CRICKET21

FIDO Hardware Enclave Companion Auth & Redis Session Engine

SignalR: Disconnected
1. Web Application Client AngularJS

The web client requests a 60s login challenge, renders a QR code, and joins the SignalR Hub room matching sessionId.

Expires in: 60s
✓ Biometric Assertion Received!
JWT Issued & Session verified. Redirecting to Cricket21 Analytics...
✕ SESSION_OVERWRITTEN (401 Unauthorized)
Your account was logged into from another device! Local session terminated.
// Awaiting challenge generation...
2. Mobile Companion Device iOS / Android
Secure Enclave (P-256)

Simulates the companion app hardware key creation with setUserAuthenticationRequired(true) and biometric prompt.

// Ready to simulate hardware companion...
3. Single Active Session Engine (Redis Real-Time Enforcement Test)

Enforce Strict Single Device / Concurrent Session Rule

Simulate someone else (or another browser tab) logging in with the same account. The Redis key active_session:{userId} is overwritten.

// Click "Test Protected API" to verify session validity in Redis...