sneak 0332641463 Test that logging out needs the form's CSRF token (part of #256) ...

A GET /logout, or a POST /logout without the CSRF token, must end no
login session; the generator page must carry a logout form with the
token; and after a logout from that form, a login opens the generator
page while a cookie copied before it is refused, also after a restart.

Model: opus-5-5

2026-10-15 17:00:58 +00:00

..

session_cookie_attributes_test.go

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

session_logout_test.go

Test that logging out needs the form's CSRF token (part of #256)

2026-10-15 17:00:58 +00:00

session_test.go

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

session.go

Say that losing the state directory forgets the latest logout (part of #256)

2026-10-15 17:00:58 +00:00