Skip to content

Browser login without an SSH key !261

merged merged by cmc on 2026-09-05 04:20 UTC · krz/gitbay:email-login into main

e2e: a link minted before suspension opens nothing

cmc · 2026-09-05 04:04 UTC

Verified · cmc c7a2a1a6ab
web: a suspended account cannot mail itself a session

cmc · 2026-09-05 04:02 UTC

Verified · cmc cfc0bc7785
web: close the login-link timing side channel, cover the username path

cmc · 2026-09-05 03:44 UTC

Verified · cmc 3f7a91e284
web: request a login link by email

cmc · 2026-09-05 03:35 UTC

Verified · cmc 090dc2eb20
httpd: session cookie is SameSite=Lax

cmc · 2026-09-05 03:27 UTC

Verified · cmc 63ec505eda
store: count login tokens per account, indexed

cmc · 2026-09-05 03:26 UTC

Verified · cmc 9a58f1933f
Plan: confirm the user lookup, fix the index check

cmc · 2026-09-05 03:17 UTC

Verified · cmc cc3550cfbb
Plan: browser login without an SSH key

cmc · 2026-09-05 03:16 UTC

Verified · cmc 965735bfbc
Design: name the store file, specify the empty identifier

cmc · 2026-09-05 03:10 UTC

Verified · cmc 8c430f898a
Design: browser login without an SSH key

cmc · 2026-09-05 03:10 UTC

Verified · cmc b24bfe450b