Commit graph

11 commits

Author SHA1 Message Date
e5d3af1b51
Make redirect_uri verification optional because many IndieAuth clients don't implement it - show a stylish icon to convey whether the client was verified 2017-10-29 19:15:29 +11:00
221d548e4a
Give better 'me' normalisation to IndieAuth processing + Aadd a simple POST route for actually submitting the form 2017-10-29 14:39:30 +11:00
5690e4bfab
Add some niiiice h-x-app rendering to the authorisation page, so you can get a pretty view of who's trying to auth 2017-10-27 21:32:14 +11:00
a14d31e9d3
Improve the IndieAuth form: include the state parameter, show more information, etc. 2017-10-27 13:26:21 +11:00
93be2f5a32
Half-implement an IndieAuth authorization endpoint - it accepts the right parameters, verifies your client_id, and displays a prompt, but you can't actually approve the auth yet 2017-10-26 11:35:57 +11:00
0328ab97f6
Add support for ogp:url and the much nicer rel="canonical", as well as smarter title handling 2017-10-25 09:25:35 +11:00
7f17d50486
Enable django-otp-agents, for preserving OTP trust over time 2017-10-25 01:46:18 +11:00
3f3bb05a25
Add TOTP support with django-otp 2017-10-25 01:25:03 +11:00
9e2c6a6634
Mark login form fields as required 2017-10-25 00:30:44 +11:00
53fbc804bd
Whoops, use correct Bootstrap 4 classes to indicate invalid form fields 2017-10-25 00:30:09 +11:00
c210650ca7
Switch from using the admin login/logout pages to custom 'lemonauth' pages 2017-10-24 23:50:57 +11:00