tabminal 3.0.27 → 3.0.28
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENTS.md +13 -7
- package/package.json +1 -1
- package/public/app.js +682 -123
- package/public/index.html +28 -0
- package/public/modules/url-auth.js +57 -35
- package/public/styles.css +113 -0
- package/src/auth.mjs +471 -37
- package/src/persistence.mjs +75 -0
- package/src/server.mjs +99 -1
package/AGENTS.md
CHANGED
|
@@ -34,6 +34,7 @@ Important persistence files under `~/.tabminal`:
|
|
|
34
34
|
- `cluster.json`
|
|
35
35
|
- `agent-tabs.json`
|
|
36
36
|
- `agent-config.json`
|
|
37
|
+
- `auth-sessions.json`
|
|
37
38
|
|
|
38
39
|
## 2) Non-Negotiable Contracts
|
|
39
40
|
|
|
@@ -63,13 +64,18 @@ Relevant code:
|
|
|
63
64
|
|
|
64
65
|
### 2.3 Token storage
|
|
65
66
|
|
|
66
|
-
-
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
-
|
|
70
|
-
|
|
71
|
-
-
|
|
72
|
-
-
|
|
67
|
+
- Auth state is browser-owned.
|
|
68
|
+
- All hosts persist auth state in browser `localStorage`.
|
|
69
|
+
- Key format:
|
|
70
|
+
- `tabminal_auth_state:<hostId>`
|
|
71
|
+
- Stored auth state currently includes:
|
|
72
|
+
- short-lived access token
|
|
73
|
+
- access token expiry
|
|
74
|
+
- refresh token
|
|
75
|
+
- refresh token expiry
|
|
76
|
+
- Legacy password-hash token storage is no longer supported or migrated.
|
|
77
|
+
- Removing a host should also remove any stale local auth state keyed to that
|
|
78
|
+
host.
|
|
73
79
|
|
|
74
80
|
Relevant code:
|
|
75
81
|
- `public/app.js`
|