Authentication Class Model

Authentication Class Model An architecture diagram generated by Archify. StoredAuthLoader · source · seed · route · Architecture component StoredAuthLoader source · seed · route Cookie · identity + attributes · Architecture component Cookie identity + attributes CookieMergeResult · transaction result · Architecture component CookieMergeResult transaction result Client Runtime · AuthRefreshCoordinator · Architecture component Client Runtime AuthRefreshCoordinator AuthTokens · mutable, aliased · Architecture component · authoritative AuthTokens mutable, aliased authoritative ProfileStore · path-owned writes · Architecture component ProfileStore path-owned writes CookieJar · canonical container · Architecture component CookieJar canonical container StorageLockManager · dependency bottom · Architecture component StorageLockManager dependency bottom ColdRecoveryCoordinator · L2.5 to L4 ladder · Architecture component ColdRecoveryCoordinator L2.5 to L4 ladder SingleFlight · leader + followers · Architecture component SingleFlight leader + followers MintService · stateless boundary · Architecture component MintService stateless boundary MasterToken · frozen value · Architecture component · redacted repr MasterToken frozen value redacted repr Lock Files · four derived paths · Architecture component Lock Files four derived paths aliases loaded by refreshed by persists to guarded by merges holds written under bootstrap lock returns derives minted session Legend Backend Database Security

Value types

  • • Cookie and CookieJar own every conversion plus the cookie-set policy questions
  • • MasterToken is frozen and redacts its credential from repr

Load result

  • • StoredAuthLoader returns a closed InlineLoadedAuth or FileLoadedAuth
  • • TokenAcquirer is its only structural seam; blocking work is offloaded

Concurrency

  • • SingleFlight keys on the canonical storage path with per-path success epochs
  • • Waiter cancellation never cancels the shared leader task