From e3c4636772547507448146e04c71de657a5d4105 Mon Sep 17 00:00:00 2001
From: Rose Hogenson <rosehogenson@posteo.net>
Date: Sat, 15 Nov 2025 09:10:57 -0800
Subject: Protect the reverse proxy with my hand-rolled auth

Defense in depth??
---
 templates/login.html.template | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'templates')

diff --git a/templates/login.html.template b/templates/login.html.template
index f08caf7..368e099 100644
--- a/templates/login.html.template
+++ b/templates/login.html.template
@@ -4,8 +4,8 @@
 	{{if .Error}}
 		<p class="login-error">Incorrect password</p>
 	{{end}}
-	<form class="password-form" action="/login" method="post">
-		<input type="hidden" name="csrf-token" value="{{.CSRFToken}}">
+	<form class="password-form" action="{{.SelfURL}}/login" method="post">
+		<input type="hidden" name="redirect" value="{{.Redirect}}">
 		<label class="password-label" for="password">Enter password</label>
 		<input id="password" class="password" type="password" name="password" autofocus>
 	</form>
-- 
cgit v1.3.1