halkyon-days/halkyon
Watch
1
0
Fork
You've already forked halkyon
 0
Code Issues Pull requests Projects Releases 37 Packages Wiki Activity Actions

docs(auth): the owner's warning when ten wrong proofs end a session (ADR 0017)

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>
This commit is contained in:
Tizian 「ティツィアーン」 2026-10-21 12:11:11 +02:00
commit ac7007e19b
Signed by: raisondetredev
GPG key ID: 07F6FCF405488B64
1 changed files with 21 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

17
docs/adr/0017-password-totp-and-keys.md
View file

@ -416,8 +416,18 @@ authenticator. What was done (`18ab2ee`, `f3c8706`, `403b88c`):
proofs are.
3. **Lows**: a proof whose call to the register failed (`RegisterUnavailableException`)
stays counted, as the register may have checked it; the sign-up mail's subject says it
also gives an account its password. A notice for the owner when ten wrong proofs end a
session is still to come (NEXT.md).
also gives an account its password.
4. **The owner is warned when ten wrong proofs end a session** (`b096cb0`, `a177a8f`):
someone with a session of theirs tried their password or codes. The register keeps
the moment with the account's password (`account_password.sessionEndedForProofsAt`,
a nullable column), set where the session ends (a member tells the register; one out
of reach leaves the owner unwarned, the session ended all the same). The account's
sign-in ways and its next password sign-in carry it: the app shows it before the
sign-in is put in place (dismissed, or kept for later) and in the account section
above the change of password. It names when, nothing of the session or its device.
Dismissing takes the session alone (`password.dismissSessionEndedWarning`): it hides
a warning and secures nothing. A new password clears it, as does deleting the person.
An owner who stays signed in sees it only in the account section.
### The rules as they stand (21 Oct 2026)
@ -442,7 +452,8 @@ sign-ins' codes per account (waits from ten wrong in a row, the owner mailed).
| Delete the account | — | password + code; where no second factor works, password + mailed code (`deletion`) |
Every reset carried out, and every new password, ends the account's sessions in every
service (a change keeps the session asking).
service (a change keeps the session asking). A session ended for ten wrong proofs leaves
its owner a warning; dismissing it takes the session alone, and a new password clears it.
## Consequences