<feed xmlns='http://www.w3.org/2005/Atom'>
<title>szurubooru.git/client/html/user_tokens.tpl, branch master</title>
<subtitle>Fork of Szurubooru with patches for running on a modern system sans Docker
</subtitle>
<id>https://git.jakob.space/szurubooru.git/atom?h=master</id>
<link rel='self' href='https://git.jakob.space/szurubooru.git/atom?h=master'/>
<link rel='alternate' type='text/html' href='https://git.jakob.space/szurubooru.git/'/>
<updated>2018-03-25T20:23:29Z</updated>
<entry>
<title>server/auth: add token authentication</title>
<updated>2018-03-25T20:23:29Z</updated>
<author>
<name>ReAnzu</name>
<email>anzu@reanzu.com</email>
</author>
<published>2018-02-25T10:44:02Z</published>
<link rel='alternate' type='text/html' href='https://git.jakob.space/szurubooru.git/commit/?id=2a69f0193f9e5aa451e0dbcb8c89070f3e49ffa5'/>
<id>urn:sha1:2a69f0193f9e5aa451e0dbcb8c89070f3e49ffa5</id>
<content type='text'>
* Users are only authenticated against their password on login,
  and to retrieve a token
* Passwords are wiped from the GUI frontend and cookies
  after login and token retrieval
* Tokens are revoked at the end of the session/logout
* If the user chooses the "remember me" option,
  the token is stored in the cookie
* Tokens correctly delete themselves on logout
* Tokens can expire at user-specified date
* Tokens have their last usage time
* Tokens can have user defined descriptions
* Users can manage login tokens in their account settings
</content>
</entry>
</feed>
