Module account_recovery 

Account recovery: a member’s user key, held by the organization so that admins can recover the member’s account by resetting the member’s master password.

The server and the API name this value the “reset password key” (resetPasswordKey).

Versions

• V1: the member’s user key encapsulated to the organization’s public key. Nothing authenticates the sender.
• V2 (planned): the member’s user key sealed from the member’s identity to the organization’s identity in an identity-sealed key envelope, which authenticates the member as the sender.

AccountRecovery::make takes the TrustProof for the organization’s public key. Some V1 flows have no way to verify the public key, and use AccountRecovery::make_untrusted. V2 has no untrusted variant.

Until identities exist, [PublicKey] and OrganizationPrivateKey stand in for the organization’s identity.

Enums

AccountRecovery

A member’s user key, held by the organization so that admins can recover the account.

AccountRecoveryMakeError

Errors that can occur when making an account recovery with a trust proof.

AccountRecoveryMakeUntrustedError

Errors that can occur when making an account recovery without a trust proof.

AccountRecoveryParseError

Errors that can occur when parsing an account recovery.

AccountRecoveryUnsealError

Errors that can occur when unsealing an account recovery.