feat(igotify): wire the assist bridge with a Gotify client token #74

Merged
rock merged 1 commits from feat/igotify-token into main 2026-10-27 19:15:12 +00:00
Member

Server-side bridge uses a Gotify client token instead of ZITADEL. Token belongs to rock, never idles out, stored in SOPS.

Server-side bridge uses a Gotify client token instead of ZITADEL. Token belongs to rock, never idles out, stored in SOPS.
poimen added 1 commit 2026-10-27 19:14:32 +00:00
The bridge runs server-side, so it cannot run a browser flow and ZITADEL has no
part in it. Give it a Gotify client token instead: GOTIFY_URLS points at the
public host, GOTIFY_CLIENT_TOKENS comes from a SOPS secret.

The token belongs to user `rock`, is named igotify-assist, and has
expiresAfterInactivitySeconds 0 so it never idles out. Delete the client row in
Gotify to revoke it.

Verified with the token: GET /client returns 200 and GET /message returns the
latest message.
rock merged commit 863c11d75f into main 2026-10-27 19:15:12 +00:00
Sign in to join this conversation.