Files

T

woggioni 71493f720b Fix OIDC subject collisions by introducing canonical provider-plus-subject principals

- Add canonical_principal(provider, sub) => 'oidc:v1:<provider>:<sub>'
- Preserve provider identity across HTTP sessions and WebSockets
- Apply principals throughout: game creation/joining/seating, WebSocket views/actions,
  Redis engine state, match history, leaderboard focus, ratings, /api/me, OpenAPI,
  and telemetry
- Widen identity columns to 1024 chars with schema-only aerich migration (5_20261024221522_canonical_principals.py)
- Document provider names as stable security identifiers
- Add regression tests: same subject at different providers cannot share games, private hands,
  join codes, moves, history, or ratings; distinct seat and rating ownership verified
- All platform, integration, game, and frontend tests pass; mypy clean

2026-10-24 22:25:44 +00:00

src/tavolo

Fix OIDC subject collisions by introducing canonical provider-plus-subject principals

2026-10-24 22:25:44 +00:00

pyproject.toml

Migrate the backend from pip to uv

2026-10-19 18:19:20 +00:00

README.md

Migrate the backend from pip to uv

2026-10-19 18:19:20 +00:00

README.md

tavolo-app

The deployable tavolo application: the composition root wiring tavolo-platform to the tavolo-scopone, tavolo-scopa and tavolo-briscola games.

app.py — assembles the KayaApp (session/OIDC/Tortoise/OpenAPI mixins plus PlatformMixin and the deadline scheduler), registers the ScoponeEngine, ScopaEngine, ScopaQuattroEngine, BriscolaEngine, BriscolaQuattroEngine and BriscolaChiamataEngine with their configured timeouts, and exposes tavolo.app:app for granian.
config.py — environment-driven frozen Settings.
telemetry.py — the optional OpenTelemetry wiring beyond kaya-otel: meter/tracer/logger providers, the tavolo.active_users/tavolo.ongoing_games gauges (polled from the stores), process/CPython metrics via opentelemetry-instrumentation-system-metrics, Postgres/Redis query spans via the asyncpg/redis instrumentations, and OTLP log export.
aerich_config.py — Tortoise ORM configuration consumed by the aerich CLI (migrations live in server/migrations/; aerich itself is configured via the [tool.aerich] section of server/pyproject.toml).
logging_config.py — logging setup.
static.py — SPA shell hosting for the compiled frontend.

Development (from `packages/tavolo-app/`)

uv run mypy --namespace-packages --explicit-package-bases \
  src/tavolo/app.py \
  src/tavolo/config.py \
  src/tavolo/telemetry.py \
  src/tavolo/static.py \
  src/tavolo/aerich_config.py \
  src/tavolo/logging_config.py

End-to-end coverage of the wired stack lives in server/tests/.

README.md

tavolo-app

Contents

Development (from packages/tavolo-app/)

Development (from `packages/tavolo-app/`)