Make every Synapsis installation register its exact Stuffbox callback automatically, persist the returned public client identity through PKCE, and remove manual operator client setup.

Hop-State: A_06FP9ZHD1XSYW28M9X8V7QR
Hop-Proposal: R_06FP9ZFX5NN6M3YRB1XHX2R
Hop-Task: T_06FP9XCTDAAN1SZZVBD5G5R
Hop-Attempt: AT_06FP9XCTDBN2JFGK1XC6830
This commit is contained in:
2026-07-15 01:56:47 -07:00
committed by Hop
parent e1a7f5018f
commit 848f6f93e0
9 changed files with 279 additions and 21 deletions
+1 -1
View File
@@ -61,7 +61,7 @@ Uninstalling preserves the database and environment by default. Pass `--purge-da
The node database is a local embedded Turso/SQLite file. Media remains in storage controlled by each user, so exported accounts retain portable media URLs and can move between Synapsis nodes without requiring the old node to transfer a shared upload directory.
Stuffbox is the default integration. New installs use `https://stuffbox.xyz`; set `STUFFBOX_URL` to a different public URL when using another or self-hosted Stuffbox service. Synapsis uses a consent and PKCE flow, keeps the resulting tokens encrypted with `AUTH_SECRET`, and sends file bytes directly from the user's browser to Stuffbox.
Stuffbox is the default integration. New installs use `https://stuffbox.xyz`; set `STUFFBOX_URL` to a different public URL when using another or self-hosted Stuffbox service. Each Synapsis install registers its callback automatically the first time a user connects, so node operators do not need to create or configure a Stuffbox client ID. Synapsis uses a consent and PKCE flow, keeps the resulting tokens encrypted with `AUTH_SECRET`, and sends file bytes directly from the user's browser to Stuffbox.
User-owned S3-compatible storage remains available as an advanced fallback. Supported providers include AWS S3, Cloudflare R2, Backblaze B2, Wasabi, and Contabo.