# Baron Safe App

Baron Safe is a PWA/WebView hybrid mobile app for Baron SSO login confirmation, session review, and suspicious session blocking.

## Development Direction

- Keep the existing `userfront` repository unchanged.
- Reuse applicable `userfront` UI flow, Flutter patterns, routing, and API interaction style.
- Use WebView for information display and user interaction.
- Delegate push, biometric authentication, secure storage, and future device signing to native or Flutter plugin layers.

## Initial Flow

1. User enters a phone number in Baron SSO or an RP login screen.
2. Baron SSO proceeds with the existing login policy.
3. Login/session history is recorded.
4. Baron Safe receives a login notification via FCM/APNs.
5. User checks service, IP, device, time, and auth method in Baron Safe.
6. If suspicious, the user blocks the session or linked RP.

## Repository Layout

```text
baron-safe-app/
  docs/
  app/
  docker/
  scripts/
  .vscode/
  .gitea/workflows/
```