commit 3873b43297cb7ef0d0af0ebe9140c6aae5847a21
parent 11a55a987015fb870342b7bfbd23cdeec9363f03
Author: uriel@engel.se.cat-v.org <unknown>
Date: Sat, 14 Mar 2009 14:32:22 +0100
Add comment on auth docs to review in the futre.
Diffstat:
1 file changed, 1 insertion(+), 0 deletions(-)
diff --git a/bin/werclib.rc b/bin/werclib.rc
@@ -14,6 +14,7 @@ fn get_lib_file {
fn template { awk -f bin/template.awk $* | rc $rcargs }
# Auth code
+# TODO: check http://cookies.lcs.mit.edu/pubs/webauth:tr.pdf
allowed_user_chars='[a-zA-Z0-9_]'
# Cookie format: WERC_USER: name:timestamp:hash(name.timestamp.password)
# login_user can't be used from a template because it sets a cookie