Struct AuthService 

pub struct AuthService { /* private fields */ }

Unified authentication service for all UI frontends

Implementations

impl AuthService

pub fn new(storage_manager: EncryptedStorageManager) -> Self

Create new auth service with storage manager

pub fn storage_manager(&self) -> &EncryptedStorageManager

Get reference to storage manager

pub fn storage_manager_mut(&mut self) -> &mut EncryptedStorageManager

Get mutable reference to storage manager

pub async fn create_vault( &mut self, four_words: &str, password: &str, display_name: &str, ) -> Result<String>

Create a new vault for a four-word identity

This creates an encrypted vault with PBKDF2 key derivation (100,000 iterations) and ChaCha20-Poly1305 encryption.

pub async fn login( &mut self, four_words: &str, password: &str, _device_name: Option<&str>, ) -> Result<SessionInfo>

Login with four-word identity and password

On success, stores session and optionally saves password to keyring for auto-login.

pub async fn logout(&mut self) -> Result<()>

Logout current session

pub fn get_current_session(&self) -> Option<SessionInfo>

Get current active session

pub fn is_logged_in(&self) -> bool

Check if user is currently logged in

pub async fn list_vaults(&self) -> Result<Vec<VaultInfo>>

List all available vaults

pub async fn get_recent_identities(&self) -> Result<Vec<RecentIdentity>>

Get recent identities (sorted by last used, max 10)

pub async fn remove_recent_identity(&mut self, four_words: &str) -> Result<()>

Remove a recent identity from the list (does not delete the vault)

pub async fn vault_exists(&self, four_words: &str) -> Result<bool>

Check if vault exists for four-word identity

pub async fn delete_vault( &mut self, four_words: &str, password: &str, ) -> Result<()>

Delete a vault (requires password confirmation)

pub async fn passkey_register( &mut self, four_words: &str, device_name: &str, ) -> Result<PasskeyInfo>

Register a passkey for biometric authentication (legacy - without WebAuthn)

This enables Touch ID, Face ID, or Windows Hello for the identity. The password is stored in the platform keyring for secure retrieval.

pub async fn passkey_register_webauthn( &mut self, four_words: &str, device_name: &str, credential: WebAuthnCredential, ) -> Result<PasskeyInfo>

Register a passkey with WebAuthn credential

This stores the WebAuthn credential for true biometric authentication.

pub async fn passkey_authenticate( &mut self, four_words: &str, ) -> Result<SessionInfo>

Authenticate using passkey/biometric

This retrieves the password from keyring and performs standard vault login.

pub async fn passkey_has_passkey(&self, four_words: &str) -> Result<bool>

Check if identity has a registered passkey

pub async fn passkey_get_info(&self, four_words: &str) -> Result<PasskeyInfo>

Get passkey information for an identity

pub async fn passkey_delete(&mut self, four_words: &str) -> Result<()>

Delete passkey for an identity

pub async fn try_auto_login(&mut self) -> Result<Option<SessionInfo>>

Attempt auto-login using last-used identity

Returns session info if successful, None if no auto-login available.

pub async fn enable_auto_login(&mut self, password: &str) -> Result<()>

Enable auto-login for current session

Stores password in keyring so passkey authentication can work.

pub async fn disable_auto_login(&mut self, four_words: &str) -> Result<()>

Disable auto-login for an identity

pub async fn switch_identity(&mut self, four_words: &str) -> Result<SessionInfo>

Switch to another identity (logout current, login new)