canvas-website/backlog/tasks/task-016 - Create-Cloudflar...

1.3 KiB

id title status assignee created_date labels dependencies priority
task-016 Create Cloudflare D1 cryptid-auth database To Do
2025-12-04 12:00
infrastructure
cloudflare
d1
cryptid
auth
security
high

Description

Create the D1 database on Cloudflare for CryptID authentication system. This is the first step before deploying the email recovery feature.

Database Purpose:

  • Store user accounts linked to CryptID usernames
  • Store device public keys for multi-device auth
  • Store verification tokens for email/device linking
  • Enable account recovery via verified email

Security Considerations:

  • Emails should be encrypted at rest (Phase 2)
  • Public keys are safe to store (not secrets)
  • Tokens are time-limited and single-use
  • No passwords stored (WebCrypto key-based auth)

Acceptance Criteria

  • #1 D1 database 'cryptid-auth' created via wrangler d1 create
  • #2 D1 database 'cryptid-auth-dev' created for dev environment
  • #3 Database IDs added to wrangler.toml (replacing placeholders)
  • #4 Schema from worker/schema.sql deployed to both databases
  • #5 Verified tables exist: users, device_keys, verification_tokens