baron-safe-app/README.md

Baron Safe App

Baron Safe is a PWA/WebView hybrid mobile app for Baron SSO login confirmation, session review, and suspicious session blocking.

Development Direction

• Keep the existing userfront repository unchanged.
• Reuse applicable userfront UI flow, Flutter patterns, routing, and API interaction style.
• Use WebView for information display and user interaction.
• Delegate push, biometric authentication, secure storage, and future device signing to native or Flutter plugin layers.

Initial Flow

1. User enters a phone number in Baron SSO or an RP login screen.
2. Baron SSO proceeds with the existing login policy.
3. Login/session history is recorded.
4. Baron Safe receives a login notification via FCM/APNs.
5. User checks service, IP, device, time, and auth method in Baron Safe.
6. If suspicious, the user blocks the session or linked RP.

Repository Layout

baron-safe-app/
  docs/
  app/
  docker/
  scripts/
  .vscode/
  .gitea/workflows/