mirror of
https://github.com/xtr-dev/rondevu-server.git
synced 2025-12-13 20:33:25 +00:00
Bas van den Aakster
51fe405440
BREAKING CHANGE: Remove dual authentication system
- Remove POST /register endpoint - no longer needed
- Remove peer_id/secret credential-based auth
- All authentication now uses username + Ed25519 signatures
- Anonymous users can generate random usernames (anon-{timestamp}-{hex})
Database schema:
- Rename peer_id → username in offers table
- Rename answerer_peer_id → answerer_username in offers table
- Rename peer_id → username in ice_candidates table
- Remove secret column from offers table
- Add FK constraints for username columns
Storage layer:
- Update D1 and SQLite implementations
- All methods use username instead of peerId
- Remove secret-related code
Auth middleware:
- Replace validateCredentials() with Ed25519 signature verification
- Extract auth from request body (POST) or query params (GET)
- Verify signature against username's public key
- Validate message format and timestamp
Crypto utilities:
- Remove generatePeerId(), encryptPeerId(), decryptPeerId(), validateCredentials()
- Add generateAnonymousUsername() - creates anon-{timestamp}-{random}
- Add validateAuthMessage() - validates auth message format
Config:
- Remove authSecret from Config interface (no longer needed)
All server endpoints updated to use getAuthenticatedUsername()
37 lines
1.2 KiB
TypeScript
37 lines
1.2 KiB
TypeScript
/**
|
|
* Application configuration
|
|
* Reads from environment variables with sensible defaults
|
|
*/
|
|
export interface Config {
|
|
port: number;
|
|
storageType: 'sqlite' | 'memory';
|
|
storagePath: string;
|
|
corsOrigins: string[];
|
|
version: string;
|
|
offerDefaultTtl: number;
|
|
offerMaxTtl: number;
|
|
offerMinTtl: number;
|
|
cleanupInterval: number;
|
|
maxOffersPerRequest: number;
|
|
}
|
|
|
|
/**
|
|
* Loads configuration from environment variables
|
|
*/
|
|
export function loadConfig(): Config {
|
|
return {
|
|
port: parseInt(process.env.PORT || '3000', 10),
|
|
storageType: (process.env.STORAGE_TYPE || 'sqlite') as 'sqlite' | 'memory',
|
|
storagePath: process.env.STORAGE_PATH || ':memory:',
|
|
corsOrigins: process.env.CORS_ORIGINS
|
|
? process.env.CORS_ORIGINS.split(',').map(o => o.trim())
|
|
: ['*'],
|
|
version: process.env.VERSION || 'unknown',
|
|
offerDefaultTtl: parseInt(process.env.OFFER_DEFAULT_TTL || '60000', 10),
|
|
offerMaxTtl: parseInt(process.env.OFFER_MAX_TTL || '86400000', 10),
|
|
offerMinTtl: parseInt(process.env.OFFER_MIN_TTL || '60000', 10),
|
|
cleanupInterval: parseInt(process.env.CLEANUP_INTERVAL || '60000', 10),
|
|
maxOffersPerRequest: parseInt(process.env.MAX_OFFERS_PER_REQUEST || '100', 10)
|
|
};
|
|
}
|