21 Commits (41d490ea80522e95c1d52cb5d2695f223c6fac02)

Author SHA1 Message Date
Danielle McLean 41d490ea80
Put the shortcuts for returning 40* responses into lemoncurry.utils 5 years ago
Danielle McLean 06278935b6
Add support for selecting scopes during IndieAuth's 'code' type 5 years ago
Danielle McLean 387e7d859c
Smarter handling of IndieAuth code verification, including verifying the response type is correct 5 years ago
Danielle McLean bfa7f68edc
Make POST /indie/auth return a 403 if parameters are missing, rather than a 500 5 years ago
Danielle McLean e5d3af1b51
Make redirect_uri verification optional because many IndieAuth clients don't implement it - show a stylish icon to convey whether the client was verified 5 years ago
Danielle McLean acce72e90e
Implement the auth-code verification step, producing a complete IndieAuth implementation for 'id' type (nothing for 'code' type yet tho) 5 years ago
Danielle McLean 8b4a14ffa3
On approving an IndieAuth request, actually generate an auth code and redirect 5 years ago
Danielle McLean 221d548e4a
Give better 'me' normalisation to IndieAuth processing + Aadd a simple POST route for actually submitting the form 5 years ago
Danielle McLean e2e21f4afa
Make sure IndieAuth is agnostic to whether the 'me' parameter has a trailing slash or not 5 years ago
Danielle McLean 5690e4bfab
Add some niiiice h-x-app rendering to the authorisation page, so you can get a pretty view of who's trying to auth 5 years ago
Danielle McLean a14d31e9d3
Improve the IndieAuth form: include the state parameter, show more information, etc. 5 years ago
Danielle McLean 93be2f5a32
Half-implement an IndieAuth authorization endpoint - it accepts the right parameters, verifies your client_id, and displays a prompt, but you can't actually approve the auth yet 5 years ago
Danielle McLean d234fd942d
Refactor the login views into their own modules, because I'm about to implement IndieAuth and it's gonna be kinda big 5 years ago
Danielle McLean 0328ab97f6
Add support for ogp:url and the much nicer rel="canonical", as well as smarter title handling 5 years ago
Danielle McLean 7f17d50486
Enable django-otp-agents, for preserving OTP trust over time 5 years ago
Danielle McLean 3f3bb05a25
Add TOTP support with django-otp 5 years ago
Danielle McLean 492ba744fc
Adjust breadcrumb label for lemonauth:login to match other labels 5 years ago
Danielle McLean 9e2c6a6634
Mark login form fields as required 5 years ago
Danielle McLean 53fbc804bd
Whoops, use correct Bootstrap 4 classes to indicate invalid form fields 5 years ago
Danielle McLean 84a34c89e7
Enable breadcrumb support, use it on the login view 5 years ago
Danielle McLean c210650ca7
Switch from using the admin login/logout pages to custom 'lemonauth' pages 5 years ago