fix(auth): a member asks the register whose account it is before a deletion's proof counts
The reading of the full reading's fixes found (B1) that a member asked the register knownAccounts inside the owner-proof try, so ten tries to delete while the register was out of reach ended the owner's session, though no proof ever left the member; and that a person anonymous on a member could no longer delete their account while the register was down. The member now asks first, outside the try, which wraps only what checks the proof. While the register is out of reach, a person still anonymous here (becoming identified ends that) is none of its and is deleted here; anyone else waits for the register. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>
This commit is contained in:
parent
b0e1557153
commit
9c2b1cd6e0
1 changed files with 81 additions and 16 deletions
|
|
@ -74,8 +74,6 @@ class EndpointAccount extends _isc.EndpointRef {
|
|||
{'proof': proof},
|
||||
);
|
||||
|
||||
/// How the caller signs in besides their sessions: with GitHub, with an
|
||||
/// email address, both, or neither (anonymous).
|
||||
_ida.Future<_ifld8s4r.SignInWays> signInWays() =>
|
||||
caller.callServerEndpoint<_ifld8s4r.SignInWays>(
|
||||
'halkyon_base.account',
|
||||
|
|
|
|||
Loading…
Reference in a new issue