LeoVasanko
c605926c30
Add comprehensive remote authentication system allowing users to log in from one device by authenticating from another trusted device. Features include: - Proof of Work (PoW) protection using PBKDF2-SHA512 to prevent abuse - Simple pairing codes (3 words) protected by dynamic PoW difficulty - Autocomplete pairing code input with error checking - Real-time WebSocket communication between devices Unlike device addition links and reset links with QR codes that only allow adding an authentication method, and that work offline over the duration of several days, this mechanism is strictly online, with 5 minute time limit.
104 lines
3.1 KiB
JavaScript
104 lines
3.1 KiB
JavaScript
import { fileURLToPath, URL } from 'node:url'
|
|
import { defineConfig } from 'vite'
|
|
import { resolve } from 'node:path'
|
|
import vue from '@vitejs/plugin-vue'
|
|
import { existsSync, renameSync, mkdirSync } from 'node:fs'
|
|
import sirv from 'sirv'
|
|
|
|
export default defineConfig(({ command }) => ({
|
|
appType: 'mpa',
|
|
publicDir: 'public',
|
|
plugins: [
|
|
vue(),
|
|
{
|
|
name: 'serve-examples',
|
|
configureServer(server) {
|
|
const examplesDir = resolve(__dirname, '../examples')
|
|
const serve = sirv(examplesDir, { dev: true })
|
|
server.middlewares.use((req, _res, next) => {
|
|
if (req.url === '/' || req.url === '/index.html') req.url = '/examples/'
|
|
next()
|
|
})
|
|
server.middlewares.use('/examples', serve)
|
|
}
|
|
},
|
|
{
|
|
name: 'move-html-files',
|
|
closeBundle() {
|
|
if (command !== 'build') return
|
|
|
|
const outDir = resolve(__dirname, '../paskia/frontend-build')
|
|
const moves = [
|
|
{ from: 'auth.html', to: 'auth/index.html' },
|
|
{ from: 'admin.html', to: 'admin/index.html' },
|
|
{ from: 'restricted.html', to: 'restricted/index.html' },
|
|
{ from: 'reset.html', to: 'reset/index.html' },
|
|
{ from: 'forward.html', to: 'forward/index.html' }
|
|
]
|
|
|
|
for (const { from, to } of moves) {
|
|
const fromPath = resolve(outDir, from)
|
|
const toPath = resolve(outDir, to)
|
|
if (existsSync(fromPath)) {
|
|
mkdirSync(resolve(outDir, to.split('/')[0]), { recursive: true })
|
|
renameSync(fromPath, toPath)
|
|
}
|
|
}
|
|
}
|
|
}
|
|
],
|
|
resolve: {
|
|
alias: { '@': fileURLToPath(new URL('./src', import.meta.url)) }
|
|
},
|
|
base: '/',
|
|
server: {
|
|
port: 4403,
|
|
allowedHosts: true,
|
|
fs: {
|
|
allow: ['..']
|
|
},
|
|
proxy: {
|
|
// Only proxy these two specific backend API paths
|
|
'/auth/api': {
|
|
target: 'http://localhost:4402'
|
|
},
|
|
'/auth/ws': {
|
|
target: 'http://localhost:4402',
|
|
ws: true
|
|
},
|
|
// Passphrase links: /auth/word1.word2.word3.word4.word5
|
|
'^/auth/[a-z]+\\.[a-z]+\\.[a-z]+\\.[a-z]+\\.[a-z]+$': {
|
|
target: 'http://localhost:4402'
|
|
},
|
|
// Passphrase links: /word1.word2.word3.word4.word5
|
|
'^/[a-z]+\\.[a-z]+\\.[a-z]+\\.[a-z]+\\.[a-z]+$': {
|
|
target: 'http://localhost:4402'
|
|
}
|
|
}
|
|
},
|
|
build: {
|
|
outDir: '../paskia/frontend-build',
|
|
emptyOutDir: true,
|
|
rollupOptions: {
|
|
input: {
|
|
auth: resolve(__dirname, 'auth/index.html'),
|
|
admin: resolve(__dirname, 'auth/admin/index.html'),
|
|
restricted: resolve(__dirname, 'auth/restricted/index.html'),
|
|
reset: resolve(__dirname, 'int/reset/index.html'),
|
|
forward: resolve(__dirname, 'int/forward/index.html'),
|
|
},
|
|
output: {
|
|
entryFileNames: (chunkInfo) => {
|
|
return 'auth/assets/[name]-[hash].js'
|
|
},
|
|
chunkFileNames: (chunkInfo) => {
|
|
return 'auth/assets/[name]-[hash].js'
|
|
},
|
|
assetFileNames: (assetInfo) => {
|
|
return 'auth/assets/[name]-[hash][extname]'
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}))
|