d7e48091ca
Adds password_login and logout to swarm-matrix-client and deletes the controller's private copies, with their own timeouts and error text.
22 lines
1.1 KiB
Markdown
22 lines
1.1 KiB
Markdown
# swarm-matrix-client
|
|
|
|
The appservice calls against the swarm's homeserver, shared by the two binaries
|
|
that make them: `swarm-matrix-ctl` (inside the matrix container, for a hive's
|
|
sender account) and `swarm-controller` (for each agent's account, with the
|
|
swarm's own appservice token).
|
|
|
|
Three calls, all client-server API: register an account as the appservice, log
|
|
in to an existing one as the appservice, and ask a token who it is. Both mints
|
|
pin the device id `hyperhive-<localpart>`, so a second login **replaces** that
|
|
device's token instead of adding a device.
|
|
|
|
`swarm-controller` also logs an operator-linked account in with its password
|
|
(`password_login`) and invalidates its token (`logout`) on whatever homeserver
|
|
the operator names. Neither call is an appservice call, so neither carries the
|
|
appservice token.
|
|
|
|
## 🩸 A secret is a path, never a value
|
|
|
|
Every error here is built from the response's status and its `errcode`, never
|
|
its body: a successful `/register` or `/login` body is an access token, and an
|
|
error body is one malformed response away from being the same bytes.
|