Service to watch for creation of accounts on a PDS, and automatically add them as collaborators to a Tangled repository.

fix(server): let the sign-in form redirect to the authorization server #8

Merged permadeath.com
targeting main from orbit-nodachi/login-form-action
Merged opened by and assigned to permadeath.com
targeting main from orbit-nodachi/login-form-action

The sign-in form submits to /login, which answers with a redirect to the owner's authorization server. CSP form-action also governs where a form submission redirects, so form-action 'self' made the browser block that redirect. It is now form-action 'self' https:. The header test asserts it.

🤖 Generated with Claude Code

Commits 0