canvas-website/backlog/tasks/task-018 - Create-Cloudflar...

1.3 KiB

id title status assignee created_date labels dependencies priority
task-018 Create Cloudflare D1 cryptid-auth database To Do
2025-12-04 12:02
infrastructure
cloudflare
d1
cryptid
auth
high

Description

Create the D1 database on Cloudflare for CryptID authentication system. This is the first step before deploying the email recovery feature.

Database Purpose:

  • Store user accounts linked to CryptID usernames
  • Store device public keys for multi-device auth
  • Store verification tokens for email/device linking
  • Enable account recovery via verified email

Security Considerations:

  • Emails should be encrypted at rest (task-016)
  • Public keys are safe to store (not secrets)
  • Tokens are time-limited and single-use
  • No passwords stored (WebCrypto key-based auth)

Acceptance Criteria

  • #1 D1 database 'cryptid-auth' created via wrangler d1 create
  • #2 D1 database 'cryptid-auth-dev' created for dev environment
  • #3 Database IDs added to wrangler.toml (replacing placeholders)
  • #4 Schema from worker/schema.sql deployed to both databases
  • #5 Verified tables exist: users, device_keys, verification_tokens