LeoVasanko/paskia
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Implement code word based remote authentication #1

Merged
LeoVasanko merged 16 commits from remote-auth into main 2025-12-08 23:56:48 +00:00
Conversation 0 Commits 16 Files Changed 57
+3668 -503
LeoVasanko commented 2025-12-08 23:34:19 +00:00
Owner
Copy Link
Copy Source

Add comprehensive remote authentication system allowing users to log in from one device by authenticating from another trusted device. Features include:

  • Proof of Work (PoW) protection using PBKDF2-SHA512 to prevent abuse
  • Simple pairing codes (3 words) protected by dynamic PoW difficulty
  • Autocomplete pairing code input with error checking
  • Real-time WebSocket communication between devices

Unlike device addition links and reset links with QR codes that only allow adding an authentication method, and that work offline over the duration of several days, this mechanism is strictly online, with 5 minute time limit.

Add comprehensive remote authentication system allowing users to log in from one device by authenticating from another trusted device. Features include: - Proof of Work (PoW) protection using PBKDF2-SHA512 to prevent abuse - Simple pairing codes (3 words) protected by dynamic PoW difficulty - Autocomplete pairing code input with error checking - Real-time WebSocket communication between devices Unlike device addition links and reset links with QR codes that only allow adding an authentication method, and that work offline over the duration of several days, this mechanism is strictly online, with 5 minute time limit.
LeoVasanko added 15 commits 2025-12-08 23:34:19 +00:00
Delete frontend build files accidentally committed to repo when renaming the project. 2b7481cd58
Drafting remote auth linking. 4da1127976
More robust dev mode script, with --caddy to run the proxy as well. c7d4907cf1
gitignore lockfiles. eead72f053
Updated Vite config to allow all hosts, and proxy reset links to backend. b9e1f76d94
Fixed DEVMODE processing. 9763ab37bc
Devserver: run Caddy on standard ports such that it can obtain certs. f74b32c70b
Wait until Caddy startup is actually complete, keep reading stderr in the background. 82095fd7ac
Better caddy startup handling, fix hang waiting for message that never comes. 8f0cb8d80a
Remove caddy global options that were causing error detecting startup complete message. 269aefa9c8
Moved remote-link links to same location with reset links, avoiding vite routing issue. Realtime lookup of session when three words have been entered. dd49907c8d
Drafting autocomplete for the words. Don't check for malformed words 9485cbd201
Proper PoW, unified verification WS etc 4bb64863f9
Various improvements to remote link login. PoW algorithm tuned. Added base64url and helper modules. a54d872b46
Massive refactoring of remote auth and related functionality. (WIP) 99c60f0e16
LeoVasanko added 1 commit 2025-12-08 23:54:15 +00:00
Cleanup, restore reset link functionality as it were, ruff and removed leftover remoteauth functionality. f3118b7c1f
LeoVasanko merged commit c605926c30 into main 2025-12-08 23:56:48 +00:00
LeoVasanko deleted branch remote-auth 2025-12-09 01:07:29 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
LeoVasanko (Leo Vasanko)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: LeoVasanko/paskia#1