Implement role-aware HTTPS and SSH authentication

src/web_security.h

@@ -1,5 +1,5 @@
 /* SPDX-License-Identifier: GPL-3.0-only */
-/* Persistent HTTPS identity and shared network-administration credentials. */
+/* Persistent HTTPS identity and legacy migration/recovery credentials. */
 
 #pragma once
 
@@ -72,22 +72,6 @@ esp_err_t web_security_copy_tls_material(
     size_t *certificate_length,
     uint8_t *private_key, size_t private_key_capacity,
     size_t *private_key_length);
-esp_err_t web_security_copy_username(char *output, size_t capacity,
-                                     size_t *output_length);
-
-/* Protocol-neutral authentication for the shared HTTPS and SSH administrator. */
-esp_err_t web_security_authenticate_admin(const uint8_t *username,
-                                          size_t username_length,
-                                          const uint8_t *password,
-                                          size_t password_length,
-                                          bool *authenticated);
-
-/* Compatibility name for decoded HTTP Basic components. */
-esp_err_t web_security_authenticate_basic(const uint8_t *username,
-                                          size_t username_length,
-                                          const uint8_t *password,
-                                          size_t password_length,
-                                          bool *authenticated);
 
 /* Explicit secret-bearing API intended for a physically attached UART CLI. */
 esp_err_t web_security_show_credentials(web_security_credentials_t *credentials);