continuum - P2P replicated document storage service

	Commit message (Collapse)	Author	Age	Files	Lines
*	dashboard: hand over a token reading the member list only	tv	3 days	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \| \| \|	Review finding 8, second part: opening another member's dashboard handed it a token reading everything (READ_ALL). A member writes its own dashboard URL, so a malicious one received a read-everything token under the operator's identity: /admin/config, /admin/changes, /admin/log and the rest, on every node the user reaches. The token handed over now reads the member list only (READ_MEMBERS, as sent to subscribed nodes), which is enough to draw the map; the user logs in at the other dashboard to see more. With 1151 it lasts five minutes and isn't refreshed past them.
*	dashboard: a token handed over to another member's dashboard	tv	4 days	1	-0/+18
\| \| \| \| \| \| \| \|	Opening another member's dashboard passes a token reading only, for five minutes, in the URL's fragment; its login page begins a session with it. Tokens may be asked for with a shorter lifetime. Auth plan M3 (hand-off).
*	auth: a login page and browser sessions	tv	4 days	1	-0/+82
	GET /login without authentication: log in by password or with a token (from a login by key). POST/DELETE /auth/session keep the token as an HttpOnly, SameSite=Strict cookie; the dashboard sends a browser without a user there and renews the session while open. Auth plan M2/M3 (browsers).