You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: internal/docs/ROADMAP.md
+33-2Lines changed: 33 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,7 +4,8 @@ Noteleaf is a command-line and TUI tool for managing tasks, notes, media, and ar
4
4
5
5
## Core Usability
6
6
7
-
The foundation across all domains is implemented. Tasks support CRUD operations, projects, tags, contexts, and time tracking. Notes have create, list, read, edit, and remove commands with interactive and static modes. Media queues exist for books, movies, and TV with progress and status management. SQLite persistence is in place with setup, seed, and reset commands. TUIs and colorized output are available.
7
+
The foundation across all domains is implemented. Tasks support CRUD operations, projects, tags, contexts, and time tracking.
8
+
Notes have create, list, read, edit, and remove commands with interactive and static modes. Media queues exist for books, movies, and TV with progress and status management. SQLite persistence is in place with setup, seed, and reset commands. TUIs and colorized output are available.
8
9
9
10
## RC
10
11
@@ -43,7 +44,7 @@ The foundation across all domains is implemented. Tasks support CRUD operations,
43
44
#### Publication
44
45
45
46
-[x] Implement authentication with BlueSky/leaflet (AT Protocol).
46
-
-[ ] Add OAuth2
47
+
-[ ] Add [OAuth2](#publications--authentication)
47
48
-[x] Verify `pub pull` fetches and syncs documents from leaflet.
48
49
-[x] Confirm `pub list` with status filtering (`all`, `published`, `draft`).
49
50
-[ ] Test `pub post` creates new documents with draft/preview/validate modes.
@@ -206,6 +207,36 @@ Features that demonstrate Go proficiency and broaden Noteleaf’s scope.
206
207
-[ ] Export to multiple formats
207
208
-[ ] Linking with tasks and notes
208
209
210
+
### Publications & Authentication
211
+
212
+
-[ ] OAuth2 authentication for AT Protocol
213
+
-[ ] Client metadata server for publishing application details
214
+
-[ ] DPoP (Demonstrating Proof of Possession) implementation
215
+
-[ ] ES256 JWT generation with unique JTI nonces
216
+
-[ ] Server-issued nonce management with 5-minute rotation
217
+
-[ ] Separate nonce tracking for authorization and resource servers
218
+
-[ ] PAR (Pushed Authorization Requests) flow
219
+
-[ ] PKCE code challenge generation
220
+
-[ ] State token management
221
+
-[ ] Request URI handling
222
+
-[ ] Identity resolution and verification
223
+
-[ ] Bidirectional handle verification
224
+
-[ ] DID resolution from handles
225
+
-[ ] Authorization server discovery via .well-known endpoints
226
+
-[ ] Token lifecycle management
227
+
-[ ] Access token refresh (5-15 min lifetime recommended)
228
+
-[ ] Refresh token rotation (180 day max for confidential clients)
229
+
-[ ] Concurrent request handling to prevent duplicate refreshes
0 commit comments