Flow

1. User authentication (OpenID support)
2. User inputs passphrase for the decryption of the database
3. Secrets are transferred encrypted to the client.
4. Client calculates TOTP

Features

MVP

• Docker Container
• Storage of the keys encrypted in the database (PostgreSQL+pgcrypto data-at-rest, data-in-transfer)
• key generation
• Authentication

Later

• OpenID authentication
• passphrase/word hashing using Argon2
• Importing and exporting to/from different Authenticators
• provide an API with token for future Aegis support

Tech Stack

Frontend

• Svelte/SvelteKit
• Tailwind CSS

Backend

• Actix Web
• PostgreSQL
• Redis (maybe)