1 files changed, 172 insertions, 0 deletions

diff --git a/src/sledjchisl/NOTES.txt b/src/NOTES.txt
index e80b8d9..93ed815 100644
--- a/src/sledjchisl/NOTES.txt
+++ b/src/NOTES.txt
@@ -477,3 +477,175 @@ Update / upgrade / downgrade
 Yeah I hate things that have their own packaging system, for needing to
 step outside the operating systems packaging system, and adding to the too
 long list of stuff I have to deal with manually, and now I are one.  lol
+
+
+-------------------------------------------------------------------
+
+Time for a restructure of the web page / field / database stuff.
+
+Will need to include a "what page is this" cookie, or maybe query ?mode=add
+
+
+
+old validate UUID
+    define the UUID based UserAccounts db static dbRequest, fill it if needed.
+    if create
+        try to find an unused UUID
+        fill Rd->stuff with UUID
+    if confirm
+        check it's length
+    otherwise
+        check it's length
+        look it up, bitch if not found
+    If we found it, put level into Rd->database
+    fill Rd->stuff with UUID
+
+old validateName
+    define the name based UserAccounts db static dbRequest, fill it if needed.
+    Do the Lua file lookup, fill a tnm hash.
+    Do the database lookup, fill rows.
+    if login
+        convert tnm to Rd->database, or dbPull(rows)
+        fill Rd->stuff with name, UUID, and level
+    if create
+        complain if we found a record
+        try to find an unused UUID
+        fill Rd->database with new data
+        fill Rd->stuff with name, UUID, and level
+
+old validatePassword
+    define the UUID based auth db static dbRequest, fill it if needed.
+    if login
+        do the database lookup, fill rows
+        check if the name validation found us a UUID, fail login if it didn't
+        do the pasword+salt hash and compare
+        fill Rd->stuff with passwordHash and passwordSalt
+    if create
+        fill Rd->stuff with paswordHash and passwordSalt
+    if confirm
+        check if password hashess are the same
+
+
+
+
+
+freeSesh(Rd, linky, wipe)
+            linky - Rd->shs or Rd->lnk
+                    %s/sessions/%s.lua or %s/sessions/%s.linky
+            wipe  - wipe or delete session
+                    wiping means remove session stuff from Rd->stuff
+                        Which happens on - session failing to write, redirecting login form, showing login form if not confirm, vegOut (session timeout, bitchSession)
+
+newSesh(Rd, linky)
+            linky - old Rd->shs or a new Rd->lnk
+    setToken_n_munchie(Rd, linky);                      Only caller of setToken_n_munchie(Rd, linky);
+
+
+setToken_n_munchie(Rd, linky)
+            linky - Rd->shs or Rd->lnk
+                    %s/sessions/%s.lua or %s/sessions/%s.linky
+                    !linky - actually set the cookies.
+    if error writing session file - freeSesh(Rd, linky, TRUE);
+
+
+//validateSesh()
+sessionValidate()
+    bitchSession() for bad session things.
+    sets chillOut for validated session linky.
+        Rd->chillOut = TRUE;
+        freeSesh(Rd, linky, FALSE);
+        Rd->func = (pageBuildFunction) loginPage;
+        Rd->doit = "logout";
+    sets vegOut if the session timed out.
+
+//validatePassword()
+    sets chillOut for validated password on create.
+
+bitchSession()  called if there's anything wrong with the session trackers, if we can't load / run the users Lua file, 
+    sets vegOut
+
+account_HTML()
+    sets chillOut for POST confirm
+        createUser(Rd);
+        newSesh(Rd, TRUE);
+        Rd->chillOut = TRUE;
+    sets chillOut for POST login
+        Rd->chillOut = TRUE;
+
+
+    POST with no errors will
+        form == accountLogin    freeSesh(Rd, FALSE, TRUE)
+        doit == login           chillOut = TRUE
+        vegOut                  freeSesh(Rd, FALSE, TRUE);
+        else chillOut           freeSesh(Rd, FALSE, FALSE);  newSesh(Rd, FALSE);
+        else no Rd->shs.leaf    newSesh(Rd, FALSE);
+        redirect to GET
+    otherwise
+        form == accountLogin
+            doit == confirm     freeSesh(Rd, FALSE, TRUE)
+                                newSesh(Rd, FALSE)
+        else if errors          reeSesh(Rd, FALSE, FALSE)  newSesh(Rd, FALSE)
+        show page
+
+
+
+LOGGED IN means that the session stored on disk has a valid UUID.
+    When creating a new user, we create a new UUID firstish.
+
+
+accountLoginWeb() / accountOut()
+    freeSesh(Rd, FALSE, TRUE)
+    newSesh(Rd, FALSE)
+
+accountView()
+    freeSesh(Rd, FALSE, FALSE)
+    newSesh(Rd, FALSE)
+
+accountAdd()
+    Note that this is in two parts, first they click "create" on login page, then "confirm" on the account creation page.
+
+
+
+Account creation
+    accountLoginWeb()
+        "create"        -> 
+            Show accountCreateWeb and await confirmation.
+    accountCreateWeb()
+        "confirm"       -> accountAdd()
+            create UUID
+            create user
+            store user
+            wipe old session
+            store new session with UUID, user is logged in now
+            create linky
+            email linky
+            Show usual logged in page.
+        "cancel"        -> 
+
+
+-------------------------------------------------------------------
+
+
+Maybe - /opt/opensim_SC/var/cache/sessions/uuid-uuid-uuid-uuid.logged  symlink to session.
+
+https://localhost/sledjchisl.fcgi/account.html?user=account_name
+https://localhost/sledjchisl.fcgi/account.html/users/account_name
+    logged in user is in the sesion, but they can view / vouch / edit / delete any other user depending on their access level
+
+
+For logged in user, at the top show their name as linky to their accountView http://localhost/sledjchisl.fcgi/account.html/users/account_name
+    That accountView offers edit / logout button, etc.
+    Display account stuff, but not edit it until they hit the edit button.
+
+When showing other users
+    accountView, with edit / delete buttons if logged in user is high enough level.
+
+-------------------------------------------------------------------
+-------------------------------------------------------------------
+-------------------------------------------------------------------
+
+
+BUGS!
+-----
+Redo the santize(), though that needs extensive changes each time we read Rd->cookies, Rd->queries, and Rd->body
+