Skip to content

#89: grans owns its own Granola credentials #90

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dmwyatt wants to merge 14 commits into
base: main
Choose a base branch
from
Open

#89: grans owns its own Granola credentials #90

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
14 commits
Select commit Hold shift + click to select a range
46e4494
Extract PKCE challenge generation into a shared module
dmwyatt Jul 26, 2026
be13a39
#89: Add a credential store for grans's own Granola session
dmwyatt Jul 26, 2026
b6aa888
#89: Centralize the Granola client identity behind an override
dmwyatt Jul 26, 2026
32cc53e
#89: Add Granola's PKCE login and token refresh
dmwyatt Jul 26, 2026
9848ef6
#89: Resolve tokens from grans's own credentials before Granola's store
dmwyatt Jul 26, 2026
e7c066a
#89: Add `grans auth` login, status and logout
dmwyatt Jul 26, 2026
69c5ff8
#89: Document signing grans in, and correct the macOS claim
dmwyatt Jul 26, 2026
f9a2357
#89: Split reading Granola's local token store out of auth.rs
dmwyatt Jul 26, 2026
8f67e55
#89: Accept the URL the login actually lands on
dmwyatt Jul 26, 2026
0bd8101
#89: Find the tokens in the exchange response, and say so when they a…
dmwyatt Jul 26, 2026
027c66e
#89: Correct the comments claiming Granola rotates refresh tokens
dmwyatt Jul 26, 2026
1b20f48
#89: Describe the api/ auth modules in CLAUDE.md
dmwyatt Jul 26, 2026
34b57af
#89: Create the credential file private, rather than tightening it after
dmwyatt Jul 26, 2026
0368b32
#89: Keep the refresh token in the platform keychain
dmwyatt Jul 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 6 additions & 1 deletion CLAUDE.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -58,7 +58,12 @@ CLI (main.rs, cli/) → Commands (commands/) → DB queries (db/) → SQLite
- **cli/**: Clap derive definitions and `RunContext` (output mode)
- **commands/**: Dispatch to db/ queries or api/ calls, select output formatter
- **api/**: Granola API client and authentication
- `auth.rs`: Reads auth token from Granola's `supabase.json` config
- `auth.rs`: Token resolution order (`--token`/`GRANS_TOKEN`, stored credentials, local store)
- `credentials.rs`: The `GranolaCredentials` type (refresh token, access token, expiry)
- `credential_store.rs`: Where they live: platform keychain, falling back to a `0600` `auth.toml`
- `granola_auth.rs`: Granola PKCE login and token refresh
- `local_store.rs`: Reads the token Granola's desktop app stored (legacy fallback)
- `identity.rs`: Client version/platform reported to Granola (`GRANS_GRANOLA_VERSION`)
- `client.rs`: HTTP client for Granola API endpoints
- `types.rs`: API request/response wrappers (domain types live in `models.rs`)
- **db/**: SQLite queries, FTS5 search, upsert logic
Expand Down
Loading
Loading