summaryrefslogtreecommitdiffstats
path: root/templates/login.html.template
diff options
context:
space:
mode:
authorRose Hogenson <rosehogenson@posteo.net>2025-11-15 09:10:57 -0800
committerRose Hogenson <rosehogenson@posteo.net>2025-11-15 09:10:57 -0800
commite3c4636772547507448146e04c71de657a5d4105 (patch)
treefcfa9bf93f66940eb72a3c7135ae17c41e1be7f9 /templates/login.html.template
parenta14f5d08c264637639d518267a1397e137823fcf (diff)
downloadroseh.moe-e3c4636772547507448146e04c71de657a5d4105.tar.zst
Protect the reverse proxy with my hand-rolled auth
Defense in depth??
Diffstat (limited to 'templates/login.html.template')
-rw-r--r--templates/login.html.template4
1 files changed, 2 insertions, 2 deletions
diff --git a/templates/login.html.template b/templates/login.html.template
index f08caf7..368e099 100644
--- a/templates/login.html.template
+++ b/templates/login.html.template
@@ -4,8 +4,8 @@
{{if .Error}}
<p class="login-error">Incorrect password</p>
{{end}}
- <form class="password-form" action="/login" method="post">
- <input type="hidden" name="csrf-token" value="{{.CSRFToken}}">
+ <form class="password-form" action="{{.SelfURL}}/login" method="post">
+ <input type="hidden" name="redirect" value="{{.Redirect}}">
<label class="password-label" for="password">Enter password</label>
<input id="password" class="password" type="password" name="password" autofocus>
</form>