| Age | Commit message (Expand) | Author | Lines |
|---|
| Write a session's expiry in whole seconds |  Bryce Kwon | -0/+5 |
| Say what really differs between the auth filters | Bryce Kwon | -3/+4 |
| Drop auth guards for input cgit never sends | Bryce Kwon | -8/+2 |
| Strip control characters from the location alone | Bryce Kwon | -9/+6 |
| Drop the URL helpers' guards that cannot fire | Bryce Kwon | -9/+1 |
| Keep only the request fields the auth filters read | Bryce Kwon | -21/+5 |
| Take a signed cookie apart with one match | Bryce Kwon | -41/+5 |
| Say when a login fails, and line up the form | Bryce Kwon | -8/+22 |
| Claim and test Lua 5.5 for every extension | Bryce Kwon | -3/+3 |
| Say that a protected repository stays on the index | Bryce Kwon | -0/+4 |
| Name the auth cookie __Host- where it can be | Bryce Kwon | -2/+10 |
| End a session when its account's hash changes | Bryce Kwon | -29/+44 |
| Load auth libraries only when a request needs one | Bryce Kwon | -6/+10 |
| Say which hash kinds each system's crypt checks | Bryce Kwon | -2/+13 |
| Spend a missing account's login on a real hash | Bryce Kwon | -9/+14 |
| Turn down passwords past 256 bytes unchecked | Bryce Kwon | -1/+5 |
| Read the auth cookie in linear time | Bryce Kwon | -5/+21 |
| Unify the docs, samples and extensions | Bryce Kwon | -1/+1 |
| Clean up the whole tree | Bryce Kwon | -22/+11 |
| Give the login inputs explicit field types | Bryce Kwon | -1/+1 |
| Trim the comments and dead code across the tree | Bryce Kwon | -41/+25 |
| Let password managers fill the login form | Bryce Kwon | -4/+4 |
| Restyle the filter extension headers and markup | Bryce Kwon | -138/+158 |
| Move the cookie-signing secret out of the cache v2.3.0 | Bryce Kwon | -1/+1 |
| Trim the lua headers and fix the Scintillua notes | Bryce Kwon | -30/+3 |
| Fix cookie name escaping and stored hash trimming | Bryce Kwon | -1/+10 |
| Reorganize the tree into vendor/ and custom/ | Bryce Kwon | -0/+528 |
