Janady13/missionmatch / internal/modules/auth/dto.go

Source identity

Field	Recorded value
Source type	GitHub source
Original record	Janady13/missionmatch / internal/modules/auth/dto.go
Date	Not specified in source
Repository	Janady13/missionmatch
Revision	09015496d565a172bcaa15cfe9a8e4b072b13df0
Branch	workstream-b-screenmatch
Path or archive member	internal/modules/auth/dto.go
Original SHA-256	a0c8ea6f4cc7ec26fedb6b51ce4df736f98932de23c185f26d2569613d150056
Git blob SHA	79616b504072749377b9e507a2d0f9db0f43a64a
Reading-copy SHA-256	a0c8ea6f4cc7ec26fedb6b51ce4df736f98932de23c185f26d2569613d150056

Original source ↗

Every recorded occurrence

These 65 records contain identical original source bytes. Their paths and revisions remain part of the archive.

Original record	Branch or archive	Revision / identifier	Original location
Janady13/missionmatch / internal/modules/auth/dto.go	workstream-b-screenmatch	09015496d565a172bcaa15cfe9a8e4b072b13df0	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	workstream-a-opportunity-intelligence	1675031db74316e100782d063e9eda1a597fe3a1	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	master	1e9249840a4302ec82e123b9c9cb6f75badea3e4	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	workstream-d-command-center	255e7d1d420abf5e277d0cd8c9b14f6f72b6acb9	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	workstream-d-missionmatch	3be46ba89edb737182075a2b320509b42dc916f8	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	m5-price-to-win	41000ad30fff4129fdaf5ec84e15ba14c27d4890	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	workstream-e-dataflow-deploy	433815a042f9741411e60fa553fe72143e9b10db	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	w3-ai-staffing-recommendations	43d56387270ef4da4cabd794d97ca6a49909bc7d	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	workstream-e-commercial-stubs	4437da660539284a400ee380b9b427a300c369ee	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	ws3-clearance	4b8e7ce594c068621867f9c9deed0ec64ae6c553	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	collision-deconfliction	4ee5a09972608ed89f8377c6665542d5f450f0a6	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	workstream-c-slatematch	5cd60c918301b46ecd6ed3e03e20c395da0062e2	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	ai-intelligence-layer	5d5ddff70393a197c5f54a45280bb5dd42b24755	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	ws7-federal-signal	6a9f6ce9cfb13345ffb47770d4960e7c2d9c17c2	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	ws6-retrieval	6c56e29231ec05735927fa265c97d517499dfeaf	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	per-tenant-routing	9bde0f9a74b89d01980fa658e5253acda7528d0c	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	ai-brain-live	aac32fc49c878cc5bca099459307611562d0bac1	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	graphrag-foundation	b0ddeb9f633fd138d09309d1a17b7d13bc3a67f7	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	ws1-ontology-sync	b596f449a32a1016fbd403c36505cc00a1ac9ee6	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	time-to-fill-survival	b66e1e505863d4f17741a4b9ede73509e45bd6c6	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	ruthless-debug-sweep	b7d742f8f032984be3817efffa3eb8b13b651c1f	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	mag-substrate	b82c7100a492dec67dfd1eda6b3f53def859be35	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	capture-readiness	bae6af7cb2997e819174a9e9cfff5e16067a1975	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	deploy-and-ops	bdacd9d0b4d5998d25fc74bf4007f4c3ec538c7a	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	ws8-teaching-loop	c823f0fb6bb2aba0f39001eb6de96f4000d9321f	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	phase2-eval-fairness	d361af254701975fe239927656ababb56374655e	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	workstream-b-sam-contract-awards	d5101cceb98e70000cebb31d3e7ac73d747d3a6d	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	phase2-connectors	e038d4c687aec16f8bd9bc4d907eea14d91f8704	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	workstream-a-shared-core	e0de03ac3a1ec826bd15d0e048e3b02baa23eeff	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	ws2-alias-relationship	e4dada4601c6eb101830f9d223a9655dfa120616	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	presentation-readiness	eb574acaa29d71ce4d0f852572e87c275c79fdb7	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	ws9-bench-ingestion	f585a9ef32fa554663ce1fba9a414a54b6e49cf0	