Tizian 「ティツィアーン」
a3a8ed3890
The register's side of signing in with an address, a password that never leaves the device (SRP-6a) and a code from an authenticator (ADR 0017), with members forwarding every step through AccountRegister: - password.set: salt, Argon2id's costs, SRP's verifier, the public keys and the private keys wrapped twice, all made on the device; with the address a mailed code proves, an anonymous person becomes identified under their ID. It signs in once an authenticator is confirmed. - passwordSignIn.begin and complete: SRP's two steps with a TOTP or recovery code. An address nobody has is answered from a decoy key as an account would be; every wrong credential is refused alike. - authenticator: secrets sealed under totpKey (XChaCha20-Poly1305, bound to their row), each code accepted once, ten recovery codes with the first, the last one kept. - accountRecovery: a lost authenticator reset 72 hours after the password and a mailed code or the recovery phrase ask, a lost password set anew with the phrase's signature, or the account reset with new keys 72 hours after a mailed code asks; a mail at each start, a sign-in calling it off. - An account with a password no longer signs in by a mailed code or GitHub; no new GitHub account is linked where passwords are offered, and from GITHUB_SIGN_IN_ENDS GitHub signs nobody in and its IDs go. Five tables, added by the module's migration; deletePerson deletes their rows. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>
55 lines
1.3 KiB
Dart
55 lines
1.3 KiB
Dart
import 'package:halkyon_base_server/base.dart';
|
|
import 'package:serverpod/serverpod.dart';
|
|
|
|
/// Keeps every code and notice mailed, in place of a mail service.
|
|
final class Mailbox implements CodeMailer {
|
|
final codes = <({String to, String code, String language})>[];
|
|
final notices =
|
|
<
|
|
({
|
|
String to,
|
|
AccountResetKind kind,
|
|
DateTime takesEffectAt,
|
|
String language,
|
|
})
|
|
>[];
|
|
|
|
/// Whether it takes no mail, as a mail service down.
|
|
bool refusing = false;
|
|
|
|
@override
|
|
Future<void> send(
|
|
Session session, {
|
|
required String to,
|
|
required String code,
|
|
required String language,
|
|
}) async {
|
|
if (refusing) {
|
|
throw Exception('Connection refused');
|
|
}
|
|
codes.add((to: to, code: code, language: language));
|
|
}
|
|
|
|
@override
|
|
Future<void> sendResetNotice(
|
|
Session session, {
|
|
required String to,
|
|
required AccountResetKind kind,
|
|
required DateTime takesEffectAt,
|
|
required String language,
|
|
}) async {
|
|
if (refusing) {
|
|
throw Exception('Connection refused');
|
|
}
|
|
notices.add((
|
|
to: to,
|
|
kind: kind,
|
|
takesEffectAt: takesEffectAt,
|
|
language: language,
|
|
));
|
|
}
|
|
|
|
/// The last code mailed to [address].
|
|
String codeFor(String address) =>
|
|
codes.lastWhere((mail) => mail.to == address).code;
|
|
}
|