Web authentication: the auth service and its clients.

20 filesOpen on GitHub

• __init__.py

  Web authentication: the auth service and its clients.

• __main__.py

  Auth service entry point: python -m euler_site.auth.

• admin.py

  The admin-plane CLI: run under sudo by the users shell command.

• app.py

  The auth service: public + admin aiohttp apps over unix sockets.

• client.py

  HTTP-over-unix-socket client for the auth service — re-export of the shared one.

• config.py

  Auth-service runtime configuration, read from the environment.

• mail.py

  Outbound mail via the loopback relay.

• pages.py

  The auth service's HTML pages: login, registration, reset, forgot.

• pending.py

  Pending invite / reset store at <state>/pending.json.

• policy.py

  Auth policy constants (lifetimes, cookie names, password and OTP rules).

• pow.py

  Proof of work for the unauthenticated forms that make the service send mail.

• ratelimit.py

  A small in-memory sliding-window rate limiter for the auth endpoints.

• remember.py

  Persistent "remember me" tokens at <state>/remember.json.

• requests.py

  Prospective-collaborator invite requests at <state>/requests.json.

• returnto.py

  Where a sign-in or a sign-out returns to: the page the reader was on.

• sessions.py

  In-memory web session table.

• srp.py

  Secure Remote Password (SRP-6a) primitives for web authentication.

• storage.py

  JSON persistence for the auth stores — re-export of the shared implementation.

• tickets.py

  One-time shell tickets: web identity for PTY children.

• users.py

  User store: the SRP verifier database at <state>/users.json.