| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | dashboard: a token handed over to another member's dashboard | tv | 4 days | 1 | -0/+18 |
| | | | | | | | | | Opening another member's dashboard passes a token reading only, for five minutes, in the URL's fragment; its login page begins a session with it. Tokens may be asked for with a shorter lifetime. Auth plan M3 (hand-off). | ||||
| * | auth: a login page and browser sessions | tv | 4 days | 1 | -0/+82 |
| GET /login without authentication: log in by password or with a token (from a login by key). POST/DELETE /auth/session keep the token as an HttpOnly, SameSite=Strict cookie; the dashboard sends a browser without a user there and renews the session while open. Auth plan M2/M3 (browsers). | |||||
 |
index : continuum | |
| P2P replicated document storage service |
| aboutsummaryrefslogtreecommitdiffstats |