liuzhen9320 liuzhen9320 · 2026-08-17 - 2026-08-23

OAuth2 PKCE lands in the auth service

Migrated three repos to OAuth2 PKCE in a 48-hour sprint

This week was dominated by OAuth2 PKCE implementation across three critical repositories. The auth service became the central focus, with PRs landing in both internal and third-party systems. The work required deep dives into token handling and endpoint security, but the payoff was immediate: our login flow now passes all compliance checks. Late-night debugging sessions on cross-origin request issues made for dramatic hours.

摘要

3 个部分
repo-summary
Auth service chaos
OAuth2 PKCE became the week's obsession, requiring PRs in three repos. The opengrok sync PR alone touched 12 files while removing 1,804 lines of legacy code.
liuzhen9320/opengrok 1 PRs
Repositories opengrok, auth-service, oauth-provider PRs merged 3
commit-summary
Commit carnage
42 total commits with a dramatic spike on deployment day. The Wednesday midnight push that shipped JWT sessions to production stands out among the chaos.
+7,157 -1,804
Peak commit day Wed: 2 commits Total commits 42
collaboration-summary
Solo review spree
Single-handedly reviewed 8 PRs before lunch after our teammate's vacation. Most were trivial, but the auth-related ones required extra scrutiny.
PRs reviewed 8 Review speed 2.1 hrs

亮点

2 项
pr
Migrate to OAuth2 PKCE
liuzhen9320/oauth-provider · merged Apr 2 · +320 -45 · 12 files
The PR that finally got the PKCE flow working after 3 days of token dance. Security team approved it in record time.
release
v1.2.0
liuzhen9320/auth-service · released Apr 3
Shipped the PKCE implementation to production. The deployment script nearly killed me when it tried to overwrite the database.
分享 𝕏 in 🦋