mirror of
https://github.com/hansjone/oclaw.git
synced 2026-10-12 11:43:25 +08:00
oliver
df97c5e042
Emergency (fallback / sealed-box) admins lost the workspace sidebar and saw "sign-in failed / add API key" on DSH Desktop because the remote.mux opens anonymously at boot and every early call was rejected terminally. - gateway: anonymous workspace/follow reaches dsh-acl's empty baseline; anonymous streams are parked until the carrier aborts instead of failing; anonymous workspace/initializeDefault answers "nothing created" - request-auth: a dead UDS_SESSION cookie no longer shadows a valid WS ticket or bridge (sync + async variants used by all callers) - dsh-acl: /api/* waits (bounded 15s) for the gateway ACL during Host startup instead of 403, so the Desktop welcome read no longer fails - desktop-bootstrap: key/account projection is best-effort per reference - client: emit connection/reset after login so boot-time caches (settings describe mirror -> Settings > Models) re-read under the real principal - sessions: absolute lifetime fixed at 7 days (was min(ttl, 7d) = 30 min); bridge expiry slides with its session; MemoryStore persisted to sessions.json (bearer hash only, userData AES-256-GCM sealed) - README: session lifetime/persistence and DSH compatibility notes Also includes previously uncommitted uds-auth 0.3.x work in this tree. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
89 lines
2.5 KiB
JavaScript
89 lines
2.5 KiB
JavaScript
/**
|
|
* Auth session store — opaque sessionId + random bearer.
|
|
* empNo is an attribute / secondary index, never the auth credential.
|
|
*/
|
|
export class SessionStore {
|
|
/**
|
|
* Create a verified session.
|
|
* @param {object} userData
|
|
* @param {number} ttlSeconds
|
|
* @returns {Promise<{ sessionId: string, bearer: string, record: object }>}
|
|
*/
|
|
async create(userData, ttlSeconds) {
|
|
throw new Error('SessionStore#create must be implemented')
|
|
}
|
|
|
|
/** Lookup by bearer token (proof of possession). */
|
|
async getByBearer(bearer) {
|
|
throw new Error('SessionStore#getByBearer must be implemented')
|
|
}
|
|
|
|
/** Sync lookup for WS upgrade paths. */
|
|
getByBearerSync(bearer) {
|
|
throw new Error('SessionStore#getByBearerSync must be implemented')
|
|
}
|
|
|
|
async getBySessionId(sessionId) {
|
|
throw new Error('SessionStore#getBySessionId must be implemented')
|
|
}
|
|
|
|
async touch(sessionId, ttlSeconds) {
|
|
throw new Error('SessionStore#touch must be implemented')
|
|
}
|
|
|
|
async revokeSession(sessionId) {
|
|
throw new Error('SessionStore#revokeSession must be implemented')
|
|
}
|
|
|
|
async revokeBearer(bearer) {
|
|
throw new Error('SessionStore#revokeBearer must be implemented')
|
|
}
|
|
|
|
/** Revoke all devices for an empNo. */
|
|
async revokeEmpNo(empNo) {
|
|
throw new Error('SessionStore#revokeEmpNo must be implemented')
|
|
}
|
|
|
|
/** Profile cache only — never proves authentication. */
|
|
async setProfile(empNo, profile) {
|
|
throw new Error('SessionStore#setProfile must be implemented')
|
|
}
|
|
|
|
async getProfile(empNo) {
|
|
throw new Error('SessionStore#getProfile must be implemented')
|
|
}
|
|
|
|
async clear() {
|
|
throw new Error('SessionStore#clear must be implemented')
|
|
}
|
|
|
|
// --- legacy compat shims (empNo-keyed) — prefer create/getByBearer ---
|
|
|
|
/** @deprecated use getByBearer */
|
|
async get(empNo) {
|
|
throw new Error('SessionStore#get must be implemented')
|
|
}
|
|
|
|
/** @deprecated use create */
|
|
async setex(empNo, seconds, userData) {
|
|
throw new Error('SessionStore#setex must be implemented')
|
|
}
|
|
|
|
/** @deprecated use revokeEmpNo */
|
|
async delete(empNo) {
|
|
throw new Error('SessionStore#delete must be implemented')
|
|
}
|
|
|
|
async has(empNo) {
|
|
throw new Error('SessionStore#has must be implemented')
|
|
}
|
|
|
|
async keys() {
|
|
throw new Error('SessionStore#keys must be implemented')
|
|
}
|
|
}
|
|
|
|
export const SESSION_COOKIE = 'UDS_SESSION'
|
|
export const SESSION_HEADER = 'x-uds-session'
|
|
/** Absolute session lifetime; idle expiry (cookieMaxAge) slides within it. */
|
|
export const SESSION_ABSOLUTE_MAX_SECONDS = 7 * 24 * 60 * 60
|