Commit Graph

2 Commits

Author SHA1 Message Date
Kyle Mahan b714d8db93 do not cache endpoints
Caching these would have allowed a malicious or buggy
auth/token_endpoint combination to give you credentials for another
user's domain name.
2015-05-31 09:16:40 -07:00
Kyle Mahan 474458c623 added authentication-only flow
- Added a separate 'authenticate' flow to provide explicit support for
  calling out to indieauth without requesting any sort of access
  token.
- Redirect_url is now determined automatically based on the
  authenticated_handler or authorized_handler annotations
2015-02-07 09:40:31 -08:00