mirror of
https://github.com/runbear-io/beardrive.git
synced 2026-08-25 08:08:08 +02:00
Authentication (previous phase, now landed together with its follow-ups): - Email+password+name accounts behind an AuthProvider interface; the OSS server ships BuiltinAuth only (file-backed auth.json: bcrypt password hashes + SHA-256 token digests, plaintext never stored; server-owned /auth/* pages; managed deployments can swap in another provider). - bdrive login: loopback-callback browser flow (sign-up on the page, the terminal finishes itself) with a device-code fallback for headless machines; long-lived revocable device tokens in settings.json. - Password reset via plain SMTP (stdlib) with a log-link fallback when no SMTP is configured. Move-proof projects: - .bdrive is now a directory; config.json carries a stable mount id. The volume store (~/.bdrive/volumes/<mount-id>/) and registry are keyed by that id — never the folder path — so renames/moves are free. - The daemon re-reads the project config each tick and exits cleanly (propagating nothing) when its folder vanishes; the registry self-heals and the next bdrive command at the new location resumes with zero spurious changes. bdrive init is the front door (mnt/umnt removed; bdrive stop pauses): - Interactive on a TTY (create new / connect existing project from the server's list; whole folder / shared subfolder via the include list), full flag bypass (--name/--project/--shared/--yes), never prompts without a TTY. Runs the login flow first when there is no session. Default server: beardrive.ai (config.DefaultServer). Web history (revert-ready): - Hubs now always require auth; journal ops carry the signed-in account (user/user_name) alongside the git/OS fallback author. - File-backed device registry: per-device name, OS, account, and the public IP the server observed, joined into history at read time. - GET /api/p/<id>/history?path=|prefix= (newest first) and GET /api/p/<id>/blob?sha= stream any exact version — blobs are retained forever, so the next phase's revert is re-putting an old blob. - UI: History button (file versions or project feed), per-folder history shortcut, view/download of any past version. Tests: auth flows (callback, device-code, reset single-use, persistence, gating), history API + device registry, folder-move survival, registry self-heal, ops-carry-account; docs (README/SKILL/CLAUDE) updated. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01R7Q9ZKSZRTdvrSJkYLUmYs
66 lines
1.6 KiB
Go
66 lines
1.6 KiB
Go
package config
|
|
|
|
import (
|
|
"encoding/json"
|
|
"fmt"
|
|
"os"
|
|
"path/filepath"
|
|
)
|
|
|
|
// DefaultServer is used wherever a server is needed and none is configured:
|
|
// bare `bdrive login`, and `bdrive init` on a never-logged-in device.
|
|
const DefaultServer = "https://beardrive.ai"
|
|
|
|
// Settings are device-wide defaults, stored at $BDRIVE_HOME/settings.json.
|
|
type Settings struct {
|
|
// Server is the default bdrive web server for `bdrive init`.
|
|
Server string `json:"server,omitempty"`
|
|
// Token authenticates this device to Server (minted by `bdrive login`).
|
|
// Sent as a Bearer header.
|
|
Token string `json:"token,omitempty"`
|
|
// Email and Name identify the signed-in account; journal ops carry them
|
|
// so history shows who changed what.
|
|
Email string `json:"email,omitempty"`
|
|
Name string `json:"name,omitempty"`
|
|
}
|
|
|
|
func settingsPath() (string, error) {
|
|
home, err := Home()
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
return filepath.Join(home, "settings.json"), nil
|
|
}
|
|
|
|
// LoadSettings reads the device settings; a missing file is zero settings.
|
|
func LoadSettings() (Settings, error) {
|
|
var s Settings
|
|
path, err := settingsPath()
|
|
if err != nil {
|
|
return s, err
|
|
}
|
|
data, err := os.ReadFile(path)
|
|
if err != nil {
|
|
if os.IsNotExist(err) {
|
|
return s, nil
|
|
}
|
|
return s, err
|
|
}
|
|
if err := json.Unmarshal(data, &s); err != nil {
|
|
return s, fmt.Errorf("parse %s: %w", path, err)
|
|
}
|
|
return s, nil
|
|
}
|
|
|
|
// SaveSettings persists the device settings.
|
|
func SaveSettings(s Settings) error {
|
|
path, err := settingsPath()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if err := os.MkdirAll(filepath.Dir(path), 0o700); err != nil {
|
|
return err
|
|
}
|
|
return writeJSON(path, s)
|
|
}
|