32 lines
988 B
Markdown
32 lines
988 B
Markdown
# Baron Safe App
|
|
|
|
Baron Safe is a PWA/WebView hybrid mobile app for Baron SSO login confirmation, session review, and suspicious session blocking.
|
|
|
|
## Development Direction
|
|
|
|
- Keep the existing `userfront` repository unchanged.
|
|
- Reuse applicable `userfront` UI flow, Flutter patterns, routing, and API interaction style.
|
|
- Use WebView for information display and user interaction.
|
|
- Delegate push, biometric authentication, secure storage, and future device signing to native or Flutter plugin layers.
|
|
|
|
## Initial Flow
|
|
|
|
1. User enters a phone number in Baron SSO or an RP login screen.
|
|
2. Baron SSO proceeds with the existing login policy.
|
|
3. Login/session history is recorded.
|
|
4. Baron Safe receives a login notification via FCM/APNs.
|
|
5. User checks service, IP, device, time, and auth method in Baron Safe.
|
|
6. If suspicious, the user blocks the session or linked RP.
|
|
|
|
## Repository Layout
|
|
|
|
```text
|
|
baron-safe-app/
|
|
docs/
|
|
app/
|
|
docker/
|
|
scripts/
|
|
.vscode/
|
|
.gitea/workflows/
|
|
```
|