| Age | Commit message (Expand) | Author | Lines |
|---|
| Move the cookie-signing secret out of the cachev2.3.0 | Bryce Kwon | -1/+1 |
| Trim the lua headers and fix the Scintillua notes | Bryce Kwon | -29/+2 |
| Fix cookie name escaping and stored hash trimming | Bryce Kwon | -2/+16 |
| Reorganize the tree into vendor/ and custom/ | Bryce Kwon | -0/+0 |
| Harden and reorganize the auth filters | Bryce Kwon | -187/+345 |
| Harden the auth filter headers and session cookie | Bryce Kwon | -5/+31 |
| Prune and rename the filter extensions | Bryce Kwon | -2/+15 |
| Reorganize into source, assets and libraries | Bryce Kwon | -0/+0 |
| filters: migrate from luacrypto to luaossl | Jason A. Donenfeld | -12/+19 |
| auth-filters: add simple file-based authentication scheme | Jason A. Donenfeld | -20/+65 |
| auth-filters: use crypt() in simple-authentication | Jason A. Donenfeld | -13/+6 |
| auth-filters: generate secret securely | Jason A. Donenfeld | -8/+42 |
| auth-filters: do not use HMAC-SHA1 | Jason A. Donenfeld | -2/+2 |
| simple-authentication.lua: tie secure cookies to field names | Jason A. Donenfeld | -13/+21 |
| simple-authentication: style | Jason A. Donenfeld | -1/+1 |
| auth: document tweakables in lua script | Jason A. Donenfeld | -0/+10 |
| auth: have cgit calculate login address | Jason A. Donenfeld | -6/+1 |
| auth: lua string comparisons are time invariant | Jason A. Donenfeld | -2/+2 |
| authentication: use hidden form instead of referer | Jason A. Donenfeld | -79/+121 |
| auth: add basic authentication filter framework | Jason A. Donenfeld | -0/+225 |
