Patty::Auth

ENROLLMENT_MAX_AGE = 10.minutes

FORM_CSRF_COOKIE = "patty_form_csrf"

MFA_CHALLENGE_COOKIE = "patty_mfa_challenge"

MFA_CHALLENGE_MAX_AGE = 5.minutes

MFA_CHALLENGE_MAX_TRIES = 5

PASSWORD_ALGORITHM = "bcrypt-sha256"

RECOVERY_CODE_COUNT = 10

SESSION_COOKIE = "patty_session"

SESSION_IDLE_TIMEOUT = 2.hours

SESSION_MAX_AGE = 7.days

VERSION = 2

begin_enrollment(session : Session, now : Time = Time.utc) : Enrollment

confirm_enrollment(env : HTTP::Server::Context, session : Session, code : String, secure : Bool = Security::RequestSecurity.https?(env), now : Time = Time.utc) : Session | Nil

create_mfa_challenge(env : HTTP::Server::Context, ip : String, secure : Bool = Security::RequestSecurity.https?(env), now : Time = Time.utc)

create_session(env : HTTP::Server::Context, secure : Bool = Security::RequestSecurity.https?(env), now : Time = Time.utc) : Session

destroy_session(env : HTTP::Server::Context)

disable_mfa!(env : HTTP::Server::Context, secure : Bool = Security::RequestSecurity.https?(env), now : Time = Time.utc) : Session | Nil

enrollment_for(session : Session, now : Time = Time.utc) : Enrollment | Nil

issue_form_token(env : HTTP::Server::Context, secure : Bool = Security::RequestSecurity.https?(env)) : String

pending_mfa_challenge?(env : HTTP::Server::Context, ip : String, now : Time = Time.utc) : Bool

regenerate_recovery_codes!(env : HTTP::Server::Context, secure : Bool = Security::RequestSecurity.https?(env), now : Time = Time.utc) : Session | Nil

session_for(env : HTTP::Server::Context, now : Time = Time.utc) : Session | Nil

set_password(password : String)

valid_form_token?(env : HTTP::Server::Context, submitted : String | Nil) : Bool

verify_mfa_challenge(env : HTTP::Server::Context, ip : String, code : String, now : Time = Time.utc) : Bool

verify_password(password : String) : Bool

verify_second_factor(code : String, now : Time = Time.utc) : Bool