The *POST /auth/login* operation authenticates a user given a username and password. The actual authentication is preformed by the daemon, since it is privileged and will be able to read `/etc/shadow` via the `pam_unix.so` module. Upon successful login, a signed cookie containing the username is set for the client. I'm not sure if any other information will need to be stored in the cookie yet. The cookie contains a JSON document that we can extend if necessary. |
||
---|---|---|
.. | ||
src | ||
.gitignore | ||
Cargo.lock | ||
Cargo.toml | ||
rustfmt.toml |