5 commits

Author	SHA1	Message	Date
moson-mo	22fe4a988a	fix: make AURSID a session cookie if "remember me" is not checked ... This should match more closely the expectation of a user. A session cookie should vanish on browser close and you thus they need to authenticate again. There is no need to bump the expiration of AURSID either, so we can remove that part. Signed-off-by: moson-mo <mo-son@mailbox.org>	2023-05-26 22:57:47 +02:00
Joakim Saario	9c6c13b78a	style: Run pre-commit	2022-08-22 22:40:45 +02:00
Kevin Morris	8e43932aa6	fix(doc): re-add Max-Age to list of secure cookie attributes ... Signed-off-by: Kevin Morris <kevr@0cost.org>	2022-08-18 14:57:42 -07:00
Joakim Saario	f10732960c	fix: Use SameSite=Lax on cookies	2022-08-18 23:42:33 +02:00
Kevin Morris	fb1fb2ef3b	feat: documentation for web authentication (login, verification) ... Signed-off-by: Kevin Morris <kevr@0cost.org>	2022-08-17 09:59:56 -07:00