Adam b1bbd4b2cf index: persist session IDs as appropriate ...

There seems to be no way to revoke a session ID, though. Revoking the
originating OAuth tokens doesn't work. What happens if someone gets my
session ID? Do they just have permanent access to my account now?

The "legacy" login flow doesn't have this issue because its sessions
are one-time use obtained on game launch instead of persisting. That
seems like a far better system to me.

2023-07-30 17:24:38 +01:00

..

game_auth.html

html: add actual background colours

2023-07-29 15:48:25 +01:00

index.html

index: persist session IDs as appropriate

2023-07-30 17:24:38 +01:00

oauth.html

html: add actual background colours

2023-07-29 15:48:25 +01:00