| Age | Commit message (Expand) | Author | Lines |
|---|
| Say that a protected repository stays on the index | Bryce Kwon | -0/+4 |
| Name the auth cookie __Host- where it can be | Bryce Kwon | -2/+10 |
| End a session when its account's hash changes | Bryce Kwon | -29/+44 |
| Load auth libraries only when a request needs one | Bryce Kwon | -6/+10 |
| Say which hash kinds each system's crypt checks | Bryce Kwon | -2/+14 |
| Spend a missing account's login on a real hash | Bryce Kwon | -12/+17 |
| Turn down passwords past 256 bytes unchecked | Bryce Kwon | -1/+5 |
| Read the auth cookie in linear time | Bryce Kwon | -9/+21 |
| Refuse every repository when auth-file loses repos | Bryce Kwon | -11/+14 |
| Unify the docs, samples and extensions | Bryce Kwon | -1/+1 |
| Clean up the whole tree | Bryce Kwon | -22/+11 |
| Give the login inputs explicit field types | Bryce Kwon | -1/+1 |
| Trim the comments and dead code across the tree | Bryce Kwon | -44/+29 |
| Let password managers fill the login form | Bryce Kwon | -4/+4 |
| Restyle the filter extension headers and markup | Bryce Kwon | -158/+183 |
| Move the cookie-signing secret out of the cachev2.3.0 | Bryce Kwon | -1/+1 |
| Trim the lua headers and fix the Scintillua notes | Bryce Kwon | -29/+2 |
| Fix cookie name escaping and stored hash trimming | Bryce Kwon | -2/+16 |
| Reorganize the tree into vendor/ and custom/ | Bryce Kwon | -0/+0 |
| Harden and reorganize the auth filters | Bryce Kwon | -187/+345 |
| Harden the auth filter headers and session cookie | Bryce Kwon | -5/+31 |
| Prune and rename the filter extensions | Bryce Kwon | -2/+15 |
| Reorganize into source, assets and libraries | Bryce Kwon | -0/+0 |
| filters: migrate from luacrypto to luaossl | Jason A. Donenfeld | -12/+19 |
| auth-filters: add simple file-based authentication scheme | Jason A. Donenfeld | -20/+65 |
| auth-filters: use crypt() in simple-authentication | Jason A. Donenfeld | -13/+6 |
| auth-filters: generate secret securely | Jason A. Donenfeld | -8/+42 |
| auth-filters: do not use HMAC-SHA1 | Jason A. Donenfeld | -2/+2 |
| simple-authentication.lua: tie secure cookies to field names | Jason A. Donenfeld | -13/+21 |
| simple-authentication: style | Jason A. Donenfeld | -1/+1 |
| auth: document tweakables in lua script | Jason A. Donenfeld | -0/+10 |
| auth: have cgit calculate login address | Jason A. Donenfeld | -6/+1 |
| auth: lua string comparisons are time invariant | Jason A. Donenfeld | -2/+2 |
| authentication: use hidden form instead of referer | Jason A. Donenfeld | -79/+121 |
| auth: add basic authentication filter framework | Jason A. Donenfeld | -0/+225 |
