secubox-deb/docs/superpowers/specs
CyberMind-FR 14fba6ccec docs: auth rework design — secubox-users as identity source + TOTP 2FA (ref #120)
Brainstormed spec for replacing the plaintext auth.toml admin login with
secubox-users-backed argon2id auth, RFC 6238 TOTP 2FA (mandatory for
admins), kill-on-disable session revocation, CLI/API parity via a single
secubox_users.engine module, and feature-flagged 3-phase rollout.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 07:53:45 +02:00
..
2026-04-21-eye-remote-integration-design.md docs: Add Eye Remote integration design specification 2026-04-21 08:32:35 +02:00
2026-04-23-eye-remote-bootstrap-design.md docs(eye-remote): Add bootstrap v2.1.0 design specification 2026-04-23 10:23:19 +02:00
2026-04-24-eye-remote-touchscreen-controller-design.md docs: Add Eye Remote touchscreen controller design spec 2026-04-24 09:36:26 +02:00
2026-04-26-eye-remote-swiss-army-design.md docs: Add Eye Remote Swiss Army Dashboard design spec 2026-04-26 17:01:20 +02:00
2026-05-02-haproxy-webui-enhancement-design.md docs(spec): HAProxy WebUI enhancement design 2026-05-02 17:48:05 +02:00
2026-05-03-mitmproxy-waf-migration-design.md docs(spec): Add mitmproxy WAF migration design specification 2026-05-03 07:42:43 +02:00
2026-05-05-openwrt-to-debian-migration-design.md docs(migration): Add OpenWrt to Debian migration design spec 2026-05-05 12:31:36 +02:00
2026-05-10-meta-script-generator-design.md docs: Add Meta-Script Generator v2.0.0 design spec 2026-05-10 19:56:50 +02:00
2026-05-11-secubox-apt-clone-design.md docs: add design spec for secubox apt and clone commands 2026-05-11 05:44:35 +02:00
2026-05-12-apt-public-repo-staging-design.md docs(apt): Add public repo staging design (ref #80) 2026-05-12 09:02:51 +02:00
2026-05-12-gitea-repair-design.md docs(gitea): Add design spec for Gitea repair (ref #49, refs #91) 2026-05-12 12:35:34 +02:00
2026-05-12-license-headers-design.md docs(spec): CMSD-1.0 license headers across the codebase 2026-05-12 09:10:37 +02:00
2026-05-12-metablog-gitea-ingest-design.md docs(metablog): Design spec for Gitea ingest of 166 sites (ref #94) 2026-05-12 15:10:05 +02:00
2026-05-12-metablog-site-schema-design.md docs(metablog): Design spec for site.json schema + version metadata (ref #101) 2026-05-12 17:06:00 +02:00
2026-05-12-metablog-version-dashboard-design.md docs(metablog-ui): Design spec for version dashboard (ref #103) 2026-05-12 18:43:34 +02:00
2026-05-12-multi-agent-worktree-workflow-design.md docs(plan): multi-agent worktree workflow design (ref TBD) 2026-05-12 09:45:26 +02:00
2026-05-12-opad-doctrine-design.md docs(opad): Add OPAD doctrine design specification 2026-05-12 08:39:42 +02:00
2026-05-12-ssl-health-banner-design.md docs(spec): SSL certificate health in Health Banner 2026-05-12 10:24:17 +02:00
2026-05-12-streamlit-gitea-version-pinning-design.md docs(streamlit): Design spec for Gitea version pinning (ref #95) 2026-05-12 16:29:34 +02:00
2026-05-12-visitor-origin-feed-design.md Health banner: live panel (visitor-origin + live-hosts + cert-status) (#98) 2026-05-12 16:27:56 +02:00
2026-05-12-webui-obfuscation-design.md WebUI Obfuscation - admin.HOSTNAME.secubox.in Only (#96) 2026-05-12 14:07:11 +02:00
2026-05-13-metablog-deploy-webhook-design.md docs(metablog-webhook): Design spec for deploy webhook (ref #113) 2026-05-13 07:31:20 +02:00
2026-05-13-secubox-users-auth-design.md docs: auth rework design — secubox-users as identity source + TOTP 2FA (ref #120) 2026-05-13 07:53:45 +02:00