Expand description
The login endpoints and the extractor that guards everything behind them.
Only the browser goes through here. kasl agents keep presenting their bearer token to the ingest routes and are unaffected by any of this - a working agent must keep working across a server upgrade (ADR 0004).
Structs§
- Credentials
- Current
User - An authenticated person, taken as a handler argument.
- Identity
- Who the caller is, as the UI needs to know it.
Functions§
- login
- Signs in, or refuses without saying which half was wrong.
- logout
- Signs out of this session only.
- logout_
everywhere - Signs out everywhere - the answer to a laptop left on a train.
- me
- Who am I - what the SPA calls on load to decide whether to show the login.