diff options
author | William Carroll <wpcarro@gmail.com> | 2020-07-28T17·48+0100 |
---|---|---|
committer | William Carroll <wpcarro@gmail.com> | 2020-07-28T17·48+0100 |
commit | f051b0be0bc360c949b3b1913f13c4856ae317ca (patch) | |
tree | 0c01f2c7d62625fc710d965fdc430777c9d52442 /src/API.hs | |
parent | 90a521c78f036e024454df39c3e3cd1180c90a74 (diff) |
Check passwords in /login
TL;DR: - Since POST /login is more rigorous, our accounts.csv needs to contain validly hashed passwords; you can use tests/create-accounts.sh to create dummy accounts I still need to test the login flow and support: - Tracking failed attempts (three maximum) - Verifying accounts by sending emails to the users
Diffstat (limited to 'src/API.hs')
-rw-r--r-- | src/API.hs | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/API.hs b/src/API.hs index 9ae618cd3029..c84da5aef917 100644 --- a/src/API.hs +++ b/src/API.hs @@ -41,4 +41,4 @@ type API = -- Miscellaneous :<|> "login" :> ReqBody '[JSON] T.AccountCredentials - :> Post '[JSON] (Maybe T.Session) + :> Post '[JSON] NoContent |