Pierre-Olivier Mercier
1e1888625d
Integrate go-altcha to protect login, change password, lost password, and reset password forms against automated submissions. Serves the altcha widget JS from the embedded library, exposes a challenge endpoint, validates responses server-side with replay prevention, and updates the CSP to allow self-hosted scripts and WebAssembly. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
18 lines
886 B
HTML
18 lines
886 B
HTML
{{template "header"}}
|
|
<h1 class="display-4">Sign in <small class="text-muted">Don't have an account? <a href="/register">Create one!</a></small></h1>
|
|
|
|
<form method="post" action="login">
|
|
{{if .error}}<div class="alert alert-danger" role="alert">{{.error}}</div>{{end}}
|
|
<div class="form-group">
|
|
<input name="login" required="" class="form-control" id="input_0" type="text" placeholder="Login" autofocus>
|
|
</div>
|
|
<div class="form-group">
|
|
<input name="password" required="" class="form-control" id="input_1" type="password" placeholder="Current password">
|
|
</div>
|
|
<div class="form-group">
|
|
<altcha-widget challengeurl="altcha-challenge"></altcha-widget>
|
|
</div>
|
|
<button class="btn btn-primary" type="submit">Sign in</button>
|
|
<a href="/lost" class="btn btn-outline-secondary">Forgot your password?</a>
|
|
</form>
|
|
{{template "footer"}}
|