Closed indomitableSwan closed 2 years ago
Second bullet is a good point. In phase 0, we included a "get all key IDs" function that didn't make it into this version yet. Would "a list of the user's associated data" include anything other than key IDs?
Second bullet is a good point. In phase 0, we included a "get all key IDs" function that didn't make it into this version yet. Would "a list of the user's associated data" include anything other than key IDs?
See #53
There should probably be implementation guidance around the handlings of master_key
added in...
This PR closes #12.
Things it doesn't address, but came up as questions during drafting:
user_id
for both OPAQUE and our application, but these identifiers should be different. For OPAQUE, the user identifier should be human-memorable account information, whereas the latter is a 128-bit UUID. The likely solution here is that the key server should generate and store this ID during registration (#11), and pass it back to the client during authentication (#10).