aboutsummaryrefslogtreecommitdiffstats
path: root/src/api/dashboard/login.html
Commit message (Collapse)AuthorAgeFilesLines
* auth: a login page and browser sessionstv4 days1-0/+82
GET /login without authentication: log in by password or with a token (from a login by key). POST/DELETE /auth/session keep the token as an HttpOnly, SameSite=Strict cookie; the dashboard sends a browser without a user there and renews the session while open. Auth plan M2/M3 (browsers).