| Age | Commit message (Expand) | Author | Lines |
|---|
| Load auth libraries only when a request needs one | Bryce Kwon | -6/+10 |
| Say which hash kinds each system's crypt checks | Bryce Kwon | -2/+13 |
| Spend a missing account's login on a real hash | Bryce Kwon | -9/+14 |
| Turn down passwords past 256 bytes unchecked | Bryce Kwon | -1/+5 |
| Read the auth cookie in linear time | Bryce Kwon | -5/+21 |
| Unify the docs, samples and extensions | Bryce Kwon | -1/+1 |
| Clean up the whole tree | Bryce Kwon | -22/+11 |
| Give the login inputs explicit field types | Bryce Kwon | -1/+1 |
| Trim the comments and dead code across the tree | Bryce Kwon | -41/+25 |
| Let password managers fill the login form | Bryce Kwon | -4/+4 |
| Restyle the filter extension headers and markup | Bryce Kwon | -138/+158 |
| Move the cookie-signing secret out of the cachev2.3.0 | Bryce Kwon | -1/+1 |
| Trim the lua headers and fix the Scintillua notes | Bryce Kwon | -30/+3 |
| Fix cookie name escaping and stored hash trimming | Bryce Kwon | -1/+10 |
| Reorganize the tree into vendor/ and custom/ | Bryce Kwon | -0/+0 |
| Harden and reorganize the auth filters | Bryce Kwon | -147/+322 |
| Harden the auth filter headers and session cookie | Bryce Kwon | -5/+31 |
| Prune and rename the filter extensions | Bryce Kwon | -2/+15 |
| Reorganize into source, assets and libraries | Bryce Kwon | -0/+0 |
| filters: migrate from luacrypto to luaossl | Jason A. Donenfeld | -12/+19 |
| auth-filters: use crypt() in simple-authentication | Jason A. Donenfeld | -13/+6 |
| auth-filters: generate secret securely | Jason A. Donenfeld | -8/+42 |
| auth-filters: do not use HMAC-SHA1 | Jason A. Donenfeld | -2/+2 |
| simple-authentication.lua: tie secure cookies to field names | Jason A. Donenfeld | -13/+21 |
| simple-authentication: style | Jason A. Donenfeld | -1/+1 |
| auth: document tweakables in lua script | Jason A. Donenfeld | -0/+10 |
| auth: have cgit calculate login address | Jason A. Donenfeld | -6/+1 |
| auth: lua string comparisons are time invariant | Jason A. Donenfeld | -2/+2 |
| authentication: use hidden form instead of referer | Jason A. Donenfeld | -79/+121 |
| auth: add basic authentication filter framework | Jason A. Donenfeld | -0/+225 |
