Mechiel Lukkien afc47c8108

if webauth login cookie is missing, and forwarding was configured, hint that reverse proxy may be stripping path ...

the cookies are set with a specific path, because the webadmin, webaccount and
webmail cookies can be on the same domain (this is the default). if the reverse
proxy strips the path while forwarding, the browser won't set the cookie and
the login attempt will fail.

based on github issue #151 from naturalethic

2024-04-16 16:06:31 +02:00

..

accounts.go

replace http basic auth for web interfaces with session cookie & csrf-based auth

2024-01-05 10:48:42 +01:00

admin.go

prevent unicode-confusion in password by applying PRECIS, and username/email address by applying unicode NFC normalization

2024-03-09 09:20:29 +01:00

webauth.go

if webauth login cookie is missing, and forwarding was configured, hint that reverse proxy may be stripping path

2024-04-16 16:06:31 +02:00