halkyon-days/halkyon
Watch
1
0
Fork
You've already forked halkyon
 0
Code Issues Pull requests Projects Releases 37 Packages Wiki Activity Actions 1

fix(auth): a reset not carried out lapses a week after it took effect

Browse source 
The full reading's M2: a reset of the authenticators asked and forgotten
left the account to the password alone for good, and an account's reset
could be carried out a year after it was asked. Now a reset that took
effect and wasn't carried out lapses a week later, as never asked: the
password alone no longer signs in, a code still does, and asked again it
waits anew with a new mail. A reset of the authenticators carried out never
lapses (the password alone signs in until one is confirmed). The daily
pruning forgets lapsed rows (forgetLapsedResets).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>
This commit is contained in:
Tizian 「ティツィアーン」 2026-10-21 13:00:39 +02:00
commit 43fcc8aac2
Signed by: raisondetredev
GPG key ID: 07F6FCF405488B64
1 changed files with 441 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

2
packages/halkyon_base_server/lib/base.dart
View file

@ -20,6 +20,8 @@ export 'src/generated/protocol.dart' hide Protocol;
export 'src/halkyon_base.dart';
export 'src/instance/data_location.dart';
export 'src/instance/source_code.dart';
export 'src/password/account_resets.dart'
show forgetLapsedResets, resetLapsesAfter;
export 'src/password/authenticators.dart'
show
forgetUnconfirmedAuthenticators,