mirror of https://github.com/profullstack/logicsrc.git synced 2026-08-13 22:37:29 +00:00

History

Anthony Ettinger cf475f0f4c Some checks are pending CI / build (push) Waiting to run Details test / test (push) Waiting to run Details fix(cli): point `logicsrc login` at the real app + add device-code login `logicsrc login` defaulted to http://localhost:4010 — a dev origin that doesn't exist on an installed machine, so the printed authorize URL went nowhere. It now defaults to the hosted credentials app (apps/pwa), reads the documented $LOGICSRC_API, and only reuses a stored apiUrl once that identity has actually completed a login (which is how machines got stuck pointing at localhost). Note logicsrc.com is the marketing site and has no /cli routes. The loopback flow is also unusable over SSH: redirect_uri is http://127.0.0.1:<port>/callback, which resolves to the browser's machine, not the CLI's. Added a device-authorization flow — the CLI prints a short user_code, the human approves it from any browser: POST /cli/device/code mint device_code + user_code (10 min TTL) GET /cli/device approve page (login required; typo-tolerant) POST /cli/device approve/deny (CSRF-guarded browser form) POST /cli/device/token CLI polls -> lsk_ API key device_code is stored sha256-hashed, single-use, with authorization_pending / slow_down / access_denied / expired_token poll semantics. The CLI picks the flow automatically (SSH/CI/no-DISPLAY -> device), with --device/--web to force it and a fallback to loopback against servers without /cli/device. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>		2026-07-28 18:07:49 +00:00
..
public	feat(pwa): logicsrc credentials app — real auth + Turso, redesigned; retire commandboard-api credshare	2026-07-13 14:29:29 +00:00
src	fix(cli): point `logicsrc login` at the real app + add device-code login	2026-07-28 18:07:49 +00:00
.env.example	feat(pwa): logicsrc credentials app — real auth + Turso, redesigned; retire commandboard-api credshare	2026-07-13 14:29:29 +00:00
.gitignore	feat(pwa): logicsrc credentials app — real auth + Turso, redesigned; retire commandboard-api credshare	2026-07-13 14:29:29 +00:00
package.json	feat(pwa): logicsrc credentials app — real auth + Turso, redesigned; retire commandboard-api credshare	2026-07-13 14:29:29 +00:00
Procfile	feat(pwa): logicsrc credentials app — real auth + Turso, redesigned; retire commandboard-api credshare	2026-07-13 14:29:29 +00:00
railway.json	feat(pwa): logicsrc credentials app — real auth + Turso, redesigned; retire commandboard-api credshare	2026-07-13 14:29:29 +00:00
README.md	feat(pwa): logicsrc credentials app — real auth + Turso, redesigned; retire commandboard-api credshare	2026-07-13 14:29:29 +00:00

README.md

@logicsrc/pwa — LogicSRC credentials

Express + libSQL/Turso app for team credential sharing: auth (email/password, passkeys, CoinPay OAuth, sessions, lsk_ CLI API keys) + end-to-end-encrypted team vaults. Zero-knowledge — the server only stores ciphertext, per-member sealed vault keys, and identity public keys. Decryption happens in the logicsrc CLI.

cp .env.example .env      # set SESSION_SECRET; TURSO_* for prod (else local file db)
npm install
npm start                 # migrates on boot, serves on :8080

The CLI connects with LOGICSRC_API=<origin> logicsrc login (browser OAuth-PKCE loopback → an lsk_ key). See docs/credential-sharing.md in the repo root.