ffa60c90b1
Remove key_identity indirection table, storing public keys and nonces directly on client tables. Replace AuthResponse with AuthOk, add a BootstrapActor to manage token lifecycle, and move user agent stream handling into the actor module.
38 lines
660 B
Protocol Buffer
38 lines
660 B
Protocol Buffer
syntax = "proto3";
|
|
|
|
package arbiter.auth;
|
|
|
|
import "google/protobuf/timestamp.proto";
|
|
|
|
message AuthChallengeRequest {
|
|
bytes pubkey = 1;
|
|
optional string bootstrap_token = 2;
|
|
}
|
|
|
|
message AuthChallenge {
|
|
bytes pubkey = 1;
|
|
bytes nonce = 2;
|
|
google.protobuf.Timestamp minted = 3;
|
|
}
|
|
|
|
message AuthChallengeSolution {
|
|
AuthChallenge challenge = 1;
|
|
bytes signature = 2;
|
|
}
|
|
|
|
message AuthOk {}
|
|
|
|
message ClientMessage {
|
|
oneof payload {
|
|
AuthChallengeRequest auth_challenge_request = 1;
|
|
AuthChallengeSolution auth_challenge_solution = 2;
|
|
}
|
|
}
|
|
|
|
message ServerMessage {
|
|
oneof payload {
|
|
AuthChallenge auth_challenge = 1;
|
|
AuthOk auth_ok = 2;
|
|
}
|
|
}
|