The *POST /auth/login* operation authenticates a user given a username and password. The actual authentication is preformed by the daemon, since it is privileged and will be able to read `/etc/shadow` via the `pam_unix.so` module. Upon successful login, a signed cookie containing the username is set for the client. I'm not sure if any other information will need to be stored in the cookie yet. The cookie contains a JSON document that we can extend if necessary. |
||
---|---|---|
backend | ||
ui | ||
weywot.code-workspace |