Skip to content

Conversation

@brunopagno
Copy link
Contributor

@brunopagno brunopagno commented Jan 16, 2026

Counterpart of opf/op-blocknote-hocuspocus#32

What are you trying to accomplish?

Package parameters from rails counterpart so that we can properly validate them in Hocuspocus

What approach did you choose and why?

The parameters are packaged into a JWT using symmetric signatures to allow validation.

Merge checklist

  • Added/updated tests
  • Added/updated documentation in Lookbook (patterns, previews, etc)
  • Tested major browsers (Chrome, Firefox, Edge, ...)

@brunopagno brunopagno self-assigned this Jan 16, 2026
@brunopagno brunopagno requested a review from a team January 16, 2026 14:46
@brunopagno
Copy link
Contributor Author

brunopagno commented Jan 16, 2026

@judithroth @akabiru asking for an early review, not sure if this is how it's going to look when ready

@judithroth
Copy link
Contributor

judithroth commented Jan 16, 2026

@judifer @akabiru asking for an early review, not sure if this is how it's going to look when ready

You tagged the wrong Judith :D but I saw it anyway and will take a look 🙂

@brunopagno
Copy link
Contributor Author

You tagged the wrong Judith :D but I saw it anyway and will take a look 🙂

You're right 🤦, my bad. Too many things at once. I editted the message

Copy link
Contributor

@judithroth judithroth left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

So far this looks good for me! It would be nice to also have some tests here, but I think that could be a separate PR so we get this out faster.

resource_url: @resource_url,
oauth_token:,
readonly: @readonly,
exp: 20.minutes.from_now.to_i
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If this only expires the token_payload, not the token itself, I think 20 minutes are too long. I'd rather go for 5 minutes here.

@@ -43,7 +43,7 @@
component.with_main(classes: "op-document-view--main") do
flex_layout(align_items: :center) do |flex|
flex.with_row(classes: "op-document-view--header") do
render Documents::ShowEditView::PageHeaderComponent.new(document, project:, state:, readonly:)
render Documents::ShowEditView::PageHeaderComponent.new(document, project:, state:)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good catch!

@brunopagno brunopagno force-pushed the impl/70603-pack-hocuspocus-sync-params branch from aa20c31 to 7a1b660 Compare January 19, 2026 11:47
@brunopagno brunopagno requested a review from judithroth January 19, 2026 11:58
@brunopagno brunopagno changed the base branch from dev to release/17.0 January 19, 2026 12:34
@brunopagno
Copy link
Contributor Author

Closing in favour of #21720

@brunopagno brunopagno closed this Jan 19, 2026
@github-actions github-actions bot locked and limited conversation to collaborators Jan 19, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants