assets

15 filesOpen on GitHub

• authform.js

  Shared sign-in / set-password affordances: password reveal toggles and the caps-lock warning.

• code.css

  The code viewer — its only stylesheet.

• code.js

  The code viewer: the page's one script.

• editor.js

  CodeMirror 6 editor for the content shell's edit page — adopted from the old-web-server editor (the removed solver/web-content/code-mirror-6/code.js) and fitted to the new site as progressive enhancement: it upgrades…

• login.js

  Sign-in page: drive the SRP-6a handshake against the auth service.

• maintenance.css

  Maintenance holding page — the first real response served through the edge.

• password.js

  Change-password (signed-in): prove the CURRENT password over SRP, then submit the {salt, verifier} derived from the NEW one — neither password leaves the browser.

• pow.js

  Proof of work for the forms that make the service send mail (/forgot, /request-invite) — the browser half of euler_site/auth/pow.py.

• register.js

  Set-password stage (registration and reset): enforce the password policy, derive the SRP {salt, verifier} in the browser, and submit only those — the password itself never leaves this page.

• site.css

  The app shell — every page, both tiers.

• site.js

  Shell chrome behaviour — same-origin, CSP-clean, no deps.

• srp.js

  SRP-6a browser client for the euler auth service.

• terminal.js

  The right pane's terminal.

• terms.js

  Terms stage: the accept checkbox unlocks only once the terms box has been scrolled to the end (or immediately when the text fits without scrolling).

• vault.js

  Vault client: derive the password key PK in the browser and drive the per-user service's vault endpoints.