feat: F5.2 sign-in with the dashboard's ticket and the service way

Server F checks the dashboard's entry ticket as itsdangerous does
(tools/ticket-oracle: tickets made by itsdangerous 2.2.0 itself), redeems
it at /__auth for a session cookie (only the key's SHA-256 is kept) and
decides at /sync by the session's grant: none, read or write; a frozen
project is read by everyone; every refusal names its reason (one list in
packages/protocol/src/sync.ts). A WebSocket from a page of another origin
is refused. /svc/* with the service key makes, deletes, freezes and
thaws projects, ends a person's grant or all their sessions (connections
let go) and lists the sessions. Snapshots, restoring and copying move to
F6 (they need the canonical doc.json and an epoch).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

This commit is contained in:

julian.kiedaisch

2026-10-04 13:56:45 +00:00

co-authored by

Claude Opus 5.5

parent 88db6eff7e

commit 5ded84cb33

24 changed files with 1794 additions and 151 deletions

tools/ticket-oracle/.gitignore

View File

				`@@ -0,0 +1 @@`
				`.venv/`