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	vendor-intelligence	fe9796a19c261951d3f2565206c0c1b5ac294465	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	per-tenant-routing	9bde0f9a74b89d01980fa658e5253acda7528d0c	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	collision-deconfliction	4ee5a09972608ed89f8377c6665542d5f450f0a6	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	ws6-retrieval	6c56e29231ec05735927fa265c97d517499dfeaf	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	workstream-a-shared-core	e0de03ac3a1ec826bd15d0e048e3b02baa23eeff	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	m5-price-to-win	41000ad30fff4129fdaf5ec84e15ba14c27d4890	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	workstream-c-slatematch	5cd60c918301b46ecd6ed3e03e20c395da0062e2	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	ws1-ontology-sync	b596f449a32a1016fbd403c36505cc00a1ac9ee6	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	master	1e9249840a4302ec82e123b9c9cb6f75badea3e4	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	ws8-teaching-loop	c823f0fb6bb2aba0f39001eb6de96f4000d9321f	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	w3-ai-staffing-recommendations	43d56387270ef4da4cabd794d97ca6a49909bc7d	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	mag-substrate	b82c7100a492dec67dfd1eda6b3f53def859be35	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	ws3-clearance	4b8e7ce594c068621867f9c9deed0ec64ae6c553	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	workstream-d-command-center	255e7d1d420abf5e277d0cd8c9b14f6f72b6acb9	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	phase2-eval-fairness	d361af254701975fe239927656ababb56374655e	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	workstream-e-dataflow-deploy	433815a042f9741411e60fa553fe72143e9b10db	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	ruthless-debug-sweep	b7d742f8f032984be3817efffa3eb8b13b651c1f	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	time-to-fill-survival	b66e1e505863d4f17741a4b9ede73509e45bd6c6	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	ai-intelligence-layer	5d5ddff70393a197c5f54a45280bb5dd42b24755	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	graphrag-foundation	b0ddeb9f633fd138d09309d1a17b7d13bc3a67f7	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	workstream-a-opportunity-intelligence	1675031db74316e100782d063e9eda1a597fe3a1	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	deploy-and-ops	bdacd9d0b4d5998d25fc74bf4007f4c3ec538c7a	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	ws9-bench-ingestion	f585a9ef32fa554663ce1fba9a414a54b6e49cf0	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	ws2-alias-relationship	e4dada4601c6eb101830f9d223a9655dfa120616	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	presentation-readiness	eb574acaa29d71ce4d0f852572e87c275c79fdb7	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	workstream-b-screenmatch	09015496d565a172bcaa15cfe9a8e4b072b13df0	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	ws7-federal-signal	6a9f6ce9cfb13345ffb47770d4960e7c2d9c17c2	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	workstream-e-commercial-stubs	4437da660539284a400ee380b9b427a300c369ee	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	ai-brain-live	aac32fc49c878cc5bca099459307611562d0bac1	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	workstream-d-missionmatch	3be46ba89edb737182075a2b320509b42dc916f8	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	phase2-connectors	e038d4c687aec16f8bd9bc4d907eea14d91f8704	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	workstream-b-sam-contract-awards	d5101cceb98e70000cebb31d3e7ac73d747d3a6d	Open original
Janady13/missionmatch / internal/modules/auth/dto.go	capture-readiness	bae6af7cb2997e819174a9e9cfff5e16067a1975	Open original

Recovered source transcript

Download complete source text ↓136 lines · 4.8 KB

// Package auth is the first party authentication and accounts module. It produces a verified
// (org_id, user_id, role) from an opaque server side session and feeds that, and only that, into the
// tenant resolver, replacing the dev X-Org-ID header. The cryptographic primitives live in
// internal/platform/security; this package wires them to the database (through the SECURITY DEFINER
// functions in migration 0009) and to HTTP.
package auth

import (
	"github.com/missionworkforce/missionmatch/internal/platform/audit"
	"github.com/missionworkforce/missionmatch/internal/platform/security"
	"github.com/missionworkforce/missionmatch/internal/platform/tenant"
)

