netris-nestri

mirror of https://github.com/nestriness/nestri.git synced 2026-11-09 00:42:27 +02:00

Files

T

Wanjohi ada368bf66 feat(auth): an installer device client whose session lasts one step

A host installer needs a signed-in session for exactly one call: trading
it for a single-use host token. It runs as root, on a machine that may
not belong to the person signing in, so a 30-day session with a year of
refresh behind it is far more than it should ever hold.

The issuer gains `clientTTL`, a per-client override of token lifetimes
that wins over what the sign-in asks for, and a refresh lifetime of 0
now means no refresh token is issued at all rather than one that
expires immediately. The `installer` client is allowed to start a
device grant and gets 15 minutes and no refresh token. The desktop
client keeps its defaults.

2026-10-16 00:52:54 +03:00

api

feat(install): bash <(curl …) -u updates a host; the script asks sudo itself (#411 )

2026-10-16 00:31:51 +03:00

auth

feat(auth): an installer device client whose session lasts one step

2026-10-16 00:52:54 +03:00

nescapture

feat: update pixelforge

2026-10-12 13:49:50 +03:00

nescope

fix(nescope): answer every commit, not only a mapped window's