From 0f55d5741b3dfda617670f92a77c3cd6e462be6d Mon Sep 17 00:00:00 2001 From: tv Date: Sun, 8 Nov 2026 15:36:49 +0000 Subject: dashboard: log out of this browser, and say what can't be The dashboard had no way to log out; only the login page did. It now shows the user beside the connection, and "log out" where the page got in by its session: that ends this browser's session (DELETE /auth/session), other sessions of the user going on, and opens the login page. Where it got in by what it can't end, the browser's password or the proxy's, it says so instead (the token answer now names `login`, how the user proved it). After logging out, a page still let in by the browser's password says so too. A list of a user's sessions, to end one by one, is in future-work.md. --- docs/openapi.yaml | 1 + 1 file changed, 1 insertion(+) (limited to 'docs/openapi.yaml') diff --git a/docs/openapi.yaml b/docs/openapi.yaml index 13d8a65..2ebf7fc 100644 --- a/docs/openapi.yaml +++ b/docs/openapi.yaml @@ -1980,6 +1980,7 @@ components: properties: token: { type: string, description: '`ct1.…`: send it as `Authorization: Bearer `.' } user: { type: string } + login: { type: string, description: 'How the user proved it, at the login the session began with: `htpasswd`, `header`, `key`, `token`.' } issuer: { type: string, description: The node that signed it. } expiresAt: { type: integer, description: Unix ms. } sessionExpiresAt: { type: integer, description: Unix ms. } -- cgit v1.3.1