7 Commits

Author	SHA1	Message	Date
jvoisin	d55b410800	Use constant-time comparison for anti-csrf tokens ... This is probably completely overkill, but since anti-csrf tokens are secrets, they should be compared against untrusted inputs in constant time.	2024-03-03 20:28:13 -08:00
Frédéric Guillot	bc317cfcd1	OIDC: Redirect to user home page after successful authentication	2023-11-07 21:21:56 +01:00
Florian Rüchel	62ef8ed57a	Add WebAuthn / Passkey integration ... This is a rebase of #1618 in which @dave-atx added WebAuthn support. Closes #1618	2023-11-05 18:57:35 +01:00
Frédéric Guillot	4cc99881d8	Refactor Batch Builder and prevent accidental and excessive refreshes from the web ui	2023-10-20 16:07:18 -07:00
Frédéric Guillot	c0e954f19d	Implement structured logging using log/slog package	2023-09-24 22:37:33 -07:00
Frédéric Guillot	ff5d391701	Add OAuth2 PKCE support	2023-09-02 22:11:47 -07:00
Frédéric Guillot	168a870c02	Move internal packages to an internal folder ... For reference: https://go.dev/doc/go1.4#internalpackages	2023-08-10 20:29:34 -07:00