Security
This module has no description in its metadata.
Written by an LLM Enterprise account security: multi-factor authentication with authenticator-app (TOTP), email one-time-code and passkey providers, recovery codes, and MFA enforcement policies with deadlines. Also password changes with notifications, and sudo re-authentication that other modules can require before sensitive actions. Builds on auth, directory and notifications. (from the v0.9.0 source, reviewed by the site owner)
Found by static analysis of the 0.8.0 source. Links that only appear at runtime are not visible here.
Everything security needs outside the starter set is declared. 3 links into starter modules are not, and every app has those.
A newer release exists: security in 0.9.0.
Before you enable security in 0.8.0
3 modules its code requires
✓ 0 declared3 not declared, in every app
Every module it requires is already in every starter app.
Already enabled in every starter app: 3 modules.
Before you disable security in 0.8.0
0 modules require it in code
No module requires security in code.
32 calls in this release could not be resolved, so this is not a guarantee.
requires ⚠ Gap into a module every starter app has (lower risk) Optional Collaboration In requires only, not seen in code In every starter appA dot takes its module's area colour. Each side lists the areas in the order of the map.Reads left to right: what uses it → security → what it needs. Select a module to go to its row.Needs
In every app (3)
| Module | In code | requires | package.json |
|---|---|---|---|
Module: auth | In code: Required · api, command, lib, subscriber | requires: ⚠ Gap in every app | package.json: ✓ Declared |
21 places
and 11 more in | |||
Module: directory | In code: Required · api, ui | requires: ⚠ Gap in every app | package.json: ✓ Declared |
6 places
| |||
Module: notifications | In code: Required · subscriber | requires: ⚠ Gap in every app | package.json: ✓ Declared |
8 places
| |||
Used by
No module uses security in code or declares it in requires.
32 calls elsewhere could not be resolved, so this is not a guarantee.
Facts
Registers in DI (7)
mfaProviderRegistry·packages/enterprise/src/modules/security/di.ts:29passwordService·packages/enterprise/src/modules/security/di.ts:30mfaService·packages/enterprise/src/modules/security/di.ts:31mfaVerificationService·packages/enterprise/src/modules/security/di.ts:32mfaEnforcementService·packages/enterprise/src/modules/security/di.ts:33mfaAdminService·packages/enterprise/src/modules/security/di.ts:34sudoChallengeService·packages/enterprise/src/modules/security/di.ts:35
Emits events (18)
security.mfa.reset·packages/enterprise/src/modules/security/services/MfaAdminService.ts:117security.enforcement.updated·packages/enterprise/src/modules/security/services/MfaEnforcementService.ts:185security.enforcement.created·packages/enterprise/src/modules/security/services/MfaEnforcementService.ts:209security.enforcement.updated·packages/enterprise/src/modules/security/services/MfaEnforcementService.ts:291security.enforcement.deadline_reminder_requested·packages/enterprise/src/modules/security/services/MfaEnforcementService.ts:633security.mfa.enrolled·packages/enterprise/src/modules/security/services/MfaService.ts:146security.mfa.removed·packages/enterprise/src/modules/security/services/MfaService.ts:200security.recovery.regenerated·packages/enterprise/src/modules/security/services/MfaService.ts:239security.recovery.used·packages/enterprise/src/modules/security/services/MfaService.ts:276security.mfa.verified·packages/enterprise/src/modules/security/services/MfaVerificationService.ts:206security.password.changed·packages/enterprise/src/modules/security/services/PasswordService.ts:80security.password.notification_requested·packages/enterprise/src/modules/security/services/PasswordService.ts:81security.sudo.challenged·packages/enterprise/src/modules/security/services/SudoChallengeService.ts:199security.sudo.failed·packages/enterprise/src/modules/security/services/SudoChallengeService.ts:305security.sudo.verified·packages/enterprise/src/modules/security/services/SudoChallengeService.ts:371security.sudo.config.created·packages/enterprise/src/modules/security/services/SudoChallengeService.ts:442security.sudo.config.updated·packages/enterprise/src/modules/security/services/SudoChallengeService.ts:487security.sudo.config.deleted·packages/enterprise/src/modules/security/services/SudoChallengeService.ts:511
Subscribes to events (5)
security.password.notification_requested·packages/enterprise/src/modules/security/subscribers/audit.ts:6security.enforcement.created·packages/enterprise/src/modules/security/subscribers/enforcement-deadline-notification.ts:19security.enforcement.updated·packages/enterprise/src/modules/security/subscribers/enforcement-updated-notification.ts:4security.mfa.reset·packages/enterprise/src/modules/security/subscribers/mfa-reset-notification.ts:11security.mfa.enrolled·packages/enterprise/src/modules/security/subscribers/notification.ts:11
Hosts widget spots (5)
security.profile.sidebar·packages/enterprise/src/modules/security/extension-points.ts:6security.profile.sections·packages/enterprise/src/modules/security/extension-points.ts:7data-table:security.enforcement.list·packages/enterprise/src/modules/security/extension-points.ts:8data-table:security.sudo.list·packages/enterprise/src/modules/security/extension-points.ts:9data-table:security.users.list·packages/enterprise/src/modules/security/extension-points.ts:10
Entities (6)
UserMfaMethod·packages/enterprise/src/modules/security/data/entities.ts:19MfaRecoveryCode·packages/enterprise/src/modules/security/data/entities.ts:62MfaEnforcementPolicy·packages/enterprise/src/modules/security/data/entities.ts:87SudoChallengeConfig·packages/enterprise/src/modules/security/data/entities.ts:124SudoSession·packages/enterprise/src/modules/security/data/entities.ts:167MfaChallenge·packages/enterprise/src/modules/security/data/entities.ts:210