Account passwords and share passwords are verified by one Argon2 PHC verifier. Account malformed-hash errors and share refusal are kept; the encoded algorithm, version, parameters and the constant-time verifier stay authoritative. The unused file-provider trait and its implementation are removed (AuthResult and the live credential and login paths remain).
ONE-DOOR, subunit 4c. Plan: https://tangled.org/notplants-bot.bsky.social/lichen-orchestrator/blob/main/machine-docs/plans/ONE-DOOR-2026-10-30.md
This is a reading copy: only this subunit's product changes, applied in order on its base. Nothing here is to be merged.
Source PRs on lichen.page.review (product), in order, with their original descriptions #
- #3564
s/936-od-u4c-password-product— share PHC password verificationAccount and share passwords use one Argon2 PHC verifier while preserving account malformed-hash errors and share refusal. Remove the unused file-provider trait and implementation; retain AuthResult and live credential/login paths. Encoded algorithms, versions, parameters and constant-time verifier remain authoritative.
Commits #
- ddc7fa1c0 OD 4c: od-u4c-password-product (#3564)
Count and shas #
count-product-code-lines fbb87c641ab5..ddc7fa1c0dc9: NET -71 · counted +12 -83 · moved out of the counted set +0 · comment-only deletions flagged 1 · macros flagged 0 · tests-folder code flagged 0
Base fbb87c641ab51b5bd07a3f42cf5e78533aa84ffd (tip of s/935-od-u4b-admission-tests). Head ddc7fa1c0dc9271bebd1f62596f4aee134ea19a0. 5 files changed.
Check #
Every changed file is a file one of the product PRs changed, and each is identical at the head to the same file at the last product branch s/936-od-u4c-password-product.