hypercerts-org/ePDS

extended PDS with smoother sign-up / login experience

Stars: 8
Forks: 4
Open beginner issues: 0
Indexed issues: 12
Avg merge: 5d 11h
Merged PRs (30d): 3

Dominant language: TypeScript
License: No license data
Last GitHub push: Sep 16, 2026
Latest indexed: Sep 20, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

12 open issues indexed

OAuth clients with granular scopes cannot call a third-party service (CGS) through this PDS: proxy checks the rpc permission against the bare DID Open

Difficulty 4/5 3-5 days Newbie friendliness 58/100

hypercerts-org/ePDS#250 · Opened Sep 9, 2026
Consider explicit SMTP timeouts on the OTP transport (deferred from #183) Open

DevOps / infra Product: ePDS

Difficulty 5/5 Over a week Newbie friendliness 25/100

hypercerts-org/ePDS#205 · Opened Jul 20, 2026
Brand the password-reset email with a light 'Powered by Certified' style for all clients Open

Product: ePDS Quality: UX

hypercerts-org/ePDS#182 · 1 assignee · Opened Jun 29, 2026
Nice-to-have: expose whether an account has a password set (e.g. hasPassword on getSession) Open

Product: ePDS

hypercerts-org/ePDS#181 · 1 assignee · Opened Jun 24, 2026
Sign-in shows raw {"error":"CSRF validation failed"} when epds_csrf cookie is absent at POST Open

bug Product: ePDS

Difficulty 4/5 3-5 days Newbie friendliness 45/100

hypercerts-org/ePDS#179 · 1 comment · Opened Jun 19, 2026
Separate OTP namespaces for login vs recovery (defense in depth) Open

Product: ePDS Quality: security Tech debt

hypercerts-org/ePDS#108 · 1 assignee · Opened Apr 22, 2026
per-client welcome vs sign-in email using upstream authorizedClients Open

bug Product: ePDS

hypercerts-org/ePDS#66 · 1 assignee · Opened Apr 10, 2026
cleanup: remove dead verification_token table and operations Open

Product: ePDS Tech debt

Difficulty 3/5 1-2 days Newbie friendliness 72/100

hypercerts-org/ePDS#39 · Opened Mar 26, 2026
security: metrics endpoint uses non-timing-safe password comparison Open

Product: CGS Quality: security

Difficulty 2/5 1-3 hours Newbie friendliness 85/100

hypercerts-org/ePDS#40 · Opened Mar 26, 2026
security: backup email verification tokens have no server-side expiry Open

bug Product: ePDS Quality: security

hypercerts-org/ePDS#38 · 1 assignee · Opened Mar 26, 2026
Refactor: decompose large functions introduced/worsened by handle selection PR Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

hypercerts-org/ePDS#18 · 1 comment · Opened Mar 14, 2026
Add version number to callback HMAC protocol Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

hypercerts-org/ePDS#17 · Opened Mar 14, 2026

A short digest of beginner-friendly GitHub issues.