Initial Baron Safe app scaffold

2026-06-30 15:16:14 +09:00
commit 5f7b9a7360
24 changed files with 310 additions and 0 deletions
@@ -0,0 +1,31 @@
+# Baron Safe App
+
+Baron Safe is a PWA/WebView hybrid mobile app for Baron SSO login confirmation, session review, and suspicious session blocking.
+
+## Development Direction
+
+- Keep the existing `userfront` repository unchanged.
+- Reuse applicable `userfront` UI flow, Flutter patterns, routing, and API interaction style.
+- Use WebView for information display and user interaction.
+- Delegate push, biometric authentication, secure storage, and future device signing to native or Flutter plugin layers.
+
+## Initial Flow
+
+1. User enters a phone number in Baron SSO or an RP login screen.
+2. Baron SSO proceeds with the existing login policy.
+3. Login/session history is recorded.
+4. Baron Safe receives a login notification via FCM/APNs.
+5. User checks service, IP, device, time, and auth method in Baron Safe.
+6. If suspicious, the user blocks the session or linked RP.
+
+## Repository Layout
+
+```text
+baron-safe-app/
+  docs/
+  app/
+  docker/
+  scripts/
+  .vscode/
+  .gitea/workflows/
+```