From 95f87e574d94b1f97a2897defb0bf52e14ed2cb6 Mon Sep 17 00:00:00 2001 From: chee Date: Wed, 18 Nov 2020 09:55:27 +0000 Subject: [PATCH] Add readme --- readme.md | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) create mode 100644 readme.md diff --git a/readme.md b/readme.md new file mode 100644 index 0000000..dcb541e --- /dev/null +++ b/readme.md @@ -0,0 +1,25 @@ +# snootauth + +ssh-based web logins + + +when you click listen in the browser, +it starts a GET request which makes the server open +a unix socket that's owned by your user in `/snoot/auth/socks/your-uid.sock`. + +there is an ssh server running on port 2424, +which has a ForceCommand setting set to a command called `succeed` +that writes the word success to the socket belonging to your user +at which point it immediately exists and says "Thank-you! you can +return to your browser" + +the GET request to listen receives the "success" and returns, +setting a cookie for you on the snoot you are on + +and now there is a file that is only read-writeable +by the snoot whose site the user is trying to log in to +(and the snootauth program, so it can delete or replace them) + + +so in the snoot's site's server, when you receive a cookie, +you can check if it matches the cookie in `/snoots/auth/sessions/{their-name}.{my-name}` \ No newline at end of file