Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add password requirement to: disable 2FA, change email #385

Merged
merged 7 commits into from May 13, 2024

Conversation

KernelDeimos
Copy link
Contributor

To improve security we would like to define and configure middleware used by each route in a small number of groups or "access levels". Right now we only have system-wide middlewares and middlewares that are defined per-route.

Access levels might be:

  • Puter Public - login, signup, etc
  • Puter User - session token is required
  • Puter User Dangerous - session token + password are required
  • Puter API (the api.puter.com endpoints which need an authorization token)

The scope of this PR is prerequisite refactoring and addition of the "Puter User Dangerous" access level.

We were triggering webserver events in Kernel. This change improves
adherence to separation-of-concerns and ensures event cascading is
working as expected. This also better formalizes the boot sequence.
@KernelDeimos KernelDeimos changed the title DRY Middleware Add password requirement to: disable 2FA, change email May 13, 2024
@KernelDeimos KernelDeimos force-pushed the eric/dry-middleware branch 3 times, most recently from c5de92d to 2031106 Compare May 13, 2024 05:41
@KernelDeimos KernelDeimos marked this pull request as ready for review May 13, 2024 05:55
@KernelDeimos KernelDeimos merged commit 7dc5929 into main May 13, 2024
6 checks passed
@KernelDeimos KernelDeimos deleted the eric/dry-middleware branch May 14, 2024 18:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants