016-03-08 20:25:44 -08:00
Anton Dyudin
d3e3190c51 clean up lib/oauth1 types 2016-03-08 19:49:58 -08:00
Anton Dyudin
50b8fb028b minor oauth1 tweaking 2016-03-08 18:50:14 -08:00
Anton Dyudin
2deeb00431 add path-interpolation functions 2016-03-08 18:44:43 -08:00
Anton Dyudin
956e988581 added +curl-hiss for twitter testing 2016-03-08 18:00:07 -08:00
Anton Dyudin
228a3df700 lib/twitter compiles 2016-03-07 17:38:01 -08:00
Anton Dyudin
f99da08c53 fix #59 libraries disapearing from /+ 2016-03-07 17:30:41 -08:00
Anton Dyudin
96823f230c misc debugging 2016-03-07 17:29:54 -08:00
Raymond Pasco
c0a2ca3c1c Merge commit 'cd31218' of https://github.com/chc4/arvo
Quick hotfix of +cat
2016-03-07 18:08:31 -05:00
chc4
cd31218a04 Fix cat
Someone's merge got messed up, looks like.
2016-03-07 17:37:54 -05:00
Anton Dyudin
3a3bac2f1f 151ify syntax, clean up 2016-03-07 13:42:23 -08:00
Raymond Pasco
b8a5557b80 Merge remote-tracking branch 'cgyarvin/secure'
Dojo subscriber must be ourself or our moon.
2016-03-07 16:42:00 -05:00
C. Guy Yarvin
7edf1c05fc Foreign login only from moons. 2016-03-07 13:40:39 -08:00
Anton Dyudin
4cd86f5b36 fix +cat %g under151ification 2016-03-07 12:47:51 -08:00
Anton Dyudin
27aa5392e6 minor refactoring 2016-03-07 11:05:37 -08:00
Anton Dyudin
5f44ec53b3 partial(twitter) revert of bfd52f9e 'sweeping' 2016-03-07 10:42:05 -08:00
Raymond Pasco
13a71efae7 Merge remote-tracking branch 'galenwp/braces'
Fix a missing brace bug in urb.js
2016-03-05 19:18:58 -05:00
Galen Wolfe-Pauly
dc6e3d9dc8 fix missing braces in error handling 2016-03-05 15:33:31 -08:00
Raymond Pasco
cc2206ae75 Merge branch 'cosmetics', remote-tracking branches 'ohaitch/eyre-sec-fixes' and 'ohaitch/sequential-tree-scripts'
Cosmetic fixes: favicon, ++mold
various security driver refinements
Load tree virtual scripts sequentially
2016-03-04 21:30:44 -05:00
Raymond Pasco
e736516911 Change remaining $-(* *) in arvo to gate
because these ones represent gates to apply, not molds
2016-03-04 21:17:06 -05:00
Raymond Pasco
96b39223a5 Add ++mold synonym for $-(* *)
This is to aid the readability of higher-order molds. Now one can have

|*  a/mold
{p/a q/a}

instead of using $- directly.

The old arvo ++mold becomes ++wind. Cards are like the mathematical dual
to stack frames - they're instructions on whether to wind or unwind the
implicit stack.
2016-03-04 21:15:58 -05:00
Raymond Pasco
d553156290 Revert "slightly compress favicon"
This reverts commit a48c719bf8.
2016-03-04 20:36:13 -05:00
Anton Dyudin
ca35ef83b8 fix up location headers 2016-03-04 16:24:23 -08:00
Anton Dyudin
4f58c390d5 Load tree virtual scripts sequentially
urbit/tree@4eeaad4
2016-03-04 16:04:07 -08:00
Anton Dyudin
cb2ccad17c add google credential json parser |init-oauth2-google 2016-03-04 15:16:31 -08:00
Anton Dyudin
f89646f139 better no-keys warning 2016-03-04 14:33:28 -08:00
Anton Dyudin
d3a9c1b8a0 fix #4: only look at 2 top levels of domain when chosing driver 2016-03-04 14:13:06 -08:00
Raymond Pasco
f51226fd6e Merge remote-tracking branches 'ohaitch/fix-swim-lost-went', 'ohaitch/urbjs-hax-error', 'ohaitch/talk-js-slim' and 'galenwp/comment'
ignore %went in eyre
navigate to "#ERROR" on urb.wALL blit
move js dependencies to be requested from cdn
wrap comment authors in <h2>
2016-03-04 16:20:28 -05:00
Anton Dyudin
f9d9191cf1 simplify googleapis.com scope logic
allowing /+oauth2++endpoint to be removed
2016-03-04 13:11:45 -08:00
Anton Dyudin
fa78c332a6 better handling of 404 2016-03-04 13:09:13 -08:00
Anton Dyudin
cf96ef3ea6 Added raw-url support to lib/oauth2
Closes urbit/urbit#716, closes urbit/urbit#715
2016-03-04 13:09:07 -08:00