code wiki / _hdl_build / nx_cms_mfa_gate.nx

nx_cms_mfa_gate.nx

buildroot/runtime/_hdl_build/nx_cms_mfa_gate.nx

2548 B45 linesdepth 7pulls 29 transitivereach 0 importersview sourcekind gate/prooftopic cms
docsdependenciesstructsconstsfunctions

about

nx_cms_mfa_gate.nx -- INTEGRATION gate for the #12 MFA wiring in nx_cms_admin. Drives the REAL ca_mfa_ok (the function the /admin/login handler calls after the argon2id password check) over a constructed POST body + base32 secret: not-enrolled=pass-through, enrolled+valid=accept, enrolled+wrong/missing=reject, enrolled+adjacent-step=accept (skew). exit 0 = pass, N = assertion N failed.

dependencies 2 imports · 0 importers

nx_cms_admin.nx nx_assert.nx nx_cms_mfa_gate.nx

imports: nx_cms_admin.nxnx_assert.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main totp_sha1_render hotp_sha1_value sys_mmap nxa_die sys_write sys_exit nxa_lock_take nxa_lock_addr sys_write ↻ nxa_lock_give nxa_lock_addr ↻ nxa_report_overrun sys_write ↻ nxa_dump_printable sys_write ↻ nxa_dump_sizes sys_write ↻ hmac_sha1 sys_mmap ↻ sha1 sys_mmap ↻ sha1_process_block if_ge g_codebody ca_cat ca_cat ↻ nx_puts_err sys_write ↻ ca_mfa_ok mfa_enrolled nx_http_form_get_field nxf_decode_chunk nxf_hex_nibble mfa_verify sys_mmap ↻ base32_decode sys_mmap ↻ b32_dec_val hotp_sha1_value ↻

structs

none

consts

none

functions

9func g_codebody(buf: *u8, code6: *u8) -> i64
called by 1: main calls 1: ca_cat
15func main() -> i64