6dcc699 · rachel/tessera

Commit Detail

Commit 6dcc699

Author: Rachel Chen <rachel@chens.email> 2026-04-26 19:41:53 -0700
Parents: (root commit)
Tree: 1ad8fb4

feat(tessera): bootstrap Cloudflare Workers OIDC provider

Files changed

169 files changed+169 added

Adocs/migrations/anvil.md

Adocs/migrations/bland.md

Adocs/migrations/flamemail.md

Adocs/migrations/git-on-cloudflare.md

Adocs/phase-1-design.md

Adocs/phase-1-inventory.md

Adocs/tessera-phase-1-design.md

Adocs/tessera-phase-2-implementation.md

Adrizzle-d1.config.ts

Adrizzle/d1/0000_skinny_titania.sql

Adrizzle/d1/meta/_journal.json

Adrizzle/d1/meta/0000_snapshot.json

Apublic/icons/apple-touch-icon.png

Apublic/icons/favicon-16x16.png

Apublic/icons/favicon-32x32.png

Apublic/icons/favicon.ico

Apublic/icons/icon.svg

Apublic/icons/oauth-logo-120.png

AREADME.md

Ascripts/build-icons.ts

Ascripts/seed-bootstrap-invite.ts

Ascripts/test-client/run.ts

Ascripts/test-consent/run.ts

Asrc/client/app.tsx

Asrc/client/components/admin/launcher-tile-picker.tsx

Asrc/client/components/app-shell.tsx

Asrc/client/components/editorial-message.tsx

Asrc/client/components/error-boundary.tsx

Asrc/client/components/footer.tsx

Asrc/client/components/header.tsx

Asrc/client/components/turnstile-widget.tsx

Asrc/client/components/ui/back-link.tsx

Asrc/client/components/ui/button.tsx

Asrc/client/components/ui/card.tsx

Asrc/client/components/ui/confirm-button.tsx

Asrc/client/components/ui/contact-email.tsx

Asrc/client/components/ui/error-banner.tsx

Asrc/client/components/ui/google-icon.tsx

Asrc/client/components/ui/input.tsx

Asrc/client/components/ui/nav-card.tsx

Asrc/client/components/ui/page-error.tsx

Asrc/client/components/ui/page-header.tsx

Asrc/client/components/ui/row.tsx

Asrc/client/components/ui/secret-reveal-card.tsx

Asrc/client/hooks/use-auth-guard.ts

Asrc/client/lib/auth-client.ts

Asrc/client/lib/config-provider.tsx

Asrc/client/lib/config.ts

Asrc/client/lib/format.ts

Asrc/client/lib/handle.ts

Asrc/client/lib/http.ts

Asrc/client/lib/launcher-icons.ts

Asrc/client/lib/navigation.ts

Asrc/client/lib/sign-in-oauth.ts

Asrc/client/lib/social.ts

Asrc/client/lib/use-fetch.ts

Asrc/client/main.tsx

Asrc/client/pages/account/apps.tsx

Asrc/client/pages/account/identities.tsx

Asrc/client/pages/account/index.tsx

Asrc/client/pages/account/password.tsx

Asrc/client/pages/account/profile.tsx

Asrc/client/pages/account/sessions.tsx

Asrc/client/pages/admin/clients.tsx

Asrc/client/pages/admin/invites.tsx

Asrc/client/pages/admin/users.tsx

Asrc/client/pages/auth-error.tsx

Asrc/client/pages/invite/accept.tsx

Asrc/client/pages/invite/consumed.tsx

Asrc/client/pages/invite/expired.tsx

Asrc/client/pages/landing.tsx

Asrc/client/pages/launcher.tsx

Asrc/client/pages/not-found.tsx

Asrc/client/pages/oauth/consent.tsx

Asrc/client/pages/privacy.tsx

Asrc/client/pages/sign-in.tsx

Asrc/client/pages/terms.tsx

Asrc/client/styles/app.css

Asrc/shared/role.ts

Asrc/types/vite-env.d.ts

Asrc/worker/api/account.ts

Asrc/worker/api/admin/clients.ts

Asrc/worker/api/admin/invites.ts

Asrc/worker/api/admin/users.ts

Asrc/worker/api/config.ts

Asrc/worker/api/connected-apps.ts

Asrc/worker/api/invites.ts

Asrc/worker/api/launcher.ts

Asrc/worker/api/request.ts

Asrc/worker/api/sign-in-social.ts

Asrc/worker/api/sign-in.ts

Asrc/worker/auth/argon2.ts

Asrc/worker/auth/ban.ts

Asrc/worker/auth/cli-config.ts

Asrc/worker/auth/index.ts

Asrc/worker/config.ts

Asrc/worker/db/index.ts

Asrc/worker/db/schema/auth.ts

Asrc/worker/db/schema/index.ts

Asrc/worker/db/schema/invites.ts

Asrc/worker/hono.ts

Asrc/worker/http.ts

Asrc/worker/index.ts

Asrc/worker/logger.ts

Asrc/worker/middleware/admin-allowlist.ts

Asrc/worker/middleware/auth.ts

Asrc/worker/middleware/headers.ts

Asrc/worker/middleware/origin.ts

Asrc/worker/middleware/rate-limit.ts

Asrc/worker/security/timing-safe.ts

Asrc/worker/services/crypto.ts

Asrc/worker/services/turnstile.ts

Asrc/worker/services/url.ts

Atests/assets/.keep

Atests/client/sign-in-oauth.test.ts

Atests/client/social-sign-in.test.ts

Atests/e2e/global-setup.ts

Atests/e2e/harness.ts

Atests/e2e/helpers/token.ts

Atests/e2e/playwright.config.ts

Atests/e2e/specs/invite-flow.spec.ts

Atests/env.d.ts

Atests/setup.ts

Atests/tsconfig.json

Atests/worker/account-linking.test.ts

Atests/worker/admin-allowlist.test.ts

Atests/worker/admin-clients.test.ts

Atests/worker/admin-invites-create.test.ts

Atests/worker/admin-invites-pagination.test.ts

Atests/worker/admin-self-modify.test.ts

Atests/worker/argon2.test.ts

Atests/worker/auth-secret.test.ts

Atests/worker/ban-cleanup.test.ts

Atests/worker/ban-defense.test.ts

Atests/worker/bootstrap-admin.test.ts

Atests/worker/config.test.ts

Atests/worker/connected-apps-block.test.ts

Atests/worker/headers-cache.test.ts

Atests/worker/helpers.ts

Atests/worker/invite-flow.test.ts

Atests/worker/jwt-surface.test.ts

Atests/worker/logger.test.ts

Atests/worker/oauth-token.test.ts

Atests/worker/oidc-claims.test.ts

Atests/worker/oidc-discovery.test.ts

Atests/worker/origin-csrf.test.ts

Atests/worker/rate-limit.test.ts

Atests/worker/remote-ip.test.ts

Atests/worker/sign-in-social.test.ts

Atests/worker/sign-in.test.ts

Atests/worker/sign-out.test.ts

Atests/worker/turnstile.test.ts

Atsconfig.json

Atsconfig.scripts.json

Avite.config.ts

Avitest.config.ts

Awrangler.jsonc