From e696d2f40636a6613eddfb1a3afdf87aa7ffdedd Mon Sep 17 00:00:00 2001
From: tv <tv@krebsco.de>
Date: Sat, 7 Nov 2026 22:35:21 +0100
Subject: auth: logging in by key

POST /auth/challenge and /auth/login/key: a node-signed challenge,
valid five minutes and taken once, signed with one of the user's SSH
keys (ssh-keygen -Y sign -n continuum-login), for a token.

Auth plan M7 (key login, M2b).
---
 src/node.rs | 1 +
 1 file changed, 1 insertion(+)

(limited to 'src/node.rs')

diff --git a/src/node.rs b/src/node.rs
index 736723b..a5e512e 100644
--- a/src/node.rs
+++ b/src/node.rs
@@ -163,6 +163,7 @@ impl Node {
             node_key: config.node_key,
             sign_every: config.sign_every,
             screening: Default::default(),
+            challenges: Default::default(),
             token_lifetime: config.token_lifetime,
             session_lifetime: config.session_lifetime,
             cors_origins: Arc::new(config.cors_origins),
-- 
cgit v1.3.1