9 Commits

Author	SHA1	Message	Date
Eric Schultz	655b3ed883	Use samesite=strict for the login session cookie	2019-09-16 03:00:34 -05:00
Eric Schultz	01bd18b46f	remove leading dot in login cookie domain	2019-09-08 16:45:57 -05:00
Eric Schultz	0b765531fe	logon session uses a unique name now	2019-09-07 01:42:06 -05:00
Eric Schultz	facb1fbe86	only secure cookies when using https	2019-09-06 13:37:03 -05:00
Eric Schultz	b4a60ddf73	keep session alive during auth checks	2019-09-06 13:28:19 -05:00
Eric Schultz	464a187d42	use a valid shortcut icon for the login page	2019-09-03 23:15:50 -05:00
Eric Schultz	32b31a472b	allow access to font-cases for unauthorized users	2019-09-03 20:30:56 -05:00
Eric Schultz	8085abdf38	improve locking down unauthorized folders	2019-08-30 14:31:23 -05:00
Tom Mortensen	4c6c950042	Support forms-based authentication for login/logout. ... Username 'admin' is alias for 'root'.	2019-08-17 13:08:41 -07:00