12 commits

Author	SHA1	Message	Date
Danielle McLean	06278935b6	Add support for selecting scopes during IndieAuth's 'code' type	2017-11-01 13:27:55 +11:00
Danielle McLean	e5d3af1b51	Make redirect_uri verification optional because many IndieAuth clients don't implement it - show a stylish icon to convey whether the client was verified	2017-10-29 19:15:29 +11:00
Danielle McLean	221d548e4a	Give better 'me' normalisation to IndieAuth processing + Aadd a simple POST route for actually submitting the form	2017-10-29 14:39:30 +11:00
Danielle McLean	5690e4bfab	Add some niiiice h-x-app rendering to the authorisation page, so you can get a pretty view of who's trying to auth	2017-10-27 21:32:14 +11:00
Danielle McLean	a14d31e9d3	Improve the IndieAuth form: include the state parameter, show more information, etc.	2017-10-27 13:26:21 +11:00
Danielle McLean	93be2f5a32	Half-implement an IndieAuth authorization endpoint - it accepts the right parameters, verifies your client_id, and displays a prompt, but you can't actually approve the auth yet	2017-10-26 11:35:57 +11:00
Danielle McLean	0328ab97f6	Add support for ogp:url and the much nicer rel="canonical", as well as smarter title handling	2017-10-25 09:25:35 +11:00
Danielle McLean	7f17d50486	Enable django-otp-agents, for preserving OTP trust over time	2017-10-25 01:46:18 +11:00
Danielle McLean	3f3bb05a25	Add TOTP support with django-otp	2017-10-25 01:25:03 +11:00
Danielle McLean	9e2c6a6634	Mark login form fields as required	2017-10-25 00:30:44 +11:00
Danielle McLean	53fbc804bd	Whoops, use correct Bootstrap 4 classes to indicate invalid form fields	2017-10-25 00:30:09 +11:00
Danielle McLean	c210650ca7	Switch from using the admin login/logout pages to custom 'lemonauth' pages	2017-10-24 23:50:57 +11:00