// Cookie names. The session cookie uses the __Host- prefix, which a browser only accepts when the
// cookie is Secure, Path=/, and has no Domain, so it cannot be planted by a sibling subdomain. The
// prefix and the Secure attribute must agree: a __Host- cookie without Secure is silently dropped by
// the browser. So the name is chosen to match the Secure flag (the secure name in production, a plain
// name only for plain http local dev). Production config requires CookieSecure true.
const (
	SessionCookie         = "__Host-mm_session"
	CSRFCookie            = "__Host-mm_csrf"
	CSRFHeader            = "X-CSRF-Token"
	sessionCookieInsecure = "mm_session"
	csrfCookieInsecure    = "mm_csrf"
)

// Deps is everything the service needs, assembled in cmd/api from config. Keys never have defaults;
// they come from the secrets file through config.
type Deps struct {
	DB              *tenant.DB
	Audit           *audit.Writer
	Hasher          *security.Hasher
	Tagger          *security.Tagger
	TOTP            security.TOTP
	TOTPKEKs        map[int][]byte // key_version to AES 256 key, for decrypt
	TOTPKEKActive   int            // version new secrets are sealed under
	TOTPIssuer      string
	IdleSeconds     int
	AbsoluteSeconds int
	PendingSeconds  int
	InviteSeconds   int
	CookieSecure    bool
	MFADisabled     bool // pilot only: when true, login and invite accept mint an active session with no TOTP step. The zero value (false) keeps MFA mandatory, so a Deps built without setting it is secure by default.
}

// LoginInput is a password login attempt.
type LoginInput struct {
	Email    string `json:"email"`
	Password string `json:"password"`
}

// LoginResult tells the SPA whether to show the enroll or the verify step. Token is set as the
// session cookie by the handler, never returned in the body. When MFARequired is false the issued
// session is already active, so the SPA skips the MFA step and goes straight to the app.
type LoginResult struct {
	Token       string `json:"-"`
	MFAEnrolled bool   `json:"mfa_enrolled"`
	MFARequired bool   `json:"mfa_required"`
}

// CodeInput carries a submitted six digit TOTP code or a recovery code.
type CodeInput struct {
	Code string `json:"code"`
}

// EnrollResult returns the provisioning material shown once during enrollment.
type EnrollResult struct {
	OTPAuthURI string `json:"otpauth_uri"`
	Secret     string `json:"secret"`
}

// ActivateResult returns the recovery codes shown exactly once on activation. Token is the new active
// session cookie.
type ActivateResult struct {
	Token         string   `json:"-"`
	RecoveryCodes []string `json:"recovery_codes"`
}

// TokenResult is a bare new session token for the handler to set as a cookie.
type TokenResult struct {
	Token string `json:"-"`
}

// InviteInput is an owner or admin inviting a user into their org.
type InviteInput struct {
	Email    string `json:"email"`
	FullName string `json:"full_name"`
	Role     string `json:"role"`
}

// InviteResult returns the one time activation link token for manual delivery at pilot.
type InviteResult struct {
	Token  string `json:"token"`
	UserID string `json:"user_id"`
}

// AcceptInput redeems an invite or activation link and sets the password.
type AcceptInput struct {
	Token    string `json:"token"`
	Password string `json:"password"`
}

// ChangePasswordInput changes the authenticated user's password.
type ChangePasswordInput struct {
	OldPassword string `json:"old_password"`
	NewPassword string `json:"new_password"`
}

// RoleChangeInput sets a target user's role.
type RoleChangeInput struct {
	Role string `json:"role"`
}

// StatusChangeInput enables or disables a target user.
type StatusChangeInput struct {
	Status string `json:"status"`
}

// SessionInfo is the SPA view of the current session. No secrets.
type SessionInfo struct {
	UserID      string `json:"user_id"`
	OrgID       string `json:"org_id"`
	Role        string `json:"role"`
	MFAEnrolled bool   `json:"mfa_enrolled"`
}

// UserSummary is one row of the org user list. No secrets.
type UserSummary struct {
	ID          string `json:"id"`
	Email       string `json:"email"`
	FullName    string `json:"full_name"`
	Role        string `json:"role"`
	Status      string `json:"status"`
	MFAEnrolled bool   `json:"mfa_enrolled"`
}