swift-tangled
A practical Tangled CLI nnabeyang.tngl.sh/swift-tangled
tangled atproto cli
Star 8
Fork 0
Watch

feat: add TMB session refresh client #213

Merged nnabeyang.tngl.sh
targeting main
Merged opened by and assigned to nnabeyang.tngl.sh
targeting main

Use persisted TMB sessions for direct authenticated PDS requests.

  • create DPoP-bound requests with the session proof key
  • update and persist PDS DPoP nonces from responses
  • rotate TMB refresh tokens before access-token expiry
  • coalesce concurrent refresh attempts within the session agent
  • add tng auth agent tmb verify and session logout workflows
  • return structured authentication and API failures without exposing tokens

Direct PDS traffic remains between tng and the account PDS; the TMB is used for OAuth session lifecycle operations.

This pull request has no versions submitted yet.