Mechiel Lukkien 666f84edea

fix login for account names with non-ascii chars ...

we include the username in session cookie values. but cookie values must be ascii-only, go's net/http's drops bad values. the typical solution is to querystring-encode/decode the cookie values, which we'll now do.

problem found by arnt, thanks for reporting!

2024-04-11 23:11:31 +02:00

..

accounts.go

replace http basic auth for web interfaces with session cookie & csrf-based auth

2024-01-05 10:48:42 +01:00

admin.go

prevent unicode-confusion in password by applying PRECIS, and username/email address by applying unicode NFC normalization

2024-03-09 09:20:29 +01:00

webauth.go

fix login for account names with non-ascii chars

2024-04-11 23:11:31 +02:00