auth/

Package challenge verifies Cloudflare Turnstile tokens, the human check guarding sign-in, registration, password resets and guest purchases.

Package deviceauth authenticates the optional device transport envelope.

Package devicesession supplies per-device session generations.

Package identifier normalizes and validates the identifiers accounts sign in with: email addresses, phone numbers and device identifiers.

Package password hashes account passwords with argon2id and checks sign-in attempts against the stored hash.

Package ratelimit grants a limited number of permits per key and period.

Package token signs and parses the HS256 JSON Web Tokens the server hands out: the session tokens of package usersession and billing's order event tickets.

Package usersession issues, validates and ends user sessions.