mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-08 20:42:43 +00:00
Marc-André Bombeck
1900792756
Allowing an AI assistant hands it a standing credential to the record that outlives the session, the same class of act as minting a token, but the consent took a live session alone. A stolen session could connect its own assistant and keep reading after the owner signed everything out. The consent page now shows the Allow form only when the session signed in or re-proved within five minutes (with the second factor on an account that has one). Otherwise it links to a new confirm page that runs the same re-proof dialog as the rest of the app and returns to the exact consent request. The allow decision checks again and mints nothing without it; deny needs no proof. The confirm page only ever returns to the consent endpoint.