The library documents itself · Security & governance
stzAuthMemoryStore
36 own methods · 0 forms written with extensions, listed under their method
the source: base/security/stzAuthStore.ring(opens in a new tab) · All classes · The area reference: Security & governance
Under each method, its extensions (Q CS XT Z ZZ IB W U): bold and ticked, it exists; struck, it does not. The extensions and what they mean
No method of this class is run on this page: the class reaches files, the network, processes, the clock, chance or sound, and an example run here would only be an example of its effects. Each method carries the explanation the library gives of itself.
Method
Explanation, as the source carries it
init
(no comment in the source: the name reads as a sentence) initno extension
PutLock
A lock is an ACT, not a counter: it stays until someone unlocks it, unlike the failure lockout stzAuth keeps in memory and lets expire.no extension
DeleteLock
(no comment in the source: the name reads as a sentence) delete lockno extension
LockOf
[ :reason, :at ] or [] when the user is not locked.no extension
PutUser
usersno extension
UserHash
(no comment in the source: the name reads as a sentence) user hashno extension
HasUser
(no comment in the source: the name reads as a sentence) has userno extension
DeleteUser
(no comment in the source: the name reads as a sentence) delete userno extension
CountUsers
(no comment in the source: the name reads as a sentence) count usersno extension
PutSession
A session is a RECORD: [ :token, :user, :expires, :created, :ip, :ua, :lastseen ] -- so a "your devices" view can list them, and idle timeout has a lastseen to compare. paRec (to PutSession) carries everything but :token.no extension
Session
the full record (with :token) or [] when the token is unknown.no extension
TouchSession
update a session's last-seen stamp (idle-timeout sliding window). Rebuilds the row rather than mutating a hashlist field in place (that INSERTS a key).no extension
DeleteSession
(no comment in the source: the name reads as a sentence) delete sessionno extension
DeleteUserSessions
(no comment in the source: the name reads as a sentence) delete user sessionsno extension
CountSessions
(no comment in the source: the name reads as a sentence) count sessionsno extension
Sessions
all session records -- for purge / enumeration.no extension
SessionsOf
the records belonging to one user.no extension
PutTotp
One row per user with 2FA: the base32 secret, a confirmed flag (a secret is stored unconfirmed at enrollment and only enforced once the user proves a first code), and the list of one-time recovery-code HASHES (never plaintext).no extension
Totp
(no comment in the source: the name reads as a sentence) totpno extension
SetTotpConfirmed
(no comment in the source: the name reads as a sentence) set totp confirmedno extension
SetTotpRecovery
(no comment in the source: the name reads as a sentence) set totp recoveryno extension
DeleteTotp
(no comment in the source: the name reads as a sentence) delete totpno extension
PutChallenge
A short-lived, one-time challenge. handle = the lookup key (for magic-link, sha256 of the emailed token so the raw token is never stored; for email-OTP, "otp:"+email so a new request replaces the pending one). codehash is empty for magic-link (the token IS the secret) and a salted hash of the code for OTP.no extension
Challenge
(no comment in the source: the name reads as a sentence) challengeno extension
DeleteChallenge
(no comment in the source: the name reads as a sentence) delete challengeno extension
GrantRole
Per-user role GRANTS (durable). The role DEFINITIONS -- what capabilities a role carries -- are app config held by stzAuth, not stored here.no extension
RevokeRole
(no comment in the source: the name reads as a sentence) revoke roleno extension
HasRole
(no comment in the source: the name reads as a sentence) has roleno extension
RolesOf
(no comment in the source: the name reads as a sentence) roles ofno extension
DeleteUserRoles
(no comment in the source: the name reads as a sentence) delete user rolesno extension
PutPasskey
One row per CREDENTIAL, keyed by its id: a user may enroll several devices, and each carries its own public key and signature counter.no extension
Passkey
(no comment in the source: the name reads as a sentence) passkeyno extension
PasskeysOf
(no comment in the source: the name reads as a sentence) passkeys ofno extension
SetPasskeyCounter
(no comment in the source: the name reads as a sentence) set passkey counterno extension
DeletePasskey
(no comment in the source: the name reads as a sentence) delete passkeyno extension
DeleteUserPasskeys
(no comment in the source: the name reads as a sentence) delete user passkeysno extension