Authentication Class Model

Authentication Class Model An architecture diagram generated by Archify. StoredAuthLoader · source · paired seed · route · Architecture component StoredAuthLoader source · paired seed · route Cookie · identity + attributes · Architecture component Cookie identity + attributes CookieMergeResult · transaction result · Architecture component CookieMergeResult transaction result Web Auth Owners · session auth · persistence · Architecture component Web Auth Owners session auth · persistence AuthTokens · mutable, aliased · Architecture component · authoritative AuthTokens mutable, aliased authoritative ProfileStore · path-owned writes · Architecture component ProfileStore path-owned writes CookieJar · canonical container · Architecture component CookieJar canonical container StorageLockManager · dependency bottom · Architecture component StorageLockManager dependency bottom ColdRecoveryCoordinator · L2.5 to L4 ladder · Architecture component ColdRecoveryCoordinator L2.5 to L4 ladder SingleFlight · leader + followers · Architecture component SingleFlight leader + followers MintService · stateless boundary · Architecture component MintService stateless boundary MasterTokenBootstrapper · MintService · ProfileStore · Architecture component · bootstrap lock MasterTokenBootstrapper MintService · ProfileStore bootstrap lock Lock Files · four derived paths · Architecture component Lock Files four derived paths mutates in place loaded by refreshed by storage path coalesces through merges holds persistence guarded nested store lock returns acquires sentinels minted session Legend Backend Database Security

Value types

  • • Cookie and CookieJar are the canonical typed values used by auth policy
  • • cookie_types.py projects one raw sample into live HTTP cookies and a typed baseline

Load result

  • • StoredAuthLoader returns a closed InlineLoadedAuth or FileLoadedAuth
  • • TokenAcquirer is its only structural seam; ProfileStore supplies file-backed transactions

Concurrency

  • • SingleFlight keys on canonical path plus rung policy; ColdRecoveryState serializes each path
  • • Waiter cancellation never cancels the shared leader task