You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Signing in with a password (keel #211): signInWithPassword({ email | username, password, tokenName })
turns an email address (or username) and password into a new account token (ow_a_) for this device,
named tokenName, the name the account's tokens page lists it under. It signs in at keel's sign-in service
({baseUrl}/auth/app/v1), mints the token with that session at POST /account/tokens, then ends the
session, whether the mint worked or not. Only the token comes back (OwSignedIn: token, id, name, last4); the password is sent once and held nowhere. Works on a client with no key, and sends no key
whatever the client holds. Exactly one of email and username, else a TypeError before sending.
OwSignInError, with a reason: invalid_credentials, email_unverified, rate_limited (with retryAfter when keel sends it), offline, mint_failed or failed, plus keel's status and code.
The password is never in its message or properties. For Atlas's sign-in (atlas #387) and Lantern, which
carried its own copy. The session's end is cut off after five seconds, so a hung network never holds a
sign-in whose token is already made. Checked live on production (a sign-in, the token reading the
account's worlds, revoked and read back as key_revoked).