2018-08-10 19:25:29 +03:00
|
|
|
<!DOCTYPE html>
|
|
|
|
|
<html>
|
|
|
|
|
<head>
|
2019-02-15 17:56:56 +03:00
|
|
|
<title>{{ config.title }}</title>
|
2018-10-03 12:26:41 +03:00
|
|
|
<link rel="stylesheet" href="/dist/main.css" />
|
2019-03-01 19:08:19 +03:00
|
|
|
<meta property="og:type" content="article" />
|
|
|
|
|
<meta property="og:title" content="{{ page.title }}" />
|
|
|
|
|
<meta property="article:modified_time" content="{{ (page.body.time / 1000) | date("c") }}" />
|
2019-02-18 11:15:03 +03:00
|
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" />
|
2018-08-10 19:25:29 +03:00
|
|
|
</head>
|
|
|
|
|
<body>
|
Authentication (#22)
* Authorization added
* added secret to password, md5 hashing, removed promise from verifyToken, deleted links when not authorized
* added dbinsert script
* turned verifyToken to middleware, added description for dbinsert, added hidden csrf field in auth form
* added middlewares, user model and controller
* JSDoc fix
* wrong password processing fix
* added comments to dbinsert script, moved salt and passHash to singe db doc
* Moved salt to .env, upgradedscript for generating password was, fixed comments and JSDoc
* Deleted using salt (now user is only one), changed verifying password to bcrypt.compare, added httpyOnly property to jwt cookie
2019-03-06 13:22:57 +03:00
|
|
|
{% include "components/header.twig" with res.locals.isAuthorized %}
|
2018-09-18 13:10:44 +03:00
|
|
|
<div class="docs">
|
|
|
|
|
<aside class="docs__aside">
|
|
|
|
|
{% include "components/aside.twig" %}
|
|
|
|
|
</aside>
|
|
|
|
|
<div class="docs__content">
|
|
|
|
|
<div class="docs__content-inner">
|
|
|
|
|
{% block body %}{% endblock %}
|
|
|
|
|
</div>
|
|
|
|
|
</div>
|
|
|
|
|
</div>
|
2018-09-19 01:47:32 +03:00
|
|
|
<script src="/dist/main.bundle.js"></script>
|
2018-08-10 19:25:29 +03:00
|
|
|
</body>
|
|
|
|
|
</html>
